Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KjbgLyMSAnZYRcFVakZQjIcjLWQ.roa
File: KjbgLyMSAnZYRcFVakZQjIcjLWQ.roa (raw, json)
Hash identifier: 0FG7RgifqguA3DqkZqIs5utN3BZ/iFfTBj/NdjzhV2g=
Subject key identifier: 2A:36:E0:2F:23:12:02:76:58:45:C1:55:6A:46:50:8C:87:23:2D:64
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CDB846244B6805468F47EA981F4BC41D6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KjbgLyMSAnZYRcFVakZQjIcjLWQ.roa
Signing time: Wed 11 Mar 2026 06:10:12 +0000
ROA not before: Wed 11 Mar 2026 06:10:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40662
IP address blocks: 31.57.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:84:62:44:b6:80:54:68:f4:7e:a9:81:f4:bc:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 11 06:10:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a36e02f231202765845c1556a46508c87232d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:12:43:44:2a:60:30:37:34:4d:2b:ce:de:
ac:98:52:07:cb:cf:1e:dc:22:c0:68:89:af:e1:c3:
f3:72:14:3b:aa:16:1d:22:12:e2:dc:44:49:e4:29:
bb:39:3f:9c:d0:18:f4:39:e4:af:66:42:c5:3c:9a:
36:3b:05:51:18:ec:d9:f3:95:ba:e4:9c:19:a8:07:
e2:d0:31:c9:86:d0:97:4a:b3:92:fe:51:cf:89:61:
46:e9:fb:44:61:8f:ff:d8:7f:b6:96:d7:ee:70:05:
1f:59:34:9d:12:4b:8e:51:0c:ba:fa:c9:ce:be:48:
de:53:82:bc:78:eb:f7:3f:b6:2f:72:57:ba:f6:c4:
2e:0a:f2:fc:7a:d7:77:cc:2f:86:52:fc:6d:e8:8b:
71:d2:c1:d9:3f:3d:6b:f3:5e:64:23:c1:9f:1c:73:
69:c7:0b:41:c2:03:71:ca:66:2f:72:59:e6:ca:96:
b3:e4:bb:0d:57:08:71:79:84:9c:f9:91:4d:4d:81:
d2:d8:df:8b:d6:77:eb:a2:d4:71:74:41:6d:33:c3:
1b:1e:9c:0e:e3:b9:46:df:98:f8:0b:1b:6b:45:7c:
45:8b:22:14:f8:75:d9:71:1d:e9:25:82:75:33:5d:
a0:a1:c6:98:19:db:bd:13:61:ae:38:22:cc:bb:2c:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:36:E0:2F:23:12:02:76:58:45:C1:55:6A:46:50:8C:87:23:2D:64
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KjbgLyMSAnZYRcFVakZQjIcjLWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:00:63:9c:3f:ee:2c:8e:3e:7d:b7:ce:77:c3:99:a9:0c:5e:
d0:ed:0f:22:ab:a3:2d:3d:09:cb:ee:49:c9:dc:cc:53:76:3a:
8d:e2:f1:60:39:21:b2:7e:98:02:e1:1a:24:74:47:f9:00:66:
86:e1:a5:ed:49:09:31:62:38:29:0a:d0:6d:72:e8:53:6e:ca:
09:42:13:d8:1d:67:5b:cb:cb:ef:58:9c:52:65:48:48:69:14:
b7:d8:48:9d:2f:69:13:e3:85:36:10:89:0a:ac:35:6a:89:d3:
46:bd:12:ce:63:e8:be:5f:93:1a:3d:e0:40:c5:f5:95:d8:78:
8f:f1:60:8d:95:33:30:3e:d9:ab:21:ae:7f:b7:28:07:98:22:
a3:9e:88:17:e2:de:26:96:f5:6d:49:ec:be:bb:02:f8:07:ad:
d6:70:cf:da:af:db:63:b6:73:01:6c:41:06:91:c1:43:a5:58:
b6:4c:c2:aa:92:54:42:ab:a0:4f:a4:75:db:a5:15:1b:8e:19:
d5:8a:d5:9a:80:f5:5f:03:27:b0:19:90:a7:37:5f:ac:cf:ba:
0e:81:54:27:13:b5:dd:d3:e0:9c:13:26:d0:f8:57:41:4a:aa:
0c:42:71:1f:d1:80:51:15:a9:b0:71:c7:4a:50:cf:76:39:51:
78:80:68:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzbhGJEtoBUaPR+qYH0vEHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzExMDYxMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTM2ZTAyZjIzMTIwMjc2NTg0NWMxNTU2YTQ2NTA4Yzg3MjMyZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyUSQ0QqYDA3NE0rzt6smFIHy88e
3CLAaImv4cPzchQ7qhYdIhLi3ERJ5Cm7OT+c0Bj0OeSvZkLFPJo2OwVRGOzZ85W6
5JwZqAfi0DHJhtCXSrOS/lHPiWFG6ftEYY//2H+2ltfucAUfWTSdEkuOUQy6+snO
vkjeU4K8eOv3P7Yvcle69sQuCvL8etd3zC+GUvxt6Itx0sHZPz1r815kI8GfHHNp
xwtBwgNxymYvclnmypaz5LsNVwhxeYSc+ZFNTYHS2N+L1nfrotRxdEFtM8MbHpwO
47lG35j4CxtrRXxFiyIU+HXZcR3pJYJ1M12gocaYGdu9E2GuOCLMuyzVGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCo24C8jEgJ2WEXBVWpGUIyHIy1kMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvS2piZ0x5TVNBblpZUmNGVmFrWlFqSWNqTFdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznJMA0G
CSqGSIb3DQEBCwUAA4IBAQClAGOcP+4sjj59t853w5mpDF7Q7Q8iq6MtPQnL7knJ
3MxTdjqN4vFgOSGyfpgC4RokdEf5AGaG4aXtSQkxYjgpCtBtcuhTbsoJQhPYHWdb
y8vvWJxSZUhIaRS32EidL2kT44U2EIkKrDVqidNGvRLOY+i+X5MaPeBAxfWV2HiP
8WCNlTMwPtmrIa5/tygHmCKjnogX4t4mlvVtSey+uwL4B63WcM/ar9tjtnMBbEEG
kcFDpVi2TMKqklRCq6BPpHXbpRUbjhnVitWagPVfAyewGZCnN1+sz7oOgVQnE7Xd
0+CcEybQ+FdBSqoMQnEf0YBRFamwccdKUM92OVF4gGiy
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:32 2026 by rpki-client