Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ocJ7Gwdtv65PfdpfbolZJX30X8A.roa
File: ocJ7Gwdtv65PfdpfbolZJX30X8A.roa (raw, json)
Hash identifier: WJ7xMFYPexQD/jW4H9sPErBudAHEQ3Wn69gWtwj6If4=
Subject key identifier: A1:C2:7B:1B:07:6D:BF:AE:4F:7D:DA:5F:6E:89:59:25:7D:F4:5F:C0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F6AA26411D43B830866407DB02368E1D1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ocJ7Gwdtv65PfdpfbolZJX30X8A.roa
Signing time: Thu 16 Jul 2026 11:14:15 +0000
ROA not before: Thu 16 Jul 2026 11:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393406
IP address blocks: 31.56.191.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:a2:64:11:d4:3b:83:08:66:40:7d:b0:23:68:e1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 16 11:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1c27b1b076dbfae4f7dda5f6e8959257df45fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:d5:d1:ef:45:e5:c9:22:61:60:8d:84:70:
a7:1e:09:da:d5:eb:9d:26:53:a0:5c:80:e4:c1:14:
86:2e:6c:3f:18:38:94:b7:b5:b9:a8:71:c1:09:0c:
25:00:56:5c:a6:e3:a2:04:f6:fd:26:c0:aa:bd:41:
d9:e2:85:72:10:c7:71:33:e3:37:fe:1a:99:1b:c6:
07:ca:d7:ba:a3:d3:ef:42:2d:3a:8c:c0:48:2c:5a:
ba:f3:2a:a6:ef:23:a7:9d:66:2c:80:de:07:6f:74:
a0:21:4b:b1:de:a7:8a:b9:43:77:09:15:97:fc:33:
8b:22:6e:2a:2e:72:fe:4c:e5:e5:25:47:98:ca:53:
26:f2:ea:d9:c0:a1:45:2e:84:12:d7:29:4a:82:84:
30:92:26:2f:2e:7c:00:61:23:d5:7f:22:25:bb:c7:
57:e1:47:5c:30:23:89:31:d0:09:e6:eb:47:c9:42:
ed:01:03:cf:a1:d9:1f:62:3c:21:a0:a0:04:7c:97:
05:47:65:0b:5b:56:3a:e2:84:02:0b:83:a9:53:a5:
51:45:b3:57:16:43:c9:ce:4f:7c:a1:8e:8c:89:10:
bf:0a:7d:ce:9d:65:3e:46:bf:c4:c3:9e:3b:ec:6f:
0f:ba:b0:5f:c7:1e:28:32:3e:b4:62:46:a2:fc:5f:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:7B:1B:07:6D:BF:AE:4F:7D:DA:5F:6E:89:59:25:7D:F4:5F:C0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ocJ7Gwdtv65PfdpfbolZJX30X8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.191.0/24
31.57.104.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:1d:f9:c1:7b:d8:db:3d:77:c7:9d:e0:c4:07:99:7e:b4:53:
7a:e4:a2:d3:e7:5d:89:a3:84:78:9a:08:f0:8b:16:c0:75:43:
98:0b:73:67:a9:c2:2a:6f:69:2b:45:4b:06:28:3d:9d:9b:b2:
6f:fb:ca:de:dc:5c:01:8a:fc:f7:67:17:99:3d:1a:c8:1b:a9:
8e:09:20:89:32:10:d8:5f:14:df:62:1f:4d:99:b8:9b:d6:f0:
a9:c1:c3:fd:76:6c:04:b5:bc:51:ac:f4:9d:d9:0e:f8:a9:c4:
48:a6:b9:3a:3e:b4:4a:84:0d:df:56:11:51:6b:ba:be:ce:a8:
16:85:7c:a7:5c:9a:ed:1a:b2:e0:13:71:59:ac:ab:98:f4:7e:
53:4d:00:22:95:16:59:b4:8b:a7:a4:47:a7:20:3e:90:51:08:
69:16:51:ce:60:70:03:18:df:b9:f3:d0:09:ab:fd:ca:52:95:
1a:66:18:73:d2:5f:68:30:61:ec:80:23:eb:f3:97:1e:d1:5a:
c6:22:0f:1d:c6:40:a8:28:9c:27:5b:bd:2d:70:a0:11:74:3c:
49:ea:3b:2b:9f:78:12:9e:38:f9:fa:0c:3f:4e:8f:f5:58:d9:
2a:f0:9c:37:4a:24:7d:0e:9a:e4:f5:89:5f:27:38:02:e2:b5:
e5:d4:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:29 2026 by rpki-client