Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gu663KPccVQGAQgypFjy6S0Q1Bc.roa
File: Gu663KPccVQGAQgypFjy6S0Q1Bc.roa (raw, json)
Hash identifier: jIi+C1C+HhttyjFksH75KCpkVnwYuEjyK9BEzopk+k4=
Subject key identifier: 1A:EE:BA:DC:A3:DC:71:54:06:01:08:32:A4:58:F2:E9:2D:10:D4:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C6A4470B65557878DDE3C75AFB3D887D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gu663KPccVQGAQgypFjy6S0Q1Bc.roa
Signing time: Tue 10 Nov 2026 18:06:57 +0000
ROA not before: Tue 10 Nov 2026 18:06:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 31.56.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:a4:47:0b:65:55:78:78:dd:e3:c7:5a:fb:3d:88:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 18:06:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aeebadca3dc715406010832a458f2e92d10d417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:55:ca:34:5e:9b:dc:c7:e0:77:f2:3a:72:
50:35:f2:9e:51:5a:a6:f2:84:56:67:2f:81:88:ad:
35:ad:d2:4e:5f:28:96:64:2c:66:58:4c:15:18:d1:
f6:9c:ea:69:ec:d3:5d:c1:ae:21:4f:4c:69:0c:61:
b3:fd:99:82:b1:79:f2:e8:56:8f:83:2d:29:33:2b:
3c:a8:ee:04:99:bb:26:8b:ea:0d:76:8a:e4:78:c8:
d4:0d:e5:a7:17:69:40:3e:43:0e:c7:14:9e:f5:f3:
41:6c:d4:41:15:c6:35:19:14:c0:3f:fb:a4:c7:ea:
86:9c:9f:ac:e1:29:81:dc:0f:e7:1e:7d:f6:c5:cf:
56:c1:82:4c:c0:c1:4a:40:0e:31:36:66:be:6f:93:
58:ed:82:f4:7e:b0:e3:54:a8:9b:94:bd:04:d8:75:
66:13:ee:23:39:69:cb:01:e5:e1:74:c4:2d:5e:76:
ca:3f:0e:50:9d:fd:10:99:7b:20:83:69:84:ac:da:
d5:ca:50:47:89:82:9f:91:35:6b:d9:e2:93:f7:62:
06:57:c4:9d:7d:59:a8:3d:1b:dd:20:4a:4f:46:da:
65:8e:bc:c7:67:ce:18:49:df:58:de:32:13:c3:e0:
46:67:cc:31:9d:d1:17:e6:bb:4a:c1:32:ce:3c:e8:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:BA:DC:A3:DC:71:54:06:01:08:32:A4:58:F2:E9:2D:10:D4:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gu663KPccVQGAQgypFjy6S0Q1Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7b:be:87:c5:f5:6b:60:a6:e3:f6:6e:2f:d6:14:d2:23:32:
70:4a:c5:c0:c8:e8:38:4f:71:18:be:c3:69:71:2c:3c:89:ae:
09:f7:ca:88:93:77:22:14:79:c3:9a:a7:00:4d:7a:80:68:14:
fc:7a:6a:cd:89:89:b2:75:91:1f:18:0c:a3:51:59:4c:d0:32:
66:67:aa:b2:a3:81:3a:00:18:5e:c7:20:45:61:fe:bd:6e:ce:
5d:1a:12:cd:a4:7b:d9:40:4e:b9:fa:d7:49:33:cd:2d:e4:d7:
e8:7e:37:c9:5d:43:02:f7:4d:54:56:d6:bc:d5:76:80:2a:55:
96:d2:7c:65:55:5e:03:6e:d3:8a:f9:8f:fc:d2:26:59:24:6e:
48:14:68:ba:d9:95:37:ce:64:5e:47:ee:c9:ac:19:7e:51:4d:
c6:54:09:1c:d7:5b:f9:08:2e:60:66:6f:7e:45:e1:ab:bb:6c:
f7:94:86:aa:f8:f8:9e:1a:ca:f4:0e:79:0d:a0:d8:13:41:dd:
f7:5b:b2:69:e9:cc:8a:f5:0a:7d:b6:00:d8:00:bf:46:5a:5f:
cf:d3:5e:a5:ea:1c:15:31:11:50:a3:57:4b:c1:07:a2:ab:5b:
23:5c:1b:49:21:43:31:83:ec:2d:7e:c1:41:3a:7b:8b:51:14:
92:84:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:31:53 2026 by rpki-client