Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b15xx9aJrPrnUi2jwBk8a-zlH3k.roa
File: b15xx9aJrPrnUi2jwBk8a-zlH3k.roa (raw, json)
Hash identifier: 4CdYnRK23dexPNSH9Ys3/afqaOai3Wy5gQu4ZA1DL1g=
Subject key identifier: 6F:5E:71:C7:D6:89:AC:FA:E7:52:2D:A3:C0:19:3C:6B:EC:E5:1F:79
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1CF3A972FC74CB39B781861942DC0D50C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b15xx9aJrPrnUi2jwBk8a-zlH3k.roa
Signing time: Thu 12 Nov 2026 10:08:05 +0000
ROA not before: Thu 12 Nov 2026 10:08:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137410
IP address blocks: 31.56.141.0/24 maxlen: 24
31.56.142.0/24 maxlen: 24
31.56.143.0/24 maxlen: 24
31.56.149.0/24 maxlen: 24
31.57.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:3a:97:2f:c7:4c:b3:9b:78:18:61:94:2d:c0:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 12 10:08:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f5e71c7d689acfae7522da3c0193c6bece51f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:60:f8:8a:db:dd:06:f1:2a:19:ad:5d:11:
ca:98:8c:f4:99:4b:39:61:b4:a6:bd:b1:9a:c8:7f:
80:a4:ee:80:ed:0f:c8:e4:dc:83:73:79:c4:4c:44:
45:88:4a:3b:2d:ac:52:6a:5d:9b:7d:46:10:f0:0f:
43:15:46:5c:e8:51:93:8e:c4:c4:5d:ce:36:2d:76:
e1:cc:97:6a:f9:d4:31:58:1b:ce:07:58:75:d1:2b:
2f:41:7a:66:d8:89:d6:ce:02:30:5b:ee:05:34:9c:
75:d8:93:4e:55:bc:79:5a:15:91:08:f3:e2:b2:e0:
e2:c7:17:95:fe:3d:b2:70:b2:5c:f7:34:14:e8:61:
51:08:90:9d:bc:ab:45:2f:93:3c:5a:63:95:b8:37:
ae:f4:00:bc:01:11:b4:e4:43:a7:6f:06:ef:96:61:
a1:2a:6c:4f:c4:01:79:ca:01:41:4e:d5:14:71:9e:
59:ff:51:92:55:6a:d2:89:21:e6:bd:f8:07:e2:8c:
81:32:e1:5a:ba:1b:38:2d:73:e0:ec:57:2d:f5:9d:
dd:c1:1b:94:78:ae:76:91:0c:e4:b4:04:f0:86:56:
2b:cb:5d:d5:49:9a:fa:7e:50:33:69:2f:8c:49:fa:
03:a3:c4:ee:6d:a6:b3:f2:09:80:8a:5d:ea:de:1e:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5E:71:C7:D6:89:AC:FA:E7:52:2D:A3:C0:19:3C:6B:EC:E5:1F:79
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b15xx9aJrPrnUi2jwBk8a-zlH3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.141.0-31.56.143.255
31.56.149.0/24
31.57.202.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0d:ee:1d:9d:55:31:4a:e1:25:ab:ef:9d:37:12:2c:ec:4b:
1d:b1:c0:df:43:01:ca:60:a2:6b:80:ba:29:83:29:1e:40:33:
3c:8d:2c:c0:be:01:d1:6d:76:e7:c2:a3:47:0e:56:2b:74:a0:
64:2f:73:76:0a:b7:86:e8:ec:92:c2:aa:70:b0:dd:d4:8e:f1:
98:d7:06:6b:19:ec:d6:a2:a5:cb:99:84:c3:c8:55:6a:b9:94:
74:c0:cc:92:14:4c:39:a8:24:43:a6:6b:fd:7d:d4:5f:53:2d:
c8:77:ce:8b:6c:a4:54:82:5e:1d:3b:38:81:c3:1c:66:4e:bf:
21:55:ca:e6:29:0a:e1:27:62:84:ef:03:50:14:52:f8:d6:69:
b3:99:47:22:07:78:9f:a5:48:57:34:8b:27:1e:03:df:21:e8:
10:4d:02:a5:c2:6a:84:3d:dc:31:e6:3f:46:83:4c:c4:64:f8:
51:cf:6d:6f:5e:b8:ef:3c:35:7f:dc:0b:9f:ac:3a:75:2c:af:
33:95:7d:1f:ce:d8:b3:f9:bb:61:bd:e4:17:31:5e:2f:b4:f2:
b8:3e:95:a7:56:6b:9d:e7:2d:e7:75:dc:da:27:df:5c:c9:e7:
d1:40:27:90:cd:93:24:e6:08:d8:40:8f:ea:17:ab:77:11:13:
5d:0f:f1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:35:13 2026 by rpki-client