Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FPa_qAFRIiqxCN8wc1LGmUpD6U8.roa
File: FPa_qAFRIiqxCN8wc1LGmUpD6U8.roa (raw, json)
Hash identifier: 78rJm6B+9okAXxvmxFGr9XlqZlXeN4UCctEKDS0f/mI=
Subject key identifier: 14:F6:BF:A8:01:51:22:2A:B1:08:DF:30:73:52:C6:99:4A:43:E9:4F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DF1F185D0CBF2A1887112D2F8CB0CB566
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FPa_qAFRIiqxCN8wc1LGmUpD6U8.roa
Signing time: Mon 04 May 2026 07:43:50 +0000
ROA not before: Mon 04 May 2026 07:43:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399461
IP address blocks: 31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.152.0/22 maxlen: 24
31.59.156.0/22 maxlen: 24
217.60.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:f1:85:d0:cb:f2:a1:88:71:12:d2:f8:cb:0c:b5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:43:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14f6bfa80151222ab108df307352c6994a43e94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:1e:f7:78:ab:4b:42:92:ae:44:36:32:53:
7a:cf:d0:45:db:90:15:d9:ea:f6:5b:45:73:88:7d:
5a:ed:d1:66:b0:50:ec:90:bf:66:b9:78:9f:71:95:
58:fa:34:38:bc:be:b2:56:cf:d6:1b:dc:f0:86:70:
fc:2c:a0:55:22:6f:7b:63:9b:49:82:5d:31:d0:b6:
d3:68:e1:0a:b0:1f:ec:3f:88:3f:b4:5d:48:91:51:
82:2b:9d:63:9a:c1:71:6e:c8:1e:0a:be:8b:87:1c:
e6:79:c1:e6:5c:9f:a6:ea:f8:20:36:de:3f:00:50:
db:a5:a6:7b:97:c5:88:d8:59:bf:87:35:37:77:3a:
c3:82:d6:63:5d:af:d2:ef:b4:6a:56:8e:ae:38:02:
9a:bc:d1:29:e5:01:be:b2:4f:1f:d9:7f:98:b9:da:
d4:a9:86:25:56:c1:7e:ac:9b:8d:45:23:da:45:3f:
08:55:5f:6e:8a:2e:fd:2c:4c:95:1b:c7:fe:c3:6b:
a3:e2:0d:de:d2:01:59:7c:d2:ac:17:37:13:e0:a4:
7f:b4:c4:3a:51:b3:66:f8:ac:d3:e3:12:e4:39:20:
a7:0c:45:d9:9f:77:1c:5c:d2:b5:6d:4c:4d:15:c2:
a9:2f:f3:44:7b:ec:27:e5:cc:c2:64:07:1c:d7:24:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F6:BF:A8:01:51:22:2A:B1:08:DF:30:73:52:C6:99:4A:43:E9:4F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FPa_qAFRIiqxCN8wc1LGmUpD6U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.64.0/22
31.59.80.0/21
31.59.152.0/21
217.60.100.0/22
Signature Algorithm: sha256WithRSAEncryption
32:4e:97:2c:89:6b:65:3e:d4:78:93:1d:a0:3c:28:ee:25:3f:
77:3a:76:8f:0a:b5:a6:00:cf:80:31:28:90:2b:37:73:64:df:
b8:28:db:93:23:5f:9c:73:c7:9d:0e:3b:ba:a9:5c:0d:74:9a:
ef:96:93:8d:b6:98:25:b3:91:8c:bd:d1:02:e8:d4:3e:5d:e3:
fb:d8:21:a9:ce:e5:67:fd:2c:a2:96:f3:ab:e0:5a:17:9d:02:
1b:61:20:c9:6c:70:fa:c6:01:33:c1:5c:f3:c8:7d:32:30:32:
af:30:76:bd:78:67:d9:53:17:33:fd:2c:f7:97:e7:0a:68:1d:
14:8e:c7:88:ef:b3:38:44:20:5e:01:b6:47:a7:06:ac:e3:c3:
34:ce:c0:c4:27:ee:f7:b9:5a:2d:86:2c:c4:3b:9d:52:1c:90:
eb:99:89:1f:8e:7f:55:2a:61:07:0d:42:de:ac:ed:35:bd:e2:
f4:d8:fb:68:bb:4d:b2:af:0b:45:91:a2:0b:9e:35:58:7d:ba:
43:ae:29:eb:99:f4:1e:ce:8c:a8:26:3d:cb:c3:62:36:a5:24:
09:69:0c:1c:26:4f:55:b4:b1:a3:6e:33:5e:0b:b2:b9:7f:75:
d4:81:ed:22:b8:de:4c:7e:92:91:4e:ca:63:e6:96:4b:82:ba:
78:87:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:40 2026 by rpki-client