Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ddG890INhXn26maTAGhL9lalNTs.roa
File: ddG890INhXn26maTAGhL9lalNTs.roa (raw, json)
Hash identifier: YsQcPTC/nrI6DuLuGARJW6Ehf/VMGnrKXFVtUkGGTX0=
Subject key identifier: 75:D1:BC:F7:42:0D:85:79:F6:EA:66:93:00:68:4B:F6:56:A5:35:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F0F4C2B0E57222EDEA50C9A24E448FE5F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ddG890INhXn26maTAGhL9lalNTs.roa
Signing time: Sun 28 Jun 2026 17:34:37 +0000
ROA not before: Sun 28 Jun 2026 17:34:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133701
IP address blocks: 31.57.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:4c:2b:0e:57:22:2e:de:a5:0c:9a:24:e4:48:fe:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 28 17:34:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75d1bcf7420d8579f6ea669300684bf656a5353b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:b2:f6:e1:66:36:65:52:92:1f:e0:1d:f8:
1d:88:8e:17:87:fa:62:95:e3:4b:5f:81:50:a5:71:
e7:dd:78:b7:96:29:d3:5b:6c:1d:7d:51:3a:72:ad:
87:c4:65:41:ca:18:a4:0f:2a:78:96:67:2f:8f:61:
29:16:fb:39:57:0a:bc:b6:ff:28:2f:9a:14:5c:ea:
61:b5:6b:da:01:ae:91:2c:c9:e2:dd:d4:5f:b1:c0:
38:a7:52:74:d1:a2:d2:25:64:60:fc:f4:3f:09:53:
ff:e2:89:15:3d:97:0c:da:1a:e8:85:77:e6:6a:1f:
95:98:32:06:77:97:03:8b:a4:cc:0f:35:aa:69:df:
bf:a8:28:dc:b6:07:e8:1d:7b:dd:3d:b9:ce:ed:d8:
d8:31:35:a9:54:fd:dd:51:f8:ff:c1:d1:e7:ef:03:
d7:c6:2d:41:e3:31:26:f2:11:7d:73:e4:3d:11:ce:
83:45:b4:48:c9:c5:3f:11:22:a5:7b:28:17:c8:12:
30:37:cc:1e:d9:56:fb:fb:3f:e1:9d:fc:49:06:67:
03:e6:98:62:c5:8d:7a:64:66:e7:ed:d5:ee:4e:6a:
31:ec:b1:69:27:d3:27:43:86:9c:29:a8:88:9d:f6:
f8:c1:91:c0:df:e0:a9:ea:17:85:bb:fb:f1:7a:6e:
75:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D1:BC:F7:42:0D:85:79:F6:EA:66:93:00:68:4B:F6:56:A5:35:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ddG890INhXn26maTAGhL9lalNTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.155.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cc:52:37:a4:94:8e:1c:24:0a:4c:e8:89:8a:e8:2c:7c:07:
b2:c7:51:eb:69:5f:26:34:6a:f8:c5:f7:26:75:46:33:be:ae:
f4:9e:6b:1c:1e:2c:ff:82:7e:c3:24:4f:98:03:02:c0:6e:87:
68:70:69:9d:16:f5:7f:c2:f5:46:6a:80:d9:94:8d:51:23:13:
e2:16:56:93:c7:91:ac:24:7f:7c:d6:30:3d:c8:14:2b:d3:0b:
20:8a:f9:cc:04:9c:1b:23:24:9b:8d:37:26:3e:a5:bc:62:a5:
34:5e:48:d7:d3:c0:91:74:85:06:cb:1e:b1:fb:bc:36:66:71:
98:f0:d2:81:7e:65:f5:dd:ab:d4:71:85:5d:e2:40:1e:6b:ec:
c0:73:b5:82:a3:0c:0b:8a:1f:c3:98:1a:0c:53:37:8e:8e:85:
8d:32:c9:33:55:e2:70:ae:9d:a4:b2:64:22:96:b6:3d:9a:39:
ea:ea:42:ff:ae:5d:4e:cc:9d:17:0b:0e:2d:6c:ef:bb:98:c0:
31:0f:63:80:60:60:b8:69:68:ab:90:0c:47:8e:db:bb:d2:65:
a9:01:5a:41:17:f1:3e:38:85:a0:f2:a4:85:b7:a6:b5:06:b9:
f7:cf:3b:51:fa:c4:9c:88:d1:2e:99:85:cd:a2:53:82:ea:b7:
62:6f:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:48 2026 by rpki-client