Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRJdcOzawWVe2Xhi_DGn2Df09vY.roa
File: NRJdcOzawWVe2Xhi_DGn2Df09vY.roa (raw, json)
Hash identifier: /W2Y8Ixdn66ogHdeRqkgbspaNQbRh+cn9As+7/29VBc=
Subject key identifier: 35:12:5D:70:EC:DA:C1:65:5E:D9:78:62:FC:31:A7:D8:37:F4:F6:F6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F6180963D479728B2E945A6B573C9883D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRJdcOzawWVe2Xhi_DGn2Df09vY.roa
Signing time: Tue 14 Jul 2026 16:40:44 +0000
ROA not before: Tue 14 Jul 2026 16:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211826
IP address blocks: 31.57.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:80:96:3d:47:97:28:b2:e9:45:a6:b5:73:c9:88:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 14 16:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=35125d70ecdac1655ed97862fc31a7d837f4f6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:16:92:09:50:2a:40:07:5e:a5:4c:53:7b:
fd:f0:21:0f:6f:59:d6:1a:a5:bf:57:01:a4:17:ea:
2b:06:ae:77:22:bd:6b:ce:22:41:29:fd:68:70:f0:
37:0d:de:7a:4f:29:23:e9:6d:d6:b6:d7:c7:00:f4:
3d:11:3b:6e:b6:f9:45:df:64:bf:3b:4d:6a:e3:cc:
b7:70:fd:80:5a:8d:19:b9:8e:52:4c:aa:00:a2:c0:
87:36:5f:c9:af:b0:56:f3:66:21:58:ee:40:89:21:
40:17:38:ea:2a:9f:a7:8f:6e:f2:6d:a5:96:b0:50:
89:5b:1c:f2:06:e2:fa:fb:2f:09:7a:10:ab:ff:b7:
59:c4:40:f8:86:a9:68:48:3b:87:29:7c:84:d5:b6:
b9:58:9b:eb:71:ea:6c:79:37:cf:b2:6a:aa:bd:4c:
90:88:93:c3:8c:ad:16:76:2e:b4:50:f2:fa:da:0c:
6b:5c:eb:0b:2e:90:9b:76:d1:bc:7e:a9:65:91:6e:
4e:04:0b:95:50:38:a1:51:e7:86:a3:94:a5:fd:c3:
d0:70:63:1f:00:d3:9b:d3:a5:42:40:ec:83:2c:fa:
ef:48:8f:c7:38:f0:39:61:bb:d5:ac:77:f7:bd:45:
b3:87:d1:4e:2c:d0:68:47:fa:23:98:11:42:eb:bf:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:12:5D:70:EC:DA:C1:65:5E:D9:78:62:FC:31:A7:D8:37:F4:F6:F6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NRJdcOzawWVe2Xhi_DGn2Df09vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.173.0/24
Signature Algorithm: sha256WithRSAEncryption
81:55:56:9d:a7:76:b8:87:a2:fc:68:aa:a8:0f:d6:ec:a3:eb:
17:62:94:e1:ea:85:51:58:42:f0:6b:f4:36:0a:a8:df:e8:dc:
84:ef:e6:e9:73:08:4b:d1:6e:fc:2a:b2:1b:7e:f1:46:c2:10:
30:85:6c:14:78:9c:46:2c:60:03:46:07:0d:01:fd:e5:ca:9f:
12:e4:40:3a:b4:39:c4:fc:da:f7:36:b5:90:31:39:cc:8b:3e:
e7:f6:20:94:03:c7:6d:89:5f:14:1d:f6:74:97:de:b7:bb:c7:
10:0f:3c:b2:72:d7:19:18:1b:d9:ff:8f:6b:22:89:c0:dc:e9:
74:53:52:70:06:f9:b6:37:fd:65:de:d6:fd:8d:0d:26:7d:47:
bf:94:0c:62:f8:44:a7:1b:57:62:01:8c:52:92:ae:49:ba:f4:
65:50:98:5c:d5:77:d1:03:ca:c3:f7:c4:d8:48:4c:21:b5:59:
0b:92:0f:42:9a:c2:59:a5:42:77:6a:30:94:39:10:6f:83:12:
17:ae:a6:cb:3b:c2:bd:8c:12:5a:11:89:de:ca:fb:ca:1e:f9:
c8:27:b9:37:7e:c8:bd:e6:91:8b:77:86:73:9c:6f:20:ef:cb:
81:af:59:f6:0c:06:fc:98:dc:42:18:43:1a:e5:84:48:ce:8a:
52:c6:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:03 2026 by rpki-client