Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JD9zFoNCOuF9P4kcuc-rAG7Geho.roa
File: JD9zFoNCOuF9P4kcuc-rAG7Geho.roa (raw, json)
Hash identifier: NGe7SmObLt485lNSw97jBDR11ytRdoxsHLU8aRY/3tU=
Subject key identifier: 24:3F:73:16:83:42:3A:E1:7D:3F:89:1C:B9:CF:AB:00:6E:C6:7A:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CC41F403B4921C44187F29EC92A52C5EA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JD9zFoNCOuF9P4kcuc-rAG7Geho.roa
Signing time: Fri 06 Mar 2026 17:08:28 +0000
ROA not before: Fri 06 Mar 2026 17:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 31.56.84.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c4:1f:40:3b:49:21:c4:41:87:f2:9e:c9:2a:52:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 6 17:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=243f731683423ae17d3f891cb9cfab006ec67a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:8c:1d:e5:40:bf:d4:e3:da:75:60:4f:04:
69:e1:13:8c:56:5c:8a:42:92:3d:56:f5:b4:82:91:
fc:58:1c:8d:f0:aa:4f:70:45:80:6f:e4:b0:78:12:
52:94:7f:39:5c:82:a0:c2:02:f8:f6:ba:ed:7d:10:
82:fb:e2:73:96:49:18:ed:f7:cf:a7:fb:4a:56:2b:
04:56:35:c9:62:0b:78:84:fe:f1:18:ab:77:04:2d:
ce:6a:e3:3c:69:cc:0a:e7:85:c5:0f:91:d2:6e:fb:
60:07:95:5f:87:e9:08:68:c2:46:59:19:4c:72:cf:
1c:d3:ee:26:f0:46:a9:3b:ae:c9:57:62:f4:55:fc:
ca:ff:0b:89:f2:a5:61:65:47:3f:23:fd:a4:66:fb:
a7:16:11:c9:66:f3:5f:ce:fa:3d:9d:5a:83:be:2a:
46:bb:39:12:4f:71:66:e7:1e:df:aa:d5:b2:97:3b:
3f:bf:63:e3:1c:02:d8:0d:dd:c2:77:29:9a:e1:ce:
66:65:a4:06:aa:54:81:c6:ce:42:71:73:fb:bc:1a:
51:6f:fb:86:28:e4:73:ed:b3:d8:1c:29:c4:06:61:
1d:b2:b6:cf:90:85:f1:59:c2:e4:39:40:f7:59:f4:
fc:e4:4c:31:fa:f7:fc:19:a5:c5:72:cb:f8:31:31:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3F:73:16:83:42:3A:E1:7D:3F:89:1C:B9:CF:AB:00:6E:C6:7A:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JD9zFoNCOuF9P4kcuc-rAG7Geho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.84.0/24
31.57.142.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:19:96:80:b7:52:9f:d9:ba:8b:fe:5b:29:68:0e:2a:07:a0:
dd:b9:82:d9:3b:18:73:82:69:44:24:6c:05:b2:f0:e4:3a:95:
45:ff:8b:38:86:9b:75:b1:86:06:17:f1:0f:8b:51:df:7a:75:
c6:d7:ce:ee:1a:ca:b7:3e:87:71:5f:b9:de:67:6a:74:e8:0c:
48:69:86:9b:8d:fc:50:53:39:a5:86:ea:dd:10:9f:79:50:9a:
be:ff:09:22:53:15:52:5d:01:0f:21:85:f0:b9:eb:40:67:53:
be:f9:98:db:e7:30:37:2e:c1:37:13:96:10:16:cd:b7:d6:cf:
1d:04:e0:91:3f:05:ed:eb:ab:4b:69:bc:d3:b7:cf:b4:02:7e:
fa:25:ea:34:b4:58:9d:25:5b:1c:a3:c6:44:a5:a9:97:b6:70:
b6:76:2f:4c:ce:6f:e4:f4:ee:77:32:27:34:87:60:40:94:d6:
a5:e0:f3:0c:6b:c4:d5:ef:cd:98:4c:7d:e7:f3:37:01:0a:be:
e4:c3:24:49:09:5f:61:fe:f7:b0:69:15:4f:9d:e6:c0:3f:c4:
ce:d6:08:f3:52:a6:bd:03:ef:1e:7b:9e:20:18:38:61:24:1a:
a1:c3:08:41:b2:aa:15:ee:b1:e1:f5:ce:c9:14:b3:25:f7:6f:
e0:be:f8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:27 2026 by rpki-client