Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KN7ucirptLSPs4plHBExKQ6psVM.roa
File: KN7ucirptLSPs4plHBExKQ6psVM.roa (raw, json)
Hash identifier: WlDjEVQ2sYSRlkGZKklsRUq05PnoYrcPvDjvISm0Vkk=
Subject key identifier: 28:DE:EE:72:2A:E9:B4:B4:8F:B3:8A:65:1C:11:31:29:0E:A9:B1:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0C7706E00392893D5E4D38D9665ABF18D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KN7ucirptLSPs4plHBExKQ6psVM.roa
Signing time: Tue 22 Sep 2026 04:47:09 +0000
ROA not before: Tue 22 Sep 2026 04:47:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201784
IP address blocks: 31.57.168.0/23 maxlen: 24
31.57.168.0/24 maxlen: 24
31.57.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:70:6e:00:39:28:93:d5:e4:d3:8d:96:65:ab:f1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 22 04:47:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28deee722ae9b4b48fb38a651c1131290ea9b153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:ee:1f:72:33:af:4f:da:82:e1:0f:d6:29:
99:8d:7d:64:1f:d4:04:d1:a2:3d:a7:77:98:1d:b3:
b4:98:cb:ef:50:2b:4a:3d:7b:28:51:ca:30:cf:4c:
bb:d7:9d:f9:a2:65:48:23:8e:f7:c5:64:a6:d5:21:
a9:56:17:81:d8:eb:16:2b:61:8b:65:7e:6b:21:46:
26:32:6a:d0:a3:24:29:73:c1:6f:91:ac:78:3e:e8:
4a:80:30:24:f6:18:ce:f0:a5:12:ff:64:b1:c4:a2:
ed:4c:7c:f7:85:65:de:80:ec:5e:23:a4:eb:69:c0:
65:88:2f:64:02:fd:c1:fc:dd:87:00:9b:6f:05:6f:
41:a5:ba:eb:a7:40:4a:cf:07:50:c8:e4:ab:fa:e4:
c4:58:5f:8a:b0:79:23:17:b1:cb:ef:3f:b8:49:64:
76:89:0d:17:ca:ca:67:d6:d8:9a:e5:a2:1d:86:ed:
29:bd:f3:a7:19:77:f0:4f:c8:53:9e:06:51:ef:ab:
eb:3a:fe:92:34:40:c5:8a:62:38:f0:fa:c9:34:58:
fd:91:05:c0:c1:1c:a7:23:dd:cf:81:d8:c5:65:d4:
e2:8d:61:b0:04:fb:6f:e5:98:0e:be:6c:a0:ba:a2:
9d:0d:8f:b3:3f:4a:17:fa:ac:2e:3a:3b:4d:85:9b:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:EE:72:2A:E9:B4:B4:8F:B3:8A:65:1C:11:31:29:0E:A9:B1:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KN7ucirptLSPs4plHBExKQ6psVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.168.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:88:88:11:9c:b7:95:d1:87:2d:0e:3e:e9:dc:0f:ca:db:2d:
4b:03:7d:57:2e:37:06:95:2d:01:83:2a:92:f1:37:1d:51:36:
97:0d:a4:15:2b:54:fb:41:e3:b6:77:8b:3e:63:48:c6:36:c6:
16:71:8c:60:bc:e5:37:d0:8b:9d:fb:35:f8:e6:8d:c2:4d:43:
a4:e6:ee:8f:e6:1c:4b:72:80:a7:6a:c6:d9:8e:0a:6d:8c:61:
af:6c:e0:d0:60:6c:47:67:da:24:f5:17:63:de:dd:fa:c6:94:
8e:1a:be:31:7f:16:d3:c9:fb:ab:85:be:b3:ff:ec:96:b8:e2:
ed:45:cd:68:97:10:99:e8:80:48:3d:74:26:d8:c1:e4:97:d3:
03:8c:29:bf:83:42:75:e2:f1:f2:bd:30:6c:5b:f2:62:29:19:
97:66:9b:10:04:05:4a:71:b8:b6:16:6d:2b:e1:bf:24:c9:87:
fe:bc:68:ae:65:9b:a5:f5:8e:41:1e:1a:d3:87:7b:0b:6d:42:
1b:f8:5d:8a:46:45:63:00:fb:31:b6:c5:e5:35:68:19:4e:98:
32:e5:47:ab:b5:5e:aa:36:8e:ec:80:f2:e8:1e:29:bd:55:06:
b9:16:63:84:6e:96:e9:00:6c:67:fe:35:29:44:4f:79:84:f3:
40:81:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:33 2026 by rpki-client