Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_Epb7Z_LBtH23123p3vyqoy5ajE.roa
File: _Epb7Z_LBtH23123p3vyqoy5ajE.roa (raw, json)
Hash identifier: 4qqqm/UwyEKqXOj55elXTz7RKuAFnfbRkc4Dgc5xg6U=
Subject key identifier: FC:4A:5B:ED:9F:CB:06:D1:F6:DF:5D:B7:A7:7B:F2:AA:8C:B9:6A:31
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F70DC58B4771B3FA2E02000F14AC172F6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_Epb7Z_LBtH23123p3vyqoy5ajE.roa
Signing time: Fri 17 Jul 2026 16:15:16 +0000
ROA not before: Fri 17 Jul 2026 16:15:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 31.56.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:dc:58:b4:77:1b:3f:a2:e0:20:00:f1:4a:c1:72:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 17 16:15:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc4a5bed9fcb06d1f6df5db7a77bf2aa8cb96a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:2a:3f:7a:c8:f7:54:f9:92:63:dd:e4:7f:
6f:55:a0:83:a8:0d:35:f8:d7:7f:b9:c8:2b:38:ed:
77:22:e8:0d:a2:9b:60:e5:df:5b:90:e0:b1:cb:60:
55:36:1b:f7:2b:b7:00:f1:79:14:7d:7b:52:6f:53:
47:d4:57:19:76:c0:49:8e:64:44:45:50:94:42:07:
e8:0e:24:8e:c9:4e:65:b3:7d:b1:93:14:0d:2e:f2:
e8:b4:16:75:76:51:29:d8:a7:11:04:81:d4:00:7e:
a3:27:89:96:73:fc:be:c5:11:e1:17:f9:3f:71:42:
6c:70:5e:6e:11:91:52:2b:ba:24:a3:40:4c:7b:73:
73:fe:41:eb:b1:b1:c8:63:b7:b6:b6:0b:5a:da:b9:
84:35:4b:24:73:ec:d7:9b:d4:62:6d:af:49:be:11:
b8:89:6a:e6:9b:7b:9c:04:e5:6f:bf:8a:c2:19:ca:
f1:40:45:23:fa:aa:6f:f0:81:56:ff:d6:56:f1:e4:
5a:fe:d1:9e:d1:8e:4a:e1:15:b7:5b:91:3b:ff:85:
3e:2a:2d:5e:4f:70:66:b8:c0:53:ae:03:57:14:8c:
68:ff:ac:10:7b:21:fd:34:a3:11:22:c9:85:01:3b:
e3:d5:86:e9:9f:43:70:a9:17:1e:7d:a4:8e:cb:b0:
1c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4A:5B:ED:9F:CB:06:D1:F6:DF:5D:B7:A7:7B:F2:AA:8C:B9:6A:31
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_Epb7Z_LBtH23123p3vyqoy5ajE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.182.0/24
Signature Algorithm: sha256WithRSAEncryption
29:00:d8:8e:15:a7:96:a5:33:6e:29:ae:ec:eb:e8:70:23:72:
8d:fe:68:3b:d9:86:65:c0:26:92:76:a9:6e:9b:93:4d:5c:dd:
31:b6:26:00:8b:95:2d:4e:0a:d2:0f:9d:c0:77:2c:18:09:99:
1a:8b:72:a7:ab:d0:28:a7:e0:21:5d:7f:36:ad:fa:08:e0:ef:
5c:14:80:42:89:6a:5f:a4:2f:c1:75:c1:1d:cf:d4:e9:79:e4:
6e:ea:94:41:59:7b:e7:a3:f2:d8:d8:e4:21:25:cb:c6:6a:c3:
c1:0a:e2:f3:e0:d2:fd:52:96:a7:2b:62:91:5b:9b:62:10:21:
c1:1c:81:a1:30:5e:b9:c2:c9:f8:f0:e9:83:e9:58:6b:a0:ca:
23:a7:51:08:e3:a6:0e:f1:a4:91:05:16:79:26:d6:3a:09:e2:
87:63:12:d0:c1:10:a7:1a:fe:8c:52:db:02:98:8f:2b:b3:06:
95:fb:e2:53:10:64:5f:53:77:e2:75:00:1f:04:1e:9b:c7:f7:
28:38:70:4b:d4:b6:05:fe:3c:97:7b:d9:2f:66:93:76:bb:81:
ca:e8:52:6f:91:35:8e:9d:79:fa:42:4d:ef:a0:5e:40:1f:84:
4e:f8:e0:87:96:9f:29:4a:fc:40:a6:9a:c5:cf:4f:7e:22:48:
25:79:72:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:59 2026 by rpki-client