Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c1LHRkg99qNuLx5KDBDX7s4-pvs.roa
File: c1LHRkg99qNuLx5KDBDX7s4-pvs.roa (raw, json)
Hash identifier: 6h/7jZTM9CJYaLEvtUgOO69pQ324ZrasPTQ0VoTLy5o=
Subject key identifier: 73:52:C7:46:48:3D:F6:A3:6E:2F:1E:4A:0C:10:D7:EE:CE:3E:A6:FB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F360A3215F11AF796F102121891542A9C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c1LHRkg99qNuLx5KDBDX7s4-pvs.roa
Signing time: Mon 06 Jul 2026 06:07:45 +0000
ROA not before: Mon 06 Jul 2026 06:07:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 31.56.166.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:0a:32:15:f1:1a:f7:96:f1:02:12:18:91:54:2a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 6 06:07:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7352c746483df6a36e2f1e4a0c10d7eece3ea6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9c:a7:93:a8:17:fe:97:7a:ea:c3:51:83:aa:
67:0e:df:5c:8d:ae:8d:0c:8d:6d:82:98:4c:30:c7:
3d:72:e9:d2:23:b5:d2:42:de:31:3b:fe:00:91:74:
79:dd:02:45:9c:83:af:fd:4d:3a:60:ed:9a:0f:80:
2a:10:1c:55:83:26:e6:48:2f:5f:36:ad:af:2a:2b:
de:e4:b8:77:a2:c2:6a:f4:2b:6a:2e:f5:cb:d7:2c:
f3:ae:37:7e:60:3b:80:a3:eb:53:1e:70:4c:f4:ae:
84:8c:93:a7:11:c5:79:45:21:9e:94:03:d7:43:13:
a7:9e:8b:db:7e:47:ff:c5:14:55:d2:0c:f4:2c:c4:
0c:fe:f5:fb:b3:cc:57:d8:e6:87:71:31:9e:0d:27:
28:5c:af:03:3d:12:6b:93:73:5b:c7:cd:b2:e6:f1:
93:8c:8d:bb:88:94:ee:68:51:fb:e7:31:a6:a1:3b:
fc:f9:24:e2:5a:53:97:ae:0f:82:08:0c:28:92:50:
c3:61:de:21:15:7f:f1:a9:64:9c:c4:84:00:7c:5b:
78:18:ad:40:17:70:f9:ab:2f:e3:81:66:48:38:b3:
25:59:e6:3f:83:c6:1d:ff:1d:40:c3:fc:31:92:fa:
8b:2f:cb:26:e8:12:10:54:9f:d8:87:dc:d0:46:eb:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:C7:46:48:3D:F6:A3:6E:2F:1E:4A:0C:10:D7:EE:CE:3E:A6:FB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/c1LHRkg99qNuLx5KDBDX7s4-pvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.166.0/24
31.59.108.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:48:ba:d0:08:93:36:83:11:9c:6f:46:5c:e8:31:22:7a:53:
36:c7:03:fe:50:aa:9b:23:fd:0a:cd:39:9f:ef:fc:0d:8e:82:
8b:42:d8:d9:7f:4b:ae:ca:fe:42:d2:07:cc:3d:96:5d:93:ee:
c0:1d:ae:8d:0a:9d:22:cb:ff:fe:da:7a:d4:b1:f2:33:cb:65:
88:a7:45:6f:0a:6e:05:1a:4d:c8:b1:b2:27:da:d6:bc:63:83:
19:7b:4e:b1:46:cb:01:60:6c:b3:17:65:18:83:72:56:bb:66:
49:a7:97:b4:73:ca:47:14:58:4a:46:2c:72:9d:7a:a3:98:5f:
fb:7e:09:e2:e6:cb:4e:3a:ce:05:29:0a:64:59:06:f2:47:ae:
e8:b7:0c:09:eb:85:ff:41:c3:63:50:3c:fa:30:b6:84:58:5b:
51:64:21:a6:9a:83:77:0a:fb:67:9a:dd:a4:6a:18:07:ba:1c:
25:43:1f:7e:ef:45:a7:54:44:bd:f5:76:92:12:f0:01:43:50:
ae:b0:cd:c1:fc:48:f8:a9:84:bc:a2:82:e0:ba:a7:00:14:4d:
5f:88:08:6a:65:f2:25:2a:86:9c:ae:7c:c6:42:dc:5f:41:63:
ca:b4:c7:a5:69:bb:d6:7b:20:93:dd:e4:08:e2:1b:b5:11:10:
f0:a4:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:02 2026 by rpki-client