Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/251CfjR3a74iRpmrJl8sNPzWz6E.roa
File: 251CfjR3a74iRpmrJl8sNPzWz6E.roa (raw, json)
Hash identifier: KlHoDpx+XlyyaUocRnyIp1SMMpfAxYvB5fvQkQgK75w=
Subject key identifier: DB:9D:42:7E:34:77:6B:BE:22:46:99:AB:26:5F:2C:34:FC:D6:CF:A1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E1B6620F3803B918BD2130B781ED4415A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/251CfjR3a74iRpmrJl8sNPzWz6E.roa
Signing time: Tue 12 May 2026 08:55:38 +0000
ROA not before: Tue 12 May 2026 08:55:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401856
IP address blocks: 31.56.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:66:20:f3:80:3b:91:8b:d2:13:0b:78:1e:d4:41:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 12 08:55:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db9d427e34776bbe224699ab265f2c34fcd6cfa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:40:02:6e:a1:ec:90:43:ba:89:dc:97:7b:
16:66:3b:bf:30:1b:16:11:2b:0a:86:2f:00:ff:b7:
8d:bc:53:34:24:18:28:98:1a:0d:30:e6:0e:f5:ce:
55:6f:fd:07:a5:4a:07:fb:8c:84:8a:3f:98:b5:93:
ee:c8:97:94:80:21:e2:e7:5c:3c:58:6f:59:51:2b:
71:7c:a3:84:f2:39:1e:2e:10:7a:42:76:a5:b0:66:
34:55:7c:28:28:ef:b0:2c:86:2b:fe:f2:87:62:bc:
a1:6d:09:d2:f8:76:f8:80:89:ff:ff:37:55:5d:20:
7c:52:dd:be:9e:e9:32:96:e9:b4:1c:05:1e:d6:3b:
a9:bc:7f:12:6e:c1:4b:89:e2:75:85:59:22:dc:a7:
f1:4e:0a:2f:58:5b:87:ad:07:3b:e8:45:27:b4:75:
0e:f3:bd:b1:8f:42:dd:a2:94:fe:98:2a:6a:e0:e0:
d2:db:5e:47:f0:90:aa:ac:20:c9:0e:24:03:0a:7d:
ee:33:58:f6:6d:3e:d3:7d:49:96:58:b7:75:bc:76:
55:b9:b0:24:db:c4:d0:8f:b7:0a:f8:c0:44:05:17:
e8:de:d7:32:4d:f0:a5:2a:54:94:f9:73:73:60:85:
96:06:22:dc:d4:a0:9d:e9:d9:e2:93:56:c6:ba:5e:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:42:7E:34:77:6B:BE:22:46:99:AB:26:5F:2C:34:FC:D6:CF:A1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/251CfjR3a74iRpmrJl8sNPzWz6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.91.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b6:ab:05:78:10:bf:0a:2b:11:7f:c7:73:82:9e:5c:80:60:
62:c2:a0:50:0f:f6:01:00:c6:27:68:17:35:cd:62:d7:be:b9:
cc:c8:1e:87:82:89:3d:bb:6b:f9:95:b7:1d:2a:c8:67:1e:00:
77:65:b1:d0:fd:11:18:8b:4a:a4:e2:c7:97:50:14:06:ba:ae:
ee:9d:6f:47:23:1b:a5:51:b2:2f:e1:a6:db:84:a1:05:42:2c:
0b:15:dc:45:a5:78:0d:f4:fe:a5:56:01:7b:71:fd:06:af:6f:
5d:e0:2d:fc:ed:14:10:55:fd:aa:52:ce:3c:60:75:cd:bf:de:
12:dc:f1:b6:65:6a:bf:3a:d0:7b:d7:af:3c:cc:73:8d:68:e2:
10:c6:07:28:18:76:0f:c4:dc:5f:f8:4d:d3:7a:c3:73:6a:55:
04:f0:54:b1:a0:74:a3:b7:1f:d1:9a:e7:dc:52:3d:68:cd:dd:
76:71:ee:e7:4d:46:2d:6d:7d:c3:3c:0c:af:f2:e5:55:29:0a:
a3:18:e2:21:08:ed:06:9c:2f:52:a3:62:50:b3:5a:eb:97:85:
1a:17:09:7f:56:d3:11:2a:3c:11:82:b7:dd:5c:8e:95:1a:05:
ff:15:15:de:0e:99:f4:2e:b9:66:61:7d:e8:5f:d9:bf:37:b1:
e5:b0:62:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4bZiDzgDuRi9ITC3ge1EFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNTEyMDg1NTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjlkNDI3ZTM0Nzc2YmJlMjI0Njk5YWIyNjVmMmMzNGZjZDZjZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CBAAm6h7JBDuoncl3sWZju/MBsW
ESsKhi8A/7eNvFM0JBgomBoNMOYO9c5Vb/0HpUoH+4yEij+YtZPuyJeUgCHi51w8
WG9ZUStxfKOE8jkeLhB6QnalsGY0VXwoKO+wLIYr/vKHYryhbQnS+Hb4gIn//zdV
XSB8Ut2+nukylum0HAUe1jupvH8SbsFLieJ1hVki3KfxTgovWFuHrQc76EUntHUO
872xj0LdopT+mCpq4ODS215H8JCqrCDJDiQDCn3uM1j2bT7TfUmWWLd1vHZVubAk
28TQj7cK+MBEBRfo3tcyTfClKlSU+XNzYIWWBiLc1KCd6dnik1bGul5T6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNudQn40d2u+IkaZqyZfLDT81s+hMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMjUxQ2ZqUjNhNzRpUnBtckpsOHNOUHpXejZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhbMA0G
CSqGSIb3DQEBCwUAA4IBAQCDtqsFeBC/CisRf8dzgp5cgGBiwqBQD/YBAMYnaBc1
zWLXvrnMyB6Hgok9u2v5lbcdKshnHgB3ZbHQ/REYi0qk4seXUBQGuq7unW9HIxul
UbIv4abbhKEFQiwLFdxFpXgN9P6lVgF7cf0Gr29d4C387RQQVf2qUs48YHXNv94S
3PG2ZWq/OtB71688zHONaOIQxgcoGHYPxNxf+E3TesNzalUE8FSxoHSjtx/Rmufc
Uj1ozd12ce7nTUYtbX3DPAyv8uVVKQqjGOIhCO0GnC9So2JQs1rrl4UaFwl/VtMR
KjwRgrfdXI6VGgX/FRXeDpn0LrlmYX3oX9m/N7HlsGIW
-----END CERTIFICATE-----
Generated at Wed May 13 04:20:32 2026 by rpki-client