Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ahzFHSnKzTgvpIQ7-ZKDW66R7jY.roa
File: ahzFHSnKzTgvpIQ7-ZKDW66R7jY.roa (raw, json)
Hash identifier: 18V7odbDnZI9jZOMBdgQoNIAim1gCqyLHn/G2Lwsj8Y=
Subject key identifier: 6A:1C:C5:1D:29:CA:CD:38:2F:A4:84:3B:F9:92:83:5B:AE:91:EE:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1CA1BC9DCDDC852724A0688B3CAC7707F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ahzFHSnKzTgvpIQ7-ZKDW66R7jY.roa
Signing time: Wed 11 Nov 2026 10:16:20 +0000
ROA not before: Wed 11 Nov 2026 10:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219072
IP address blocks: 31.56.183.0/24 maxlen: 24
31.57.16.0/24 maxlen: 24
31.58.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:1b:c9:dc:dd:c8:52:72:4a:06:88:b3:ca:c7:70:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 11 10:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1cc51d29cacd382fa4843bf992835bae91ee36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:8e:6e:83:98:74:4e:66:64:46:32:7f:84:
e1:36:12:fd:49:6b:cd:71:a9:1a:ec:b9:18:05:8d:
b1:d2:38:1a:84:4b:70:1e:be:31:ca:68:f6:43:4c:
7c:e5:a3:67:d7:c9:1e:fc:3e:67:21:d1:2b:16:c0:
73:f1:54:00:48:55:8a:14:77:38:e2:6d:24:b9:95:
70:a6:3a:df:34:20:f5:16:94:a9:3c:ad:46:ee:86:
c5:27:8d:d0:29:23:e0:9a:cf:78:36:35:85:04:95:
4c:b8:52:6e:26:b0:1a:98:6d:de:7c:52:07:6c:b4:
06:ef:81:03:a8:cb:58:ca:65:b7:0a:c6:55:e0:17:
e2:4a:cb:81:f7:9f:9f:31:be:7e:16:b8:de:cf:d0:
b8:f4:12:5c:96:7c:fc:c9:14:cd:8e:b6:ae:17:fd:
e1:0b:18:16:5b:48:98:71:ff:c7:79:fb:b5:a8:34:
f4:28:44:64:33:84:91:1b:6f:f6:d5:d8:6c:50:bc:
e3:af:61:0b:d1:78:67:e0:b2:a2:29:8b:6d:14:b1:
07:c0:0c:24:43:54:35:53:7a:1c:8f:08:38:ba:4b:
4d:c3:03:59:86:5b:a7:f7:8e:9a:3f:b2:c9:58:96:
29:ba:67:c1:73:dc:44:19:d7:8e:56:3d:47:f1:7d:
53:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:C5:1D:29:CA:CD:38:2F:A4:84:3B:F9:92:83:5B:AE:91:EE:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ahzFHSnKzTgvpIQ7-ZKDW66R7jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.183.0/24
31.57.16.0/24
31.58.187.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a3:f9:c0:2b:15:63:9f:43:36:98:53:d4:80:40:40:8c:d2:
fa:28:05:f5:5c:8a:35:5c:76:97:c2:84:b3:e0:a6:71:ad:92:
47:53:ca:20:d6:29:a5:f3:25:8c:b5:45:81:29:a2:f0:e7:89:
7b:a3:ca:4b:d1:04:a2:c1:a8:c1:03:00:e0:07:11:f6:c0:bf:
2c:09:01:d4:66:aa:34:b3:ca:ec:7c:76:af:99:bb:be:bd:3c:
ec:3f:0f:54:47:ad:56:c5:eb:40:b7:df:0c:97:36:6f:f6:80:
5a:49:39:e0:84:65:b8:be:7f:24:35:f7:e2:d8:4b:89:ed:b4:
90:6f:e3:0e:ad:70:4b:bd:e5:86:6e:6e:93:bd:fb:90:ed:d6:
e4:7f:7e:fd:8c:d5:d2:2c:0f:5a:f8:7b:14:6c:18:f8:51:cb:
54:13:11:3f:e6:2c:52:da:38:75:77:c2:b2:45:be:62:89:59:
27:18:7b:72:a3:49:52:31:f0:26:17:48:58:1c:2a:80:44:5c:
a2:74:f1:8f:0d:8e:ad:fb:a3:79:ed:f4:6e:8e:bb:04:2c:c9:
94:4b:69:a8:c5:6d:5d:f0:e6:1d:81:60:9b:48:b8:11:51:3d:
4c:ad:c7:1b:44:fd:43:ce:70:d7:ea:b3:04:36:73:43:91:33:
4a:39:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:50 2026 by rpki-client