Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BPIMwNyRRv5cUyewMrFM7M6NPjA.roa
File: BPIMwNyRRv5cUyewMrFM7M6NPjA.roa (raw, json)
Hash identifier: nmesyqp+tsfgYy3bG1DWNabGtVNd7fxFjNiiSSFWjKY=
Subject key identifier: 04:F2:0C:C0:DC:91:46:FE:5C:53:27:B0:32:B1:4C:EC:CE:8D:3E:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1B62A10DAF15B4676EDA17B462C945E6D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BPIMwNyRRv5cUyewMrFM7M6NPjA.roa
Signing time: Sat 07 Nov 2026 13:19:32 +0000
ROA not before: Sat 07 Nov 2026 13:19:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 31.58.36.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b6:2a:10:da:f1:5b:46:76:ed:a1:7b:46:2c:94:5e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 13:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04f20cc0dc9146fe5c5327b032b14cecce8d3e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:52:8b:d9:9d:5e:01:66:7e:62:56:e3:a6:
bb:db:da:0d:2f:79:44:3d:c3:83:f0:3e:e0:26:f7:
1f:99:4e:b1:99:68:45:9b:a2:86:7e:a7:d6:ef:52:
ec:66:51:c8:fd:b4:17:40:ba:07:4f:bd:61:9e:53:
e5:91:89:64:73:d5:d7:53:ce:9d:a7:92:d7:ce:5c:
98:89:d5:63:3d:f1:02:d0:0c:bc:02:4a:dc:af:db:
10:96:5e:ac:99:a5:15:d3:45:33:ef:ea:27:18:a4:
bc:24:84:f2:2f:8e:01:7b:33:eb:54:d6:56:8f:65:
b3:eb:b3:ca:95:78:6e:e1:fd:df:5d:b0:ec:42:05:
a9:2a:59:71:d0:a3:a4:7f:b4:17:88:ba:f8:16:84:
dc:4d:d6:5f:5a:13:de:92:36:7d:ea:c8:70:92:91:
af:ec:3d:58:2a:d5:b8:e8:8f:80:2a:e6:7c:ec:36:
15:32:c4:65:dc:ee:56:52:bf:ce:0a:ee:10:41:58:
68:37:80:96:b2:27:3c:51:d7:ba:7f:7f:d2:cb:13:
73:8d:90:11:56:ad:37:c1:8e:69:00:69:32:41:a6:
ec:d0:20:a6:70:32:cc:80:1c:70:f6:0a:9f:87:88:
3d:92:8b:da:25:19:3b:3e:98:0a:aa:59:69:ee:28:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F2:0C:C0:DC:91:46:FE:5C:53:27:B0:32:B1:4C:EC:CE:8D:3E:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BPIMwNyRRv5cUyewMrFM7M6NPjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.36.0/24
31.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:99:bd:93:49:6b:c1:ef:4a:3f:d5:02:05:64:c4:65:cc:34:
9b:75:75:20:25:25:40:6f:fa:39:ff:5c:2c:2e:78:7e:85:c0:
ef:f9:40:73:d4:57:8a:7a:49:c1:02:78:9a:61:9a:31:5a:48:
85:63:8a:ea:59:a7:4c:6f:59:9d:94:9d:da:b6:6f:e2:a1:37:
2e:c7:7f:cb:5d:ca:ff:3d:1c:bd:a4:3c:1b:73:1e:90:66:ee:
63:6f:38:16:7a:ce:90:27:bc:c7:02:90:30:60:f9:59:d6:04:
71:56:2f:43:0a:7b:f1:74:55:f2:eb:3e:96:30:21:d0:af:c8:
79:fe:4f:ec:7e:69:dc:4a:d1:ad:dc:24:28:53:7b:2c:2f:e6:
0f:44:20:f5:cb:58:7f:59:28:1b:83:cf:7e:d7:7c:e6:bc:35:
92:b1:e0:6e:d2:59:1f:31:fd:04:bf:11:f0:ef:6e:c8:32:8d:
f5:1c:a4:b0:24:68:cd:5d:75:34:9c:cb:a9:d9:89:78:88:e3:
17:d2:d6:31:e0:ca:bb:4f:e8:95:1a:57:c4:45:a3:6d:73:fb:
95:f2:17:1b:53:3d:fa:86:ed:91:08:27:1b:bb:d0:5f:19:55:
8b:bb:1b:20:b6:71:f2:1e:c1:e6:7b:55:a7:dd:6a:bb:c6:ef:
a7:64:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:54 2026 by rpki-client