Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wgzd7lTso0joNlSaUmVpknK0Elw.roa
File: wgzd7lTso0joNlSaUmVpknK0Elw.roa (raw, json)
Hash identifier: +lTXpnN2jPdR9/FtQSRdgTADQgXaEiwi6Lanc9OGkXs=
Subject key identifier: C2:0C:DD:EE:54:EC:A3:48:E8:36:54:9A:52:65:69:92:72:B4:12:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E08D1F7CDB9F74C583EB5761EEA98F253
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wgzd7lTso0joNlSaUmVpknK0Elw.roa
Signing time: Fri 08 May 2026 18:20:38 +0000
ROA not before: Fri 08 May 2026 18:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400906
IP address blocks: 31.56.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:08:d1:f7:cd:b9:f7:4c:58:3e:b5:76:1e:ea:98:f2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 8 18:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c20cddee54eca348e836549a5265699272b4125c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:b4:59:42:d7:b5:96:a5:cc:2f:de:83:bf:
d5:68:37:43:90:54:df:6b:3d:23:0b:35:95:db:3c:
80:83:15:28:b8:25:0b:64:d6:1c:cc:67:08:cb:11:
f2:3e:12:71:04:cb:8a:61:02:06:4c:5a:2f:80:30:
41:bc:be:0e:67:ed:1c:ce:3c:48:e3:a8:ba:95:32:
8d:8d:7d:e3:e5:39:bd:26:c0:c9:ac:fd:d4:43:8a:
8c:12:00:23:df:54:fc:15:a2:8e:dd:04:64:35:4e:
f0:96:4d:f8:ca:c4:7c:c0:f6:04:00:bf:dd:88:62:
3f:be:26:55:76:62:54:d3:63:0a:85:dc:4d:d4:0a:
fa:fd:55:e6:d2:d7:e9:04:7d:2b:65:72:3d:9b:d3:
8d:f8:1c:be:94:2b:37:ad:8a:61:3c:31:21:99:62:
89:95:38:b1:65:af:39:aa:67:14:71:01:a4:bb:3c:
c9:c8:d9:ba:3e:94:85:e5:59:d6:b1:4b:e2:46:d8:
89:1f:83:9e:09:b1:93:86:79:6c:d3:52:1b:96:2b:
2e:68:e9:0f:f2:3e:2f:2a:8b:1f:21:93:dc:45:ae:
20:2f:46:f0:c7:e7:b7:61:8e:9b:6d:3f:11:bd:f8:
94:ad:b1:e4:f3:62:59:4c:01:66:f8:eb:11:e7:ae:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0C:DD:EE:54:EC:A3:48:E8:36:54:9A:52:65:69:92:72:B4:12:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wgzd7lTso0joNlSaUmVpknK0Elw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.164.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1d:b4:11:57:d4:41:44:c2:d7:4a:6a:c3:43:c9:e5:8d:39:
33:8e:d3:e0:5e:32:eb:01:a2:f4:39:09:9f:71:a5:51:6e:1c:
b3:a7:5f:71:02:ee:97:47:6e:b9:1f:e0:9e:3e:45:0f:d6:f4:
42:27:c3:b5:c9:1c:09:c6:06:56:6f:7d:7e:ef:d5:5e:b4:ec:
31:26:f5:4f:af:56:be:5a:6b:88:45:0c:1b:7b:f6:2f:90:52:
b5:be:17:2e:24:eb:43:ce:95:5e:c1:a7:81:fd:fe:71:b2:3f:
a0:64:45:79:28:44:11:f4:b3:38:2b:ed:a9:ff:37:c8:2f:5a:
ee:84:b7:10:26:17:eb:d5:c8:51:6e:dc:36:b3:bd:ff:c4:07:
d9:1a:19:e0:b8:75:d4:52:c0:c7:2e:af:d3:6f:6f:3f:22:82:
ad:ae:b0:1e:c0:f5:05:52:a0:06:e3:79:f8:0d:14:03:ec:77:
85:ee:1c:93:07:48:fc:fc:f5:6c:8b:4f:c0:66:9f:46:01:6c:
ed:45:d4:d1:ad:2d:8e:3e:c3:d9:62:3e:81:00:77:81:ff:0e:
b0:1d:c0:93:30:51:67:95:fa:de:33:52:36:5c:59:ce:7d:c1:
e4:29:ff:37:0c:8d:6e:5b:19:7b:c1:b3:5b:d7:ac:46:56:0c:
f3:ce:f5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:19 2026 by rpki-client