Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jMFwTs1ByhhPl0FMsCTTNopSLvI.roa
File: jMFwTs1ByhhPl0FMsCTTNopSLvI.roa (raw, json)
Hash identifier: MZ78GE06W3E21ij7g3vIL9JMwb1ZYI8Sayv9zMa++og=
Subject key identifier: 8C:C1:70:4E:CD:41:CA:18:4F:97:41:4C:B0:24:D3:36:8A:52:2E:F2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A187A4843DDCC2EC55C80857A6AF321D14
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jMFwTs1ByhhPl0FMsCTTNopSLvI.roa
Signing time: Thu 29 Oct 2026 12:31:08 +0000
ROA not before: Thu 29 Oct 2026 12:31:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218382
IP address blocks: 31.56.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:a4:84:3d:dc:c2:ec:55:c8:08:57:a6:af:32:1d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 12:31:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cc1704ecd41ca184f97414cb024d3368a522ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:3b:de:f0:04:9b:f7:47:80:f9:9d:02:91:
c4:86:65:34:5f:9b:c4:bb:8f:5e:60:c4:26:8d:e1:
66:3b:7e:12:74:fe:6a:b4:90:0b:43:62:34:7f:70:
67:78:bb:b9:11:66:09:54:91:e5:d5:51:cd:ab:ae:
36:34:a7:47:c8:78:8b:32:c0:80:44:49:ef:b8:53:
01:0c:2f:53:43:ed:b8:36:be:29:de:44:f4:37:cc:
71:9d:da:67:7e:a9:9f:ac:bb:c4:a8:96:c7:f6:ab:
c6:9e:0a:79:a7:1d:76:04:70:0d:7f:e5:0e:9f:56:
a1:de:3e:ac:c4:fe:77:11:10:39:bc:56:bf:35:6c:
7d:84:df:35:d6:8e:43:95:f3:a8:69:2e:7d:ae:97:
d4:fc:db:66:47:15:39:71:5d:0d:e9:e0:9a:b6:e1:
b1:7f:d0:00:e5:df:5e:5f:46:7c:f6:46:44:ec:98:
5a:4c:7f:cb:12:c2:47:43:1e:e8:ee:2f:ed:52:cc:
9b:da:65:0a:8e:70:37:09:11:cb:54:dc:a7:d7:b7:
4a:b0:b5:da:74:c3:28:fa:22:ee:a3:28:55:06:a7:
a8:d8:36:ff:83:bf:93:24:49:6d:7d:77:73:b8:1f:
fb:c0:1e:05:7c:1c:38:64:c5:03:8a:6a:b6:bd:9f:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:70:4E:CD:41:CA:18:4F:97:41:4C:B0:24:D3:36:8A:52:2E:F2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jMFwTs1ByhhPl0FMsCTTNopSLvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.100.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:79:55:ef:f2:03:3b:58:5e:72:25:07:a8:6c:21:51:fd:18:
9a:7b:7e:e2:6f:ca:4e:e4:52:96:7c:f6:8f:4a:88:f9:36:3a:
ea:a4:5d:9c:1b:b8:d4:28:f6:56:33:cf:7d:8b:31:5c:0b:4c:
eb:80:f8:9e:db:fb:27:08:8d:13:8d:28:12:e7:a0:23:75:fc:
c6:49:fd:af:7d:ce:26:fb:24:b1:e9:28:13:50:cc:1e:15:0d:
dd:1a:ed:0a:0d:5a:f8:63:38:86:e9:ab:56:4e:de:d5:ce:b9:
e5:16:fd:4d:fe:b1:80:79:a0:ad:b6:35:d0:ad:95:87:b4:71:
27:b2:58:16:9e:c7:63:7b:eb:04:4d:4a:7a:42:9c:03:62:47:
d7:aa:e1:ab:e7:13:e6:a7:31:ec:50:3b:a2:c7:50:ec:91:f0:
bb:ef:c2:0a:58:87:6f:a0:d5:59:30:d6:ec:5d:31:3a:dd:ee:
74:14:36:36:b2:11:34:d9:2d:e0:5a:6e:4d:c0:47:dc:dc:e3:
06:8f:0b:b3:64:41:37:c6:28:44:2c:85:8b:fc:35:ba:3f:6a:
df:81:bd:59:25:7e:c7:c4:91:bc:3e:6d:1d:67:94:bb:da:3e:
ae:a7:65:51:fa:08:b9:75:ce:d8:fd:3f:99:af:26:67:03:b9:
1b:23:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:30:21 2026 by rpki-client