Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G4T2qdL8dXDaNcugu2yYaeI_u90.roa
File: G4T2qdL8dXDaNcugu2yYaeI_u90.roa (raw, json)
Hash identifier: WXIehbS5SzGJ969CuZ2k4LLjk3le+KFKqf62VFXPTFg=
Subject key identifier: 1B:84:F6:A9:D2:FC:75:70:DA:35:CB:A0:BB:6C:98:69:E2:3F:BB:DD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01999BB12B484488A3AC09CF71A87FFBA6E8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G4T2qdL8dXDaNcugu2yYaeI_u90.roa
Signing time: Tue 30 Sep 2025 17:35:03 +0000
ROA not before: Tue 30 Sep 2025 17:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401476
IP address blocks: 31.58.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:b1:2b:48:44:88:a3:ac:09:cf:71:a8:7f:fb:a6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 30 17:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b84f6a9d2fc7570da35cba0bb6c9869e23fbbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:e2:d6:67:e4:a5:14:cd:38:b0:82:7a:03:
08:d9:bd:38:a2:e9:2f:1d:dd:57:84:38:ab:d7:7e:
e4:30:f2:82:fa:a7:e5:59:9c:ad:3d:56:12:0c:c1:
2a:a8:40:9e:62:9a:36:2f:6c:67:2d:10:4c:a4:2e:
f9:48:f7:d7:e8:9b:64:8d:30:d0:fb:ef:71:f6:91:
f6:13:45:83:25:12:95:92:16:84:e2:4b:72:18:53:
0f:c0:9d:75:98:b9:c1:1c:47:4a:9a:f2:60:69:a4:
33:b6:bb:60:79:66:30:dc:be:fe:6d:fc:20:cd:bc:
c0:e5:5a:32:42:11:8b:a7:c0:c3:36:24:86:2e:38:
45:8f:7f:08:29:d7:c9:32:26:e4:f4:44:56:21:c6:
2f:45:87:64:eb:5a:1b:50:6b:17:57:be:19:e3:41:
1e:71:75:b3:c9:b0:be:1a:67:b7:19:6e:64:ef:fc:
d3:18:73:6f:d1:cb:e2:50:9c:cc:61:3b:44:2a:54:
94:50:f9:a5:10:3f:b9:6e:16:e5:d6:d0:76:0c:af:
72:36:fc:3a:6c:de:69:7a:8e:1e:30:1c:7f:ab:5d:
64:67:e7:d8:62:3d:7a:72:10:44:39:fa:4c:f6:00:
7f:08:e5:e0:64:7f:cb:b9:cb:82:0f:80:f7:9a:9c:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:84:F6:A9:D2:FC:75:70:DA:35:CB:A0:BB:6C:98:69:E2:3F:BB:DD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G4T2qdL8dXDaNcugu2yYaeI_u90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.215.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bf:8f:ab:64:8d:09:14:ae:30:bb:bb:db:4d:87:af:cc:46:
91:e7:fd:35:90:82:1a:0a:3b:f5:d5:8a:b4:91:7c:30:01:b1:
87:0e:e9:24:91:6e:86:fa:ad:24:b7:0b:8f:5c:87:3e:34:de:
6f:d0:3d:fb:ae:25:42:94:b1:d0:3c:5c:60:0f:2e:ee:8d:61:
14:8b:aa:81:81:c7:d4:3e:dc:3e:44:f8:4c:39:cd:da:88:ad:
2d:f8:e6:70:be:75:4e:c5:a9:1f:24:6f:7c:9b:25:90:bd:2c:
8e:81:67:c0:72:6c:73:89:2a:89:a9:6e:84:43:85:2c:06:a4:
37:8e:df:a0:b1:1e:d3:7a:70:ca:bd:1e:9c:23:fa:b7:b9:67:
12:62:60:46:7a:c6:5e:61:2b:68:a0:78:d3:bf:14:f3:93:d6:
4a:65:6e:36:1f:3d:b3:21:27:c7:2e:97:ea:12:07:d2:bd:ce:
2d:1f:e0:1b:8e:72:f0:82:71:cb:8a:69:6d:cd:c7:01:86:bc:
d0:0d:f0:d7:d6:c5:8f:39:d3:12:f6:31:53:86:e9:fb:5a:6c:
3a:6c:c5:5a:d3:a4:63:ab:4d:cc:a5:55:9f:fe:46:7a:b3:60:
57:1b:5b:e2:18:fd:13:33:48:c4:41:69:97:3e:4a:29:ad:b4:
21:45:82:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmbsStIRIijrAnPcah/+6boMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwOTMwMTczNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjg0ZjZhOWQyZmM3NTcwZGEzNWNiYTBiYjZjOTg2OWUyM2ZiYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h/i1mfkpRTNOLCCegMI2b04oukv
Hd1XhDir137kMPKC+qflWZytPVYSDMEqqECeYpo2L2xnLRBMpC75SPfX6JtkjTDQ
++9x9pH2E0WDJRKVkhaE4ktyGFMPwJ11mLnBHEdKmvJgaaQztrtgeWYw3L7+bfwg
zbzA5VoyQhGLp8DDNiSGLjhFj38IKdfJMibk9ERWIcYvRYdk61obUGsXV74Z40Ee
cXWzybC+Gme3GW5k7/zTGHNv0cviUJzMYTtEKlSUUPmlED+5bhbl1tB2DK9yNvw6
bN5peo4eMBx/q11kZ+fYYj16chBEOfpM9gB/COXgZH/LucuCD4D3mpwwbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuE9qnS/HVw2jXLoLtsmGniP7vdMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRzRUMnFkTDhkWERhTmN1Z3UyeVlhZUlfdTkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrXMA0G
CSqGSIb3DQEBCwUAA4IBAQAkv4+rZI0JFK4wu7vbTYevzEaR5/01kIIaCjv11Yq0
kXwwAbGHDukkkW6G+q0ktwuPXIc+NN5v0D37riVClLHQPFxgDy7ujWEUi6qBgcfU
Ptw+RPhMOc3aiK0t+OZwvnVOxakfJG98myWQvSyOgWfAcmxziSqJqW6EQ4UsBqQ3
jt+gsR7TenDKvR6cI/q3uWcSYmBGesZeYStooHjTvxTzk9ZKZW42Hz2zISfHLpfq
EgfSvc4tH+AbjnLwgnHLimltzccBhrzQDfDX1sWPOdMS9jFThun7Wmw6bMVa06Rj
q03MpVWf/kZ6s2BXG1viGP0TM0jEQWmXPkoprbQhRYIC
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:05 2025 by rpki-client