Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/enwUP4i1adesnFjTwaWy4aQbYpM.roa
File: enwUP4i1adesnFjTwaWy4aQbYpM.roa (raw, json)
Hash identifier: VAU+cVh9Qh91JlVD/IxRx0KOU0gdZyVk6jmVV4vAkD8=
Subject key identifier: 7A:7C:14:3F:88:B5:69:D7:AC:9C:58:D3:C1:A5:B2:E1:A4:1B:62:93
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A19372F4309AFB0873827509BDCBCBC521
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/enwUP4i1adesnFjTwaWy4aQbYpM.roa
Signing time: Sat 31 Oct 2026 19:32:26 +0000
ROA not before: Sat 31 Oct 2026 19:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206286
IP address blocks: 31.56.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:72:f4:30:9a:fb:08:73:82:75:09:bd:cb:cb:c5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 19:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a7c143f88b569d7ac9c58d3c1a5b2e1a41b6293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:0b:1d:e2:2e:dd:a1:ff:a3:50:a8:54:35:
27:e6:95:87:7f:54:68:73:28:a7:6c:51:3b:ec:dc:
f6:36:0c:de:e0:c0:47:23:49:51:4c:6f:c2:d9:53:
b7:37:0f:4c:14:0f:4d:6b:71:a7:ba:d3:db:53:12:
32:a1:38:41:4c:08:30:8c:c9:f5:c8:1a:69:51:5d:
c6:26:0b:00:ae:ce:e6:59:74:29:38:cc:c2:05:ca:
93:3b:26:b9:1b:b8:c7:24:83:57:57:6e:fb:ca:28:
97:a4:3c:e9:1d:bf:13:58:b2:a9:86:37:a5:d8:5d:
53:6e:d9:6c:35:8a:5a:ee:89:7b:85:7b:0f:61:84:
6b:b1:c9:4b:5a:cd:50:9f:89:f2:2a:55:45:e4:af:
ab:97:e8:86:83:87:a5:65:80:7f:bc:a0:71:e6:e7:
d4:ae:b6:ea:36:26:18:ed:ce:b5:57:d8:dc:2c:43:
15:d0:46:8c:71:c3:1b:ac:1e:cb:25:f6:8b:6e:b9:
ee:a2:5f:8e:8d:10:c8:e8:e8:04:d7:f6:17:f5:60:
f7:4d:2f:5f:49:e6:20:8c:2b:bc:0f:40:a1:5f:5f:
15:6e:4f:22:87:05:ba:43:e0:89:ec:98:ec:71:7e:
2b:30:c0:a5:86:28:03:d5:18:78:20:60:ac:5f:fd:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:14:3F:88:B5:69:D7:AC:9C:58:D3:C1:A5:B2:E1:A4:1B:62:93
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/enwUP4i1adesnFjTwaWy4aQbYpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:39:13:f8:ca:ef:5f:90:4a:32:5a:3d:43:a0:11:f0:e9:64:
3f:bf:a0:9b:40:48:44:bd:c4:6e:b6:30:be:5c:d0:d3:1a:06:
7e:7d:b9:24:c2:93:e8:05:e9:c6:f6:ba:97:c4:0d:e8:3c:46:
4f:7f:1e:01:10:ce:0d:4c:2a:e9:b5:60:70:20:a4:28:0c:5d:
36:53:6e:10:86:de:e5:a3:11:19:98:44:b8:69:10:5b:19:da:
e9:74:cc:76:84:cd:81:36:89:ea:e3:17:e1:cb:00:04:6a:38:
0e:6b:0a:0d:67:f4:04:f4:39:c2:f7:d9:01:94:b4:c3:49:71:
c6:5b:18:d0:1f:cb:83:85:7e:13:f7:4d:45:4c:b6:31:42:c7:
8f:ab:48:b5:9b:3e:16:d1:7e:38:00:16:7e:86:70:ac:94:0a:
9b:96:6c:66:c9:19:10:a8:6b:fe:af:43:19:07:87:b0:89:20:
01:06:45:6c:0c:90:e5:7f:7d:d7:45:58:63:ad:bd:b7:89:d8:
51:52:bc:17:c7:0d:4e:e8:98:8e:e9:fd:18:62:fb:57:38:ea:
b3:9f:fe:97:63:76:f9:64:e0:a7:1c:32:80:7d:8e:31:aa:a8:
93:af:a0:3c:f0:cf:b4:07:f2:e3:5f:ca:70:2b:9c:72:d5:24:
bf:a2:79:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGTcvQwmvsIc4J1Cb3Ly8UhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDMxMTkzMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdjMTQzZjg4YjU2OWQ3YWM5YzU4ZDNjMWE1YjJlMWE0MWI2MjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZoLHeIu3aH/o1CoVDUn5pWHf1Ro
cyinbFE77Nz2Ngze4MBHI0lRTG/C2VO3Nw9MFA9Na3GnutPbUxIyoThBTAgwjMn1
yBppUV3GJgsArs7mWXQpOMzCBcqTOya5G7jHJINXV277yiiXpDzpHb8TWLKphjel
2F1TbtlsNYpa7ol7hXsPYYRrsclLWs1Qn4nyKlVF5K+rl+iGg4elZYB/vKBx5ufU
rrbqNiYY7c61V9jcLEMV0EaMccMbrB7LJfaLbrnuol+OjRDI6OgE1/YX9WD3TS9f
SeYgjCu8D0ChX18Vbk8ihwW6Q+CJ7JjscX4rMMClhigD1Rh4IGCsX/3GdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHp8FD+ItWnXrJxY08GlsuGkG2KTMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZW53VVA0aTFhZGVzbkZqVHdhV3k0YVFiWXBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhHMA0G
CSqGSIb3DQEBCwUAA4IBAQCfORP4yu9fkEoyWj1DoBHw6WQ/v6CbQEhEvcRutjC+
XNDTGgZ+fbkkwpPoBenG9rqXxA3oPEZPfx4BEM4NTCrptWBwIKQoDF02U24Qht7l
oxEZmES4aRBbGdrpdMx2hM2BNonq4xfhywAEajgOawoNZ/QE9DnC99kBlLTDSXHG
WxjQH8uDhX4T901FTLYxQsePq0i1mz4W0X44ABZ+hnCslAqblmxmyRkQqGv+r0MZ
B4ewiSABBkVsDJDlf33XRVhjrb23idhRUrwXxw1O6JiO6f0YYvtXOOqzn/6XY3b5
ZOCnHDKAfY4xqqiTr6A88M+0B/LjX8pwK5xy1SS/onk5
-----END CERTIFICATE-----
Generated at Sun Nov 15 04:13:47 2026 by rpki-client