Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-9KPyK2A5xgF8gOMgnDNOplEOQQ.roa
File: 1-9KPyK2A5xgF8gOMgnDNOplEOQQ.roa (raw, json)
Hash identifier: ly6r5kZ82Nx3VrPAE5Fm30x1dLhAK3QYhA+FeM2QiBQ=
Subject key identifier: FB:D2:8F:C8:AD:80:E7:18:05:F2:03:8C:82:70:CD:3A:99:44:39:04
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F79A4DE3FF6534CA230C83131405BF819
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-9KPyK2A5xgF8gOMgnDNOplEOQQ.roa
Signing time: Sun 19 Jul 2026 09:11:15 +0000
ROA not before: Sun 19 Jul 2026 09:11:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210464
IP address blocks: 31.57.56.0/24 maxlen: 24
31.59.141.0/24 maxlen: 24
217.60.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:a4:de:3f:f6:53:4c:a2:30:c8:31:31:40:5b:f8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 19 09:11:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbd28fc8ad80e71805f2038c8270cd3a99443904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:12:ed:66:36:a3:9d:00:e7:31:6a:d3:88:
06:eb:30:89:0d:96:03:db:8c:cd:e2:7c:3f:77:fe:
83:7e:d8:a5:12:4e:4d:1a:08:da:03:24:13:b1:74:
2e:13:8f:57:6e:da:0d:17:11:2d:0b:0f:14:6e:10:
2e:0a:c8:cf:11:7c:37:aa:16:a2:90:15:6a:4e:e2:
31:aa:a6:11:d4:00:da:46:06:07:d9:b2:a4:0b:58:
6a:8a:5e:d0:fd:c7:29:85:8f:cd:1b:cc:2f:15:4a:
c6:18:1f:9a:e9:23:6a:93:36:b5:7c:f0:8c:13:10:
6c:b6:42:ba:a7:71:aa:6a:c8:10:5e:0a:e6:20:49:
ad:bf:fd:35:1a:47:cd:07:7c:fb:13:42:29:4c:5c:
9c:55:6b:36:a5:da:7a:fd:17:2c:56:63:de:07:46:
5d:10:1e:13:cb:a7:61:0d:39:91:9a:16:e3:65:37:
13:81:2c:77:e9:16:15:a9:e3:e0:41:7e:97:f4:9a:
47:59:51:39:c2:88:c3:09:1b:d4:d1:56:e8:4a:9e:
1e:c5:5c:7a:8f:c5:30:13:57:4c:a4:e9:e5:ca:33:
cd:bb:bb:2e:09:4b:1f:1e:9b:eb:47:39:ce:71:37:
62:a2:79:b5:2a:87:17:d9:52:99:99:a6:4c:a5:12:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D2:8F:C8:AD:80:E7:18:05:F2:03:8C:82:70:CD:3A:99:44:39:04
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-9KPyK2A5xgF8gOMgnDNOplEOQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.56.0/24
31.59.141.0/24
217.60.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:5c:a2:64:44:48:65:34:0b:68:6f:f0:70:58:c6:00:1e:58:
d9:6f:22:01:72:32:e2:29:60:a0:3d:14:73:75:6c:42:1a:4a:
00:01:67:1d:d9:eb:7a:b4:cb:de:9a:c9:13:83:2f:6c:fd:2e:
b7:16:37:cf:62:f4:31:6d:08:31:75:8a:c4:2f:db:65:c8:90:
6a:81:7e:9e:b7:02:8a:b7:8b:dd:e5:43:fd:47:a8:59:ea:3c:
83:6b:76:98:23:d8:45:aa:6d:15:9c:18:36:70:e9:2f:db:5d:
11:f0:27:01:88:02:43:36:16:a8:5e:29:c4:62:74:1e:88:9d:
72:1d:33:62:c9:0a:26:2a:31:19:eb:b7:88:35:40:05:5e:8c:
02:2a:ad:ed:ab:67:8e:0a:d6:8e:1f:be:6f:5d:60:09:f6:26:
9f:62:9c:6e:93:0a:cc:99:c0:95:45:9b:5f:9c:e7:94:f3:2e:
de:47:21:8c:0e:89:77:c6:5b:c3:34:ae:04:26:f9:78:65:35:
13:bc:8c:60:35:66:cc:c5:59:99:5d:63:60:d5:31:6f:da:f8:
10:b3:82:1b:42:6f:13:ba:13:12:ee:99:d8:5a:33:e3:fe:92:
8a:26:d4:32:6b:51:9a:7b:8d:1f:be:2a:ca:fe:c2:42:91:f5:
cd:ab:54:10
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZ95pN4/9lNMojDIMTFAW/gZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzE5MDkxMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmQyOGZjOGFkODBlNzE4MDVmMjAzOGM4MjcwY2QzYTk5NDQzOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5QS7WY2o50A5zFq04gG6zCJDZYD
24zN4nw/d/6DftilEk5NGgjaAyQTsXQuE49XbtoNFxEtCw8UbhAuCsjPEXw3qhai
kBVqTuIxqqYR1ADaRgYH2bKkC1hqil7Q/ccphY/NG8wvFUrGGB+a6SNqkza1fPCM
ExBstkK6p3GqasgQXgrmIEmtv/01GkfNB3z7E0IpTFycVWs2pdp6/RcsVmPeB0Zd
EB4Ty6dhDTmRmhbjZTcTgSx36RYVqePgQX6X9JpHWVE5wojDCRvU0VboSp4exVx6
j8UwE1dMpOnlyjPNu7suCUsfHpvrRznOcTdionm1KocX2VKZmaZMpRIiMwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPvSj8itgOcYBfIDjIJwzTqZRDkEMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMS05S1B5SzJBNXhnRjhnT01nbkROT3BsRU9RUS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTIvNTExZjk1LWU0YmYtNDNmMS1hZjJmLWI4MTFjZmNiOWZk
NS8xL1R4c0pYNnRuWXp3Qko5WWY5b1Y0Wk9wckpjVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAB85OAME
AB87jQMEANk8YDANBgkqhkiG9w0BAQsFAAOCAQEAoVyiZERIZTQLaG/wcFjGAB5Y
2W8iAXIy4ilgoD0Uc3VsQhpKAAFnHdnrerTL3prJE4MvbP0utxY3z2L0MW0IMXWK
xC/bZciQaoF+nrcCireL3eVD/UeoWeo8g2t2mCPYRaptFZwYNnDpL9tdEfAnAYgC
QzYWqF4pxGJ0Hoidch0zYskKJioxGeu3iDVABV6MAiqt7atnjgrWjh++b11gCfYm
n2KcbpMKzJnAlUWbX5znlPMu3kchjA6Jd8ZbwzSuBCb5eGU1E7yMYDVmzMVZmV1j
YNUxb9r4ELOCG0JvE7oTEu6Z2Foz4/6SiibUMmtRmnuNH74qyv7CQpH1zatUEA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:24 2026 by rpki-client