Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bJstXb8I-Ff0UH5LzBpF07p6ANE.roa
File: bJstXb8I-Ff0UH5LzBpF07p6ANE.roa (raw, json)
Hash identifier: nPAbTggoxZpgIz4WWDDNaWfDXqoiKmJHoe6GxaljbdY=
Subject key identifier: 6C:9B:2D:5D:BF:08:F8:57:F4:50:7E:4B:CC:1A:45:D3:BA:7A:00:D1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0CF5E1654598598BDAB22CB57E32922C8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bJstXb8I-Ff0UH5LzBpF07p6ANE.roa
Signing time: Wed 23 Sep 2026 17:44:04 +0000
ROA not before: Wed 23 Sep 2026 17:44:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219072
IP address blocks: 31.56.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:5e:16:54:59:85:98:bd:ab:22:cb:57:e3:29:22:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 23 17:44:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c9b2d5dbf08f857f4507e4bcc1a45d3ba7a00d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:3b:ac:93:39:5a:91:96:f8:5f:8e:33:c1:
42:fe:b7:ee:dc:a7:9f:ff:e7:16:18:df:70:5b:13:
09:4f:bc:c9:6e:75:ca:bc:7c:0b:cf:8f:b0:72:e5:
d9:f8:83:13:5b:fc:32:33:c1:fe:9e:ee:1e:06:8b:
27:08:c2:22:e2:47:73:e2:ad:cd:d5:06:21:c6:8c:
16:3e:e7:73:88:b8:28:a0:7a:43:5f:46:52:2e:99:
a8:dd:65:3b:02:9f:df:ca:f2:8a:b6:99:fa:12:00:
6d:e1:03:c6:ad:09:a3:5e:0a:b9:c8:49:cc:44:75:
01:17:08:22:4e:4c:21:59:47:f6:14:74:5c:e0:e2:
dc:3f:86:8a:a5:83:32:02:5a:ca:88:b5:fa:6f:8e:
43:de:85:e7:13:aa:91:32:eb:8c:c8:ad:93:3d:3b:
ba:e8:80:b9:ef:56:a1:fc:e7:e6:68:47:6b:8d:bb:
44:8d:b9:a1:95:09:c2:ee:2c:55:8c:9c:ce:fa:d1:
63:4a:03:be:6d:3c:d6:ed:db:21:bb:2e:84:70:01:
ba:bb:33:33:0a:be:23:9c:b3:7d:ff:90:1a:5f:bc:
5b:1b:9a:2e:df:cf:d1:34:f2:0e:9c:64:1c:99:e1:
9a:c2:41:cd:c2:03:b0:fa:3b:54:06:72:5b:8d:12:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:2D:5D:BF:08:F8:57:F4:50:7E:4B:CC:1A:45:D3:BA:7A:00:D1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bJstXb8I-Ff0UH5LzBpF07p6ANE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ac:7e:c8:53:bb:5a:18:f0:77:0a:fd:17:39:12:65:bb:ee:
e5:70:2f:cc:39:b5:17:53:2e:bd:20:c1:b2:61:4b:a0:57:8a:
8a:01:f3:c0:f4:d1:53:3d:c5:04:6f:b0:97:6d:c9:47:e9:78:
22:56:92:ad:06:85:11:3c:10:ec:d0:8a:de:77:9c:31:89:84:
41:b8:e1:07:e4:ec:18:bb:6b:70:fb:b3:06:82:3c:45:f1:31:
91:52:37:2d:6b:71:f2:2c:b6:45:84:5f:8c:8e:84:7c:b5:e3:
a3:9d:1b:ce:46:cd:22:33:51:3b:e6:7b:c3:bc:4e:19:2a:06:
c0:8d:db:95:52:12:f4:5c:e5:1c:55:e6:cc:b6:1d:9b:9b:1d:
59:86:f4:1b:a8:54:fb:ba:6b:68:50:95:1a:e5:80:fd:c2:1c:
a4:e8:72:16:10:cc:40:de:88:fd:86:5f:ab:41:0d:32:47:7d:
26:54:56:ae:1d:b9:51:ad:88:0d:3e:a8:35:10:9d:37:a4:65:
4d:4e:59:48:a1:b0:65:e4:85:c0:07:cb:38:f1:eb:c4:40:e0:
97:31:59:04:18:b2:21:e5:1e:a7:1a:ea:a7:c4:75:3d:3c:f0:
1c:6a:b3:86:8a:bc:ea:2e:37:7e:c4:8d:bf:c8:46:dd:2a:b9:
cf:75:38:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:40 2026 by rpki-client