Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RUshS5All8FQYbJZVE3iXNkI9Zg.roa
File: RUshS5All8FQYbJZVE3iXNkI9Zg.roa (raw, json)
Hash identifier: QdwrPE57tXh+CTHUyyRrkmkPi3cStOgwh3ePdEDoSco=
Subject key identifier: 45:4B:21:4B:90:25:97:C1:50:61:B2:59:54:4D:E2:5C:D9:08:F5:98
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F6EE54636A7D12303FB71BBF2D6BE0912
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RUshS5All8FQYbJZVE3iXNkI9Zg.roa
Signing time: Fri 17 Jul 2026 07:05:47 +0000
ROA not before: Fri 17 Jul 2026 07:05:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150249
IP address blocks: 31.56.30.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.58.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:e5:46:36:a7:d1:23:03:fb:71:bb:f2:d6:be:09:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 17 07:05:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=454b214b902597c15061b259544de25cd908f598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:f9:06:11:a7:cc:d2:28:12:83:1a:07:5d:
57:b4:c4:1f:7a:4b:2f:ed:39:78:66:26:76:a8:be:
52:a5:9f:ad:cc:61:b4:55:5b:d6:de:3e:5f:f1:0f:
a6:34:c2:f0:81:f8:c0:39:3a:9d:7c:c4:44:25:90:
41:a1:70:dc:7e:6d:b3:2c:62:08:ec:1c:f5:dd:d3:
97:6d:44:42:ed:75:c7:33:14:37:d9:84:96:c0:bf:
10:58:5e:65:1a:f0:8a:c1:b5:fe:83:43:44:a4:d2:
df:88:aa:33:f8:58:41:a9:80:74:ad:9b:8e:eb:97:
4f:35:a5:62:2b:cf:d8:94:a6:b1:97:5e:de:79:20:
df:75:2b:00:f8:c3:ae:4c:1b:aa:49:0d:ac:28:10:
70:1c:3d:1b:b0:14:17:17:33:d9:37:00:90:e8:18:
5b:48:c1:3d:3c:3e:b3:d1:a4:64:09:5d:3e:c3:d3:
f6:fc:46:d7:cf:10:ce:8d:e5:8b:75:69:36:64:6d:
a1:d8:ef:7d:68:c6:0a:71:a1:46:4d:91:01:6b:64:
1e:9e:ef:6e:be:49:09:90:20:7f:67:a4:d2:fa:85:
ff:e5:87:1d:b5:f2:5e:e9:17:75:91:5b:9c:26:78:
d5:e5:fd:2c:1f:55:3b:24:b7:e9:a0:45:ac:89:82:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:21:4B:90:25:97:C1:50:61:B2:59:54:4D:E2:5C:D9:08:F5:98
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RUshS5All8FQYbJZVE3iXNkI9Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.30.0/24
31.56.43.0/24
31.58.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:15:da:8e:e7:90:cb:1b:9f:27:b5:8a:b7:5e:a8:7b:ed:10:
81:3f:bc:a6:b2:da:ba:29:35:65:9a:79:fd:ab:8c:ec:88:0b:
fc:a5:fb:f2:85:b2:14:61:0e:91:74:fc:b2:96:99:43:60:9f:
f8:d2:c5:37:df:7a:bb:f0:e3:65:a9:8f:b9:d1:90:2a:03:38:
f2:47:b8:63:47:01:9d:b0:47:20:b6:83:af:89:6e:a8:04:39:
f2:64:40:03:04:1c:df:2e:7a:7f:a6:01:60:37:4e:84:70:1d:
ea:09:06:00:0f:7b:b1:04:a6:52:e6:60:70:9f:75:2f:b9:d3:
67:b3:83:81:77:ba:54:27:0f:62:a7:2e:22:10:84:21:bc:34:
58:14:6e:bd:71:86:da:ea:1f:14:c5:5b:37:02:75:45:59:46:
02:1c:33:67:75:44:f6:de:e0:e8:9d:ff:e4:0b:71:3d:1e:a2:
88:ae:dc:17:ff:8b:96:ba:0d:6e:f4:db:d7:2e:fc:c7:11:68:
4c:ef:de:0e:f9:ac:2b:a8:3e:df:cf:9f:5e:1f:00:8e:33:8f:
01:56:20:d9:28:b4:e0:8b:c6:5f:43:68:34:ee:79:55:06:25:
98:3d:68:36:87:36:80:a2:15:1e:1e:8e:7c:84:f8:fc:87:b0:
7e:76:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:29 2026 by rpki-client