Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v6-OJUlN7hoql-dB-M_y3srbsuw.roa
File: v6-OJUlN7hoql-dB-M_y3srbsuw.roa (raw, json)
Hash identifier: GRbpWdd9aLdVRt2eUIkKzdM4b7iaTOja4ut4FUXdVmc=
Subject key identifier: BF:AF:8E:25:49:4D:EE:1A:2A:97:E7:41:F8:CF:F2:DE:CA:DB:B2:EC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F7B122A0F8B66D0D49821B0738E2047BA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v6-OJUlN7hoql-dB-M_y3srbsuw.roa
Signing time: Sun 19 Jul 2026 15:50:15 +0000
ROA not before: Sun 19 Jul 2026 15:50:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 31.56.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7b:12:2a:0f:8b:66:d0:d4:98:21:b0:73:8e:20:47:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 19 15:50:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfaf8e25494dee1a2a97e741f8cff2decadbb2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:86:e6:6b:48:a8:d5:7f:ad:17:02:d2:bc:
22:28:00:e7:11:8a:79:7e:bb:b2:3d:77:cc:5a:0f:
a4:2a:0e:65:a1:f5:30:e1:70:0f:30:9b:a6:f2:ed:
ea:8b:35:6d:63:44:f7:aa:c6:98:52:77:df:46:3b:
e9:1b:db:71:56:d1:c0:10:2b:1e:ff:cd:a0:72:5f:
40:d0:4b:c8:ba:eb:ba:ec:25:cb:39:34:dd:bb:6d:
cb:aa:91:2c:cb:9b:d6:84:1b:fd:6f:94:d8:54:95:
11:1a:ff:d5:2e:80:65:63:03:f0:52:38:4f:06:21:
71:2f:44:f0:da:90:2f:48:e2:f2:56:9e:74:cc:b7:
5a:5b:eb:c8:c5:a4:b0:59:51:f8:a6:f9:d8:8b:e3:
a2:66:bd:dc:da:28:bd:8d:2b:f0:97:0d:94:6b:fe:
8a:45:6b:7c:03:9c:f7:82:ac:b5:f5:f0:1b:4e:bb:
b5:de:85:88:03:23:c6:cc:a6:c9:68:17:44:fb:a6:
10:24:eb:39:64:0c:d9:27:7e:db:ae:5c:c9:14:3b:
c2:59:7f:ef:5d:77:44:8e:ac:0a:ef:d2:bc:a5:ea:
46:d7:f0:d5:8c:ae:a5:dc:fd:b6:a9:c5:79:a2:0d:
ac:1a:21:19:8f:fe:2d:8b:11:84:b4:a1:a9:36:b8:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:8E:25:49:4D:EE:1A:2A:97:E7:41:F8:CF:F2:DE:CA:DB:B2:EC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/v6-OJUlN7hoql-dB-M_y3srbsuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:e1:9e:60:c0:77:76:f4:3a:eb:b6:c7:26:0b:fc:7c:6c:fb:
67:76:80:6a:66:38:ba:30:f2:ca:9d:b2:29:00:09:5e:1b:fe:
68:e9:ba:95:84:b6:8e:8f:5c:eb:70:ba:b5:54:6d:08:05:15:
25:5f:12:e5:5d:1c:d9:2a:15:3f:85:cd:65:b1:be:04:5c:36:
a8:1c:7c:9f:33:d9:ed:f6:1c:96:f8:95:53:fb:66:e1:e8:fd:
82:93:ef:8c:12:1a:f0:12:48:00:47:9a:7b:09:30:2c:62:76:
8d:d9:17:e2:37:d1:70:d9:5b:23:db:e9:7b:f8:23:d5:72:6b:
16:06:00:4e:c1:da:ae:09:9f:ca:fb:39:a7:ba:4e:b7:38:ea:
78:af:d2:fa:aa:31:a1:2d:46:f9:53:9d:27:5c:17:64:7c:ba:
0d:d8:2b:7d:62:a9:ed:48:c8:c1:ed:83:bc:c1:17:ea:8d:af:
f6:9b:f8:9f:58:fc:b0:d2:53:84:dc:9c:60:5f:cb:4b:f5:2e:
b7:db:9c:dd:6d:a0:a3:ed:52:f3:8c:6b:7e:b4:c5:8f:6e:55:
5c:88:a0:72:28:31:bd:c3:41:3e:04:a1:67:16:8c:c1:b7:ad:
17:9a:23:cf:2b:33:d2:1e:11:c4:45:3e:e3:2d:41:e4:2c:ff:
c8:9d:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:49 2026 by rpki-client