Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ONB6bdyVNvqldZv2k4_MCK2cpX4.roa
File: ONB6bdyVNvqldZv2k4_MCK2cpX4.roa (raw, json)
Hash identifier: oJu6E4CkQ9uEMnwzviw0H/gaVyZU1QGQBSJs/4y06RU=
Subject key identifier: 38:D0:7A:6D:DC:95:36:FA:A5:75:9B:F6:93:8F:CC:08:AD:9C:A5:7E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E03023ABBF5EE8FD4565978A3C3ABC886
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ONB6bdyVNvqldZv2k4_MCK2cpX4.roa
Signing time: Thu 07 May 2026 15:15:38 +0000
ROA not before: Thu 07 May 2026 15:15:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 31.57.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:03:02:3a:bb:f5:ee:8f:d4:56:59:78:a3:c3:ab:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 7 15:15:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38d07a6ddc9536faa5759bf6938fcc08ad9ca57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:b9:d3:b6:cb:8b:1c:ac:a7:fb:08:36:2c:
ae:e1:6e:fc:f7:7b:3a:7c:3b:8b:d7:cb:c8:3d:5b:
df:f5:0e:41:e1:b3:a6:1b:bd:82:60:ab:da:63:aa:
06:94:47:25:8c:c5:7f:91:01:ce:e4:74:d1:4e:49:
85:fe:a8:71:e5:dd:1a:a1:b1:fe:7c:44:7b:b0:3a:
16:52:53:15:b4:6d:d8:00:20:94:8f:33:b1:f0:60:
a9:42:f4:d9:f9:d2:5f:aa:cd:f6:ea:8c:e7:b0:91:
07:85:4b:0c:92:ec:a0:1c:07:47:ad:fd:80:7e:fe:
c0:c2:be:e3:96:d4:d4:b9:6a:83:ab:17:c0:1b:08:
df:c2:bf:94:d2:c1:4e:3c:e7:b2:c1:bc:b5:88:06:
d4:2c:4d:19:48:84:a2:eb:3f:5d:00:eb:c5:08:d7:
33:2e:b2:fd:e2:91:c6:41:5a:ca:99:16:bc:8e:a6:
d3:0d:4e:2f:38:22:ad:da:04:01:23:65:77:77:a4:
f0:13:7c:5a:79:65:52:9e:6b:b3:54:83:83:39:9d:
b3:1c:25:5c:30:a0:17:fd:b7:79:60:45:8f:f9:13:
7d:78:52:e6:43:6d:e6:4d:b0:bb:75:ac:dc:30:a9:
3e:e2:32:3b:57:b2:8b:ad:aa:97:bc:0f:5d:87:51:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:7A:6D:DC:95:36:FA:A5:75:9B:F6:93:8F:CC:08:AD:9C:A5:7E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ONB6bdyVNvqldZv2k4_MCK2cpX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.96.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8f:be:96:3d:10:e5:68:85:4a:77:8e:c4:01:a0:c7:14:0f:
44:e4:63:57:84:5e:74:90:f0:d7:ce:21:78:fd:74:d0:c5:42:
88:56:05:63:d2:c1:61:a0:a7:68:b5:71:97:0c:ff:ae:6c:ab:
03:2c:0f:6b:21:da:b2:ac:01:ae:5b:8e:ab:ea:06:bc:83:39:
f2:59:b8:4c:96:ed:43:01:a2:8d:22:71:27:ca:f1:8d:15:e0:
a9:35:ca:9d:ba:a4:ad:8b:4e:f2:2f:66:bd:36:b5:9e:be:c8:
93:bb:91:ec:dd:15:3f:c3:95:99:4f:35:3d:6d:26:99:c6:61:
a0:40:d0:ba:fc:5c:29:79:ed:97:15:64:bc:ab:c7:e1:69:02:
2f:3d:cd:04:94:9c:b7:0e:12:43:f6:33:89:db:c2:60:59:d1:
b8:df:cf:2f:3c:f1:7f:9b:0a:40:8d:93:2a:f0:d4:f6:ee:91:
d2:2c:fd:43:7e:99:13:f0:f1:c5:57:91:f1:0a:28:f3:d3:7a:
44:dd:7b:84:05:29:ef:ee:15:3e:fe:c6:e2:53:8a:02:1e:f6:
f6:52:f9:df:9c:0b:45:c2:f6:f3:8c:20:75:12:29:79:9c:f6:
86:13:3f:42:8f:98:9f:44:d2:87:57:47:ea:b7:54:bf:60:2a:
28:92:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:06:40 2026 by rpki-client