Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fORk1SQRGv6ngtX4nFEG2NSp4X4.roa
File: fORk1SQRGv6ngtX4nFEG2NSp4X4.roa (raw, json)
Hash identifier: f8vmwvK7bHv6LsFeyH+HTUGmq0slvOONKx2r3/wJA+g=
Subject key identifier: 7C:E4:64:D5:24:11:1A:FE:A7:82:D5:F8:9C:51:06:D8:D4:A9:E1:7E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E0171513F7795C82C5D87E1AE5BCF370F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fORk1SQRGv6ngtX4nFEG2NSp4X4.roa
Signing time: Thu 07 May 2026 07:57:44 +0000
ROA not before: Thu 07 May 2026 07:57:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 31.56.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:71:51:3f:77:95:c8:2c:5d:87:e1:ae:5b:cf:37:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 7 07:57:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ce464d524111afea782d5f89c5106d8d4a9e17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:81:af:d5:ca:62:1b:7d:d6:d7:8a:84:7e:
4a:b7:4a:12:4a:48:4d:12:66:27:a1:3a:a9:8b:79:
ac:84:6d:d5:35:11:06:ae:3c:2a:92:2c:b6:70:2c:
7a:8c:38:50:62:a7:80:24:eb:e5:23:29:c7:9d:47:
83:1a:78:2c:fb:8f:04:83:e3:38:a9:04:ac:6e:29:
11:eb:a6:8a:05:ef:12:b0:16:1a:85:a4:76:ed:3b:
4f:08:dc:b7:5e:44:40:bc:e5:8e:6d:0e:eb:d0:ae:
8e:b0:a0:12:fc:63:0a:b9:27:df:9d:3a:ff:13:fb:
2d:25:96:3d:f1:f5:ff:47:a8:c8:2e:37:76:63:fc:
20:01:47:23:f4:d3:64:29:84:e8:32:8f:8b:54:a8:
2c:54:26:3d:31:2a:e2:37:29:92:82:0f:9f:51:ff:
01:fb:65:83:f1:48:86:3f:e2:27:db:08:e6:16:58:
bf:42:c9:b9:d1:70:31:53:84:33:94:b1:a8:43:21:
ba:bc:86:d9:c4:54:6b:7c:e9:84:4d:69:ab:9c:bb:
60:71:bf:aa:76:3b:82:0e:6b:86:68:d1:8a:10:81:
1d:87:80:18:d8:1d:54:0a:3c:4d:f7:29:ff:a0:79:
8a:90:55:8a:93:b8:14:5c:ce:b4:8b:6d:d1:b4:da:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:64:D5:24:11:1A:FE:A7:82:D5:F8:9C:51:06:D8:D4:A9:E1:7E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fORk1SQRGv6ngtX4nFEG2NSp4X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:22:00:a6:cf:cd:41:56:9e:32:94:f6:bd:92:49:c2:e0:b4:
90:70:e1:4d:5f:15:fe:36:7a:74:99:42:ec:15:f3:d9:a6:21:
a6:f4:c0:64:22:d7:15:ae:21:04:81:59:8d:36:3e:df:05:aa:
ed:c7:a1:49:0d:07:4d:98:00:0e:f4:a9:f4:f1:2f:46:90:64:
9f:92:8e:ba:64:db:c7:0a:ba:1f:8f:a7:6b:8f:fd:4e:65:ae:
c2:c0:17:14:5d:d9:ab:88:4c:f7:c5:6b:87:53:67:ce:2c:d4:
af:ca:7d:d8:5e:27:8f:7e:00:0b:d7:f7:6f:b5:05:c9:5d:d9:
8a:6e:50:25:82:28:17:b2:4a:88:76:c4:10:a5:12:76:35:25:
dd:c1:99:4a:58:82:74:2e:9c:1b:70:b8:1a:5a:30:12:25:a4:
f3:1d:12:de:01:7c:73:d4:9a:21:ea:2f:de:6e:ae:a7:b7:c3:
6a:9b:a7:8c:65:8f:aa:a9:94:6e:09:f3:91:2d:e0:62:ee:e4:
bd:3b:80:f7:76:a5:19:2d:15:e8:1d:dc:02:3f:89:42:69:b3:
d8:d4:db:57:8b:f5:59:93:cf:bb:8a:6d:88:91:1b:c1:b4:96:
88:26:05:e2:f2:fa:fa:54:f0:30:2c:61:73:76:36:73:02:95:
b5:64:93:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:26 2026 by rpki-client