Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Au_LSiyK9rSqCUoEr_vcNqGYmZU.roa
File: Au_LSiyK9rSqCUoEr_vcNqGYmZU.roa (raw, json)
Hash identifier: 0Dy0S2TT11l75/INaWj3CDa8x2jHjJmlBMo4I5/SMQ8=
Subject key identifier: 02:EF:CB:4A:2C:8A:F6:B4:AA:09:4A:04:AF:FB:DC:36:A1:98:99:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0B55605890092BED6CD41F79B3514AB4B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Au_LSiyK9rSqCUoEr_vcNqGYmZU.roa
Signing time: Fri 18 Sep 2026 16:25:08 +0000
ROA not before: Fri 18 Sep 2026 16:25:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219357
IP address blocks: 31.59.140.0/24 maxlen: 24
31.59.211.0/24 maxlen: 24
217.60.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:56:05:89:00:92:be:d6:cd:41:f7:9b:35:14:ab:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 16:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02efcb4a2c8af6b4aa094a04affbdc36a1989995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d2:9c:c3:87:97:8a:14:55:fe:35:56:df:b0:
76:0f:c8:ec:a7:0e:ab:69:a6:94:82:b8:c2:28:60:
70:83:bb:e6:03:66:a8:dd:59:75:2a:e8:f1:ce:34:
67:bb:ea:44:b1:f3:f7:84:e3:c7:cf:e6:ae:8a:df:
76:f3:4f:7f:9b:13:8f:f1:34:00:50:54:99:fb:0b:
26:fa:d1:f7:6d:96:8d:92:16:40:d6:44:dd:ad:6d:
c6:77:11:ae:14:5e:24:ca:94:cb:43:df:a5:de:9c:
8a:4a:7d:e8:01:7b:9d:54:de:06:a1:3a:0d:ba:62:
8d:9a:d1:2a:52:47:f7:40:85:6f:a9:14:a5:85:21:
d7:db:d5:80:be:84:05:4a:19:8d:da:63:81:17:ff:
4a:95:16:60:4e:74:31:32:0e:27:dc:3e:3f:58:44:
7b:d1:b6:00:63:24:18:c7:23:a7:4b:7c:ee:b4:55:
d6:80:ec:a2:1d:ea:75:94:db:80:1f:46:11:25:72:
17:86:58:46:df:3a:c6:c5:8d:f3:86:14:4d:3b:ac:
5d:41:78:53:91:c2:60:0c:4e:51:a2:ab:83:0d:31:
12:00:52:18:44:a9:aa:21:86:93:30:64:5f:79:ba:
df:bb:b7:f6:06:da:22:4a:e7:1d:d0:6c:80:02:09:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EF:CB:4A:2C:8A:F6:B4:AA:09:4A:04:AF:FB:DC:36:A1:98:99:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Au_LSiyK9rSqCUoEr_vcNqGYmZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.140.0/24
31.59.211.0/24
217.60.67.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c5:ee:a4:1b:a9:26:53:cc:ae:59:31:e3:40:af:c8:71:1c:
86:06:ce:70:2a:16:b7:14:c3:bf:c5:20:cf:be:21:93:58:4e:
92:68:52:8a:f1:ec:93:71:0d:c3:8f:bf:13:62:f2:b6:98:d5:
63:dd:fb:42:6c:98:1c:71:72:00:b9:75:33:04:83:2f:ee:0e:
82:c0:28:f8:3c:62:60:df:c6:70:2a:89:82:b3:b8:70:8f:ce:
b0:07:ec:d4:07:3b:53:89:e1:42:69:8a:b2:7f:c6:35:71:ba:
58:3f:99:b2:bd:d6:ed:41:07:2c:e8:5a:54:48:45:7d:8b:d6:
6c:db:b8:8a:09:3c:43:58:bd:82:73:6a:cb:2e:26:74:b0:1b:
46:c1:82:25:5c:2c:f1:c2:66:10:12:92:19:18:a9:e0:d2:6e:
20:dc:fa:63:74:48:d0:3a:f8:4f:91:20:30:77:a2:e6:c9:e1:
70:8c:22:a6:1c:63:b3:49:cc:02:48:38:7a:4c:34:c5:aa:8e:
cb:25:4e:ef:73:46:79:52:51:e5:6f:8b:d9:f0:09:69:1a:94:
c3:16:bf:44:dc:e5:a8:15:cf:55:f7:36:be:ec:51:c7:ce:36:
b7:15:c0:33:01:09:e5:db:39:0b:f6:95:0d:20:97:98:60:3a:
c8:7e:05:1e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaC1VgWJAJK+1s1B95s1FKtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTE4MTYyNTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmVmY2I0YTJjOGFmNmI0YWEwOTRhMDRhZmZiZGMzNmExOTg5OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNKcw4eXihRV/jVW37B2D8jspw6r
aaaUgrjCKGBwg7vmA2ao3Vl1KujxzjRnu+pEsfP3hOPHz+auit92809/mxOP8TQA
UFSZ+wsm+tH3bZaNkhZA1kTdrW3GdxGuFF4kypTLQ9+l3pyKSn3oAXudVN4GoToN
umKNmtEqUkf3QIVvqRSlhSHX29WAvoQFShmN2mOBF/9KlRZgTnQxMg4n3D4/WER7
0bYAYyQYxyOnS3zutFXWgOyiHep1lNuAH0YRJXIXhlhG3zrGxY3zhhRNO6xdQXhT
kcJgDE5RoquDDTESAFIYRKmqIYaTMGRfebrfu7f2BtoiSucd0GyAAgkxXQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFALvy0osiva0qglKBK/73DahmJmVMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQXVfTFNpeUs5clNxQ1VvRXJfdmNOcUdZbVpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzuMAwQA
HzvTAwQA2TxDMA0GCSqGSIb3DQEBCwUAA4IBAQC9xe6kG6kmU8yuWTHjQK/IcRyG
Bs5wKha3FMO/xSDPviGTWE6SaFKK8eyTcQ3Dj78TYvK2mNVj3ftCbJgccXIAuXUz
BIMv7g6CwCj4PGJg38ZwKomCs7hwj86wB+zUBztTieFCaYqyf8Y1cbpYP5myvdbt
QQcs6FpUSEV9i9Zs27iKCTxDWL2Cc2rLLiZ0sBtGwYIlXCzxwmYQEpIZGKng0m4g
3PpjdEjQOvhPkSAwd6LmyeFwjCKmHGOzScwCSDh6TDTFqo7LJU7vc0Z5UlHlb4vZ
8AlpGpTDFr9E3OWoFc9V9za+7FHHzja3FcAzAQnl2zkL9pUNIJeYYDrIfgUe
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:55 2026 by rpki-client