Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RSSDW5HakwFQnDIefWik_03DT64.roa
File: RSSDW5HakwFQnDIefWik_03DT64.roa (raw, json)
Hash identifier: GIWkBeINSq2Fpt35bKtX2CgyIVBXOWwtEWSQ7TazB0Q=
Subject key identifier: 45:24:83:5B:91:DA:93:01:50:9C:32:1E:7D:68:A4:FF:4D:C3:4F:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DFE9979DEA823CADED6DC4EBE5BA85A6A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RSSDW5HakwFQnDIefWik_03DT64.roa
Signing time: Wed 06 May 2026 18:42:44 +0000
ROA not before: Wed 06 May 2026 18:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402214
IP address blocks: 31.56.153.0/24 maxlen: 24
31.57.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fe:99:79:de:a8:23:ca:de:d6:dc:4e:be:5b:a8:5a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 6 18:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4524835b91da9301509c321e7d68a4ff4dc34fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:2a:cd:2f:8a:3c:79:ae:27:c6:47:ae:4b:
2a:15:6b:67:95:52:26:e9:8e:56:7a:43:cb:26:5b:
16:5d:a1:a2:5f:05:84:4e:f4:44:26:79:73:79:f1:
f5:02:f9:d0:d2:12:41:01:e7:bc:92:3e:af:10:01:
15:e7:5d:89:19:72:93:ba:63:a3:f8:60:96:b9:cf:
b0:29:81:9b:e4:e0:45:d3:a3:5c:a7:6f:31:20:8b:
74:c6:29:d0:f1:66:1e:39:b1:8b:16:6f:30:41:4c:
b8:0d:bc:2d:95:34:9c:a0:f2:2e:19:89:17:e8:6f:
f4:08:18:de:73:de:43:07:e5:72:f1:21:fd:63:98:
de:3b:f6:bd:ab:a0:69:f2:f7:02:79:53:ec:6b:bc:
9d:d0:57:08:58:81:e9:a6:d9:43:c5:22:b1:31:91:
99:e9:0c:a5:32:e7:81:62:7a:60:ba:55:0f:d2:4e:
9b:5b:d1:df:8e:a6:26:52:b2:88:df:35:42:c1:f9:
58:0b:1a:f9:98:d6:99:ef:05:1f:3d:09:84:c9:d8:
44:5c:46:83:a0:05:be:1e:14:1a:77:07:85:e6:7d:
c4:ff:56:25:7d:01:ec:3d:81:d2:e3:93:37:a1:f2:
90:88:5d:23:3c:bd:3a:95:15:db:7d:cc:9f:e6:a1:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:24:83:5B:91:DA:93:01:50:9C:32:1E:7D:68:A4:FF:4D:C3:4F:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RSSDW5HakwFQnDIefWik_03DT64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.153.0/24
31.57.96.0/24
Signature Algorithm: sha256WithRSAEncryption
94:65:fe:67:f7:22:67:c8:63:52:90:f9:8b:cb:f3:6a:92:62:
af:97:96:6e:14:ea:da:50:93:a7:93:65:c4:22:31:8f:60:5a:
96:6a:52:77:90:e8:6f:0d:88:3b:a8:ae:26:47:31:1a:64:72:
da:3f:11:d5:48:38:de:e5:11:6d:4c:24:cb:7c:ff:f8:bb:9a:
0c:d6:e9:29:30:4d:94:0b:39:85:46:b1:d6:1d:26:dd:75:26:
8b:cf:2e:1e:61:74:af:98:42:ff:6a:36:17:1c:a5:72:6f:9e:
23:63:bf:f7:41:62:f9:f0:25:0d:42:2e:e5:34:cd:48:ec:d6:
22:e2:3d:13:2c:9e:b3:37:b2:a6:91:cb:19:f9:25:19:cf:36:
82:eb:9a:11:d1:6e:48:7d:66:90:1d:65:5c:d2:2e:b8:50:5f:
18:ce:85:75:11:c6:a3:1e:90:15:db:09:e9:cc:42:a3:63:cb:
67:1f:f0:23:4d:11:23:f6:cb:2c:47:0d:80:4c:30:00:79:f8:
3b:30:f6:0b:54:db:ba:8a:38:04:29:1b:a1:7b:58:6b:b3:91:
48:82:a2:7f:10:20:50:6f:9b:31:2c:27:c9:7d:50:43:46:80:
b3:f6:f9:d6:a9:b5:69:c8:13:bb:57:dc:a3:04:9f:5d:37:18:
79:5d:41:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3+mXneqCPK3tbcTr5bqFpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNTA2MTg0MjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTI0ODM1YjkxZGE5MzAxNTA5YzMyMWU3ZDY4YTRmZjRkYzM0ZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09QqzS+KPHmuJ8ZHrksqFWtnlVIm
6Y5WekPLJlsWXaGiXwWETvREJnlzefH1AvnQ0hJBAee8kj6vEAEV512JGXKTumOj
+GCWuc+wKYGb5OBF06Ncp28xIIt0xinQ8WYeObGLFm8wQUy4DbwtlTScoPIuGYkX
6G/0CBjec95DB+Vy8SH9Y5jeO/a9q6Bp8vcCeVPsa7yd0FcIWIHpptlDxSKxMZGZ
6QylMueBYnpgulUP0k6bW9HfjqYmUrKI3zVCwflYCxr5mNaZ7wUfPQmEydhEXEaD
oAW+HhQadweF5n3E/1YlfQHsPYHS45M3ofKQiF0jPL06lRXbfcyf5qH82QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEUkg1uR2pMBUJwyHn1opP9Nw0+uMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUlNTRFc1SGFrd0ZRbkRJZWZXaWtfMDNEVDY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHziZAwQA
HzlgMA0GCSqGSIb3DQEBCwUAA4IBAQCUZf5n9yJnyGNSkPmLy/NqkmKvl5ZuFOra
UJOnk2XEIjGPYFqWalJ3kOhvDYg7qK4mRzEaZHLaPxHVSDje5RFtTCTLfP/4u5oM
1ukpME2UCzmFRrHWHSbddSaLzy4eYXSvmEL/ajYXHKVyb54jY7/3QWL58CUNQi7l
NM1I7NYi4j0TLJ6zN7KmkcsZ+SUZzzaC65oR0W5IfWaQHWVc0i64UF8YzoV1Ecaj
HpAV2wnpzEKjY8tnH/AjTREj9sssRw2ATDAAefg7MPYLVNu6ijgEKRuhe1hrs5FI
gqJ/ECBQb5sxLCfJfVBDRoCz9vnWqbVpyBO7V9yjBJ9dNxh5XUGM
-----END CERTIFICATE-----
Generated at Wed May 13 00:35:28 2026 by rpki-client