Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kKjd8rsQsxzsroPjzkTqYSqquSQ.roa
File: kKjd8rsQsxzsroPjzkTqYSqquSQ.roa (raw, json)
Hash identifier: TLPzvywpOfqaifTpn9v3DzMPzxj1VPjDg6qUIYUVoH8=
Subject key identifier: 90:A8:DD:F2:BB:10:B3:1C:EC:AE:83:E3:CE:44:EA:61:2A:AA:B9:24
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DE22A396011D41235336A716C066A314C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kKjd8rsQsxzsroPjzkTqYSqquSQ.roa
Signing time: Fri 01 May 2026 06:11:51 +0000
ROA not before: Fri 01 May 2026 06:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 31.56.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:2a:39:60:11:d4:12:35:33:6a:71:6c:06:6a:31:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 1 06:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90a8ddf2bb10b31cecae83e3ce44ea612aaab924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:ee:11:af:e0:c8:1b:5b:00:d9:c6:86:d6:
5d:c1:1f:39:f8:8d:af:e6:d7:4b:c6:3f:59:de:84:
22:02:57:7e:6c:31:f6:a8:e3:7e:f0:27:dc:6f:69:
62:f0:2c:de:e6:09:b5:ba:88:1d:1e:d3:94:49:e4:
c4:4f:6e:2f:f2:ba:aa:ff:05:23:c4:39:cd:0e:55:
cc:29:63:70:95:54:77:62:f8:28:7e:be:a6:d5:8e:
4b:38:01:88:c6:fb:87:8d:76:fc:86:00:7f:8d:d1:
6c:08:49:b3:66:1d:9c:58:cd:79:3c:00:66:e5:c8:
16:f5:c3:19:6a:57:b8:c8:c6:0b:9e:39:c7:99:ba:
c4:e2:27:fa:e7:cc:fb:4c:24:74:19:29:7b:31:b7:
a5:fe:ba:22:50:1d:01:82:c4:0f:20:23:4f:ba:b4:
e7:e0:bf:72:61:70:cb:6a:a1:77:18:ac:74:ba:75:
46:5c:bb:cc:af:9b:95:b7:4a:ef:f8:43:b1:81:aa:
61:13:3b:83:c4:5c:63:60:ab:b6:16:82:c9:ec:0b:
1c:67:2a:6c:a8:70:28:8d:7d:c0:a3:b3:98:c7:85:
f0:14:28:ce:6d:59:9a:3a:1d:1a:7d:c3:f7:79:a1:
58:35:6a:1a:eb:24:cb:05:88:92:63:d5:05:1c:54:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:DD:F2:BB:10:B3:1C:EC:AE:83:E3:CE:44:EA:61:2A:AA:B9:24
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kKjd8rsQsxzsroPjzkTqYSqquSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.106.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f7:35:f0:b1:2d:fb:ed:0f:f3:53:e5:d5:64:0b:57:28:d3:
14:20:bd:dd:c5:8b:8e:23:50:4f:23:c3:99:d8:de:0d:e6:5b:
cd:c5:77:8a:2a:b6:a8:29:9e:f6:17:8b:a5:ba:78:31:14:ae:
ee:c3:bf:41:11:86:09:6a:e9:d6:22:11:76:7a:3c:e9:d7:70:
2b:7d:6c:81:14:b8:4e:18:ee:b7:67:a8:5d:b4:e9:4c:25:1d:
c8:45:c7:6d:d6:9e:26:8f:7f:a3:6f:e8:78:a9:a2:90:5e:31:
62:ee:fc:4b:05:bb:42:63:c7:98:03:56:00:56:af:a0:99:a6:
5e:bb:f2:62:cd:66:2f:0b:9a:99:68:9d:3b:13:f3:21:7a:bb:
75:34:33:9e:12:eb:ef:41:80:af:8f:aa:fd:22:d5:d0:33:7d:
d9:11:4f:1f:61:28:54:ce:78:e4:52:14:a1:f6:bb:ae:a7:40:
e4:7c:6c:c5:fe:f8:c5:93:6e:1d:4d:a1:8b:df:a3:a2:36:7a:
26:c0:97:60:72:ea:3e:46:db:9c:40:f8:62:03:b6:54:78:31:
a0:d1:18:3e:fc:1a:07:cc:83:bb:b0:81:91:cd:0a:a1:a5:c9:
9f:95:5d:98:3e:6d:17:4e:d2:95:62:a1:a2:3e:fb:8b:e7:0e:
94:f3:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:03 2026 by rpki-client