Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sqx46E_k8wOaw6xHu-DSkvmY1sc.roa
File: sqx46E_k8wOaw6xHu-DSkvmY1sc.roa (raw, json)
Hash identifier: V2pPGIlBzxo9Xvd08EoQ+Jl7vg5NYW3yC1GzcV1PB2w=
Subject key identifier: B2:AC:78:E8:4F:E4:F3:03:9A:C3:AC:47:BB:E0:D2:92:F9:98:D6:C7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A193769D8D523127459AF82B5F856A43C4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sqx46E_k8wOaw6xHu-DSkvmY1sc.roa
Signing time: Sat 31 Oct 2026 19:36:26 +0000
ROA not before: Sat 31 Oct 2026 19:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401146
IP address blocks: 31.56.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:76:9d:8d:52:31:27:45:9a:f8:2b:5f:85:6a:43:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 19:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2ac78e84fe4f3039ac3ac47bbe0d292f998d6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:06:94:6b:f9:6a:e7:69:71:30:a7:d6:28:1a:
76:92:e0:b2:a4:46:8c:d0:72:b8:65:f7:0b:b6:f2:
b6:17:48:c7:82:f1:0e:23:fd:ed:c3:96:f8:3f:48:
ad:b7:8d:16:20:b8:14:64:9a:f4:30:d2:67:85:83:
81:30:06:a8:e5:ca:76:93:d0:59:d6:68:3e:05:02:
3e:94:fb:20:5e:f5:64:b9:8d:d9:64:ed:29:84:c4:
f9:b8:d8:f4:39:40:95:7a:f7:ca:78:20:45:d1:d4:
8f:ec:ce:9a:c2:d0:e1:a5:7f:67:11:2c:b3:2d:c9:
f5:0d:72:98:ad:cd:7e:ef:96:76:67:df:1b:aa:b5:
cd:b6:3d:d9:ca:ba:b6:00:48:b4:86:9a:72:32:7a:
eb:d0:5a:b6:27:65:e3:5f:03:7c:8a:5a:87:75:86:
f9:19:1a:e4:df:8f:77:25:59:90:10:72:2e:ae:56:
03:78:f0:60:99:94:c9:38:ca:38:ca:30:a4:c2:76:
9f:c3:11:d1:d6:d4:9f:f9:22:4d:b1:59:a3:74:35:
26:a3:f9:62:e8:87:7e:bb:99:34:fe:b5:fa:e8:fc:
6b:37:a8:2f:91:2b:eb:02:21:70:58:b5:dd:ea:2f:
46:63:29:e6:10:ce:b4:ec:4e:cf:ee:ad:f8:ff:b2:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AC:78:E8:4F:E4:F3:03:9A:C3:AC:47:BB:E0:D2:92:F9:98:D6:C7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sqx46E_k8wOaw6xHu-DSkvmY1sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.96.0/24
Signature Algorithm: sha256WithRSAEncryption
23:25:e6:18:c3:ee:b8:48:76:a9:28:52:f0:f9:91:e3:4c:7b:
d0:18:29:e6:32:ab:b3:ef:7a:da:86:41:25:a3:bc:4a:34:0a:
30:aa:57:66:df:ea:d6:64:8b:5a:fe:63:cf:4a:62:bb:d1:32:
85:cc:b6:4d:da:d2:e5:4c:70:8d:58:0d:24:a0:96:43:86:b7:
0d:7b:48:ab:ae:e1:b1:bb:08:24:8e:87:3b:c0:c0:46:42:cd:
1e:06:9b:82:0a:63:f5:29:00:d7:e4:d6:f7:47:6d:56:5b:67:
1f:09:6a:5e:07:26:a9:27:fd:6b:69:d5:1a:f0:b2:b7:74:30:
4c:c6:5c:46:cd:25:49:58:27:eb:8c:c8:c2:99:29:45:85:fb:
39:f9:93:eb:1f:1f:87:ce:02:03:de:ce:5d:24:8c:a5:2f:71:
bf:d3:14:1c:59:79:a4:a3:99:ea:7d:e6:43:6a:a0:2e:a1:b6:
56:14:9f:be:96:fe:17:a6:23:89:aa:ab:29:0c:7c:b7:97:d6:
9e:8b:0d:49:ee:8d:05:57:44:ae:39:e5:d5:3e:86:45:11:eb:
4c:93:5d:3e:bd:f3:9c:d0:23:43:6a:d6:e1:1f:35:48:f6:eb:
ce:d5:77:53:34:40:c9:ce:a3:7f:c2:3f:7b:87:84:9b:bb:ea:
08:47:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:07:04 2026 by rpki-client