Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VYZqeuNTmAvfKkjQYPfAdJBcKyQ.roa
File: VYZqeuNTmAvfKkjQYPfAdJBcKyQ.roa (raw, json)
Hash identifier: oaDCwPQJ0F8dfTwiftzwM153CbN/DwgEhGtiKCa3Mh0=
Subject key identifier: 55:86:6A:7A:E3:53:98:0B:DF:2A:48:D0:60:F7:C0:74:90:5C:2B:24
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CD755378FA36926B5BDE5996125294581
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VYZqeuNTmAvfKkjQYPfAdJBcKyQ.roa
Signing time: Tue 10 Mar 2026 10:40:11 +0000
ROA not before: Tue 10 Mar 2026 10:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 31.57.189.0/24 maxlen: 24
31.59.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:55:37:8f:a3:69:26:b5:bd:e5:99:61:25:29:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 10 10:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55866a7ae353980bdf2a48d060f7c074905c2b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:df:60:8c:c4:2f:12:b8:8c:d5:6d:5d:50:
4a:84:ef:af:32:55:a8:41:7c:71:38:26:ca:df:69:
3f:57:1c:2e:44:a4:91:ff:e9:e7:0b:44:e0:26:bb:
c9:51:44:8c:32:86:46:af:f8:74:5e:0b:89:0b:8f:
52:25:cf:00:d0:58:83:a5:0b:09:00:b3:0b:ba:71:
53:5d:24:4d:11:ba:3a:67:5c:a8:05:76:8f:ba:70:
9b:6a:41:1e:cf:1e:b0:d6:0f:5d:43:4f:ec:cb:72:
65:42:50:b3:38:38:69:cd:9d:38:65:82:29:ae:f0:
fc:33:87:0e:c5:d2:64:09:6c:17:d8:aa:6a:d9:43:
f5:7c:2d:40:da:2f:39:f3:3d:31:d7:cd:0f:c7:a9:
e4:c8:c9:f5:b7:f6:10:1b:bd:a1:c0:36:c1:af:27:
59:43:e0:8b:77:9b:90:91:95:d1:00:71:2c:40:dc:
0c:c7:b2:c4:b2:5d:61:45:b9:ab:02:e3:4e:dc:64:
77:af:ca:a0:27:ae:db:00:3e:1a:e0:65:96:ec:0e:
3c:d6:9e:2d:22:1f:38:12:0b:0e:db:a4:f7:d9:e0:
b4:3b:e4:8b:08:aa:bb:3d:3e:37:1a:b1:0c:5d:0d:
65:0e:9e:c9:1a:d3:d4:1c:3f:40:60:75:94:39:eb:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:86:6A:7A:E3:53:98:0B:DF:2A:48:D0:60:F7:C0:74:90:5C:2B:24
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VYZqeuNTmAvfKkjQYPfAdJBcKyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.189.0/24
31.59.253.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bb:e8:e1:37:c2:ac:d9:72:0e:66:3d:17:48:aa:9a:1e:b6:
0f:2b:18:9a:e4:fd:7d:eb:96:69:c4:88:fb:b2:a2:1c:85:86:
cd:47:a3:8b:a8:41:02:10:b8:a8:58:fb:b3:cf:a9:ec:cb:d4:
b5:6e:26:73:71:f7:67:25:53:0a:93:f3:f3:20:61:db:ad:0c:
51:32:aa:01:bb:cb:7c:72:e7:2b:84:6e:fc:31:e6:ba:ca:94:
cc:5f:28:b8:9d:b8:5f:8a:a2:4e:9e:d8:34:9f:5a:d2:10:cf:
3b:bb:b6:c0:d4:c5:49:5a:af:70:53:2d:1c:ff:82:90:88:bd:
be:75:bc:c8:51:5f:3d:fd:51:dd:67:41:83:e8:fe:40:13:da:
47:16:76:c0:5b:d8:3a:67:cb:b4:5c:bc:a8:db:51:cf:f7:78:
77:fb:59:bf:48:2a:be:55:1c:37:a3:e2:c4:04:64:a3:96:00:
cb:32:15:d3:3c:2e:75:59:9a:12:90:4c:b6:67:4e:5f:02:76:
dd:52:3f:8d:65:ba:ef:99:3e:7e:b8:6b:8b:a8:4d:d2:98:dc:
c2:31:85:38:7d:11:e8:f3:d0:34:cc:11:b4:6c:53:5c:43:3e:
b9:98:dc:57:e3:cf:d5:98:67:2e:1d:b3:ba:53:1f:30:0b:60:
da:2e:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:31 2026 by rpki-client