Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LiN3CY6Zye_td5PH54RUMk3WKZU.roa
File: LiN3CY6Zye_td5PH54RUMk3WKZU.roa (raw, json)
Hash identifier: Yl6nweOqB+jKUBvNY0ielNAtbeT8gT2Cp9px76UQFVk=
Subject key identifier: 2E:23:77:09:8E:99:C9:EF:ED:77:93:C7:E7:84:54:32:4D:D6:29:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D24874E4D5ACF6E5C43FFE6A14101572B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LiN3CY6Zye_td5PH54RUMk3WKZU.roa
Signing time: Wed 25 Mar 2026 10:25:40 +0000
ROA not before: Wed 25 Mar 2026 10:25:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 31.56.46.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.58.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:87:4e:4d:5a:cf:6e:5c:43:ff:e6:a1:41:01:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 10:25:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e2377098e99c9efed7793c7e78454324dd62995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:94:ff:01:77:fb:a4:5b:01:36:2e:d9:3c:
e8:44:81:1f:17:ab:5a:5a:50:e2:6a:cc:4d:9b:0e:
22:26:d0:ab:3c:13:c3:18:d1:3e:d4:6c:f9:62:d0:
e9:28:30:88:a8:f4:c3:bc:68:43:f5:24:8a:32:7c:
78:49:91:a0:7e:30:33:4a:45:7c:7c:9e:1d:cb:b0:
7d:35:26:41:51:ac:e9:60:a6:fc:33:6d:5b:2c:21:
fc:94:50:6d:e0:74:67:de:c1:5e:c9:13:e7:97:23:
db:78:bb:8a:52:1e:96:b2:da:e8:bd:88:f8:07:47:
0d:10:66:fe:00:ff:02:11:8b:90:24:69:51:11:fb:
07:d5:6d:9a:ee:7c:65:50:73:92:00:ba:50:00:a6:
b2:b4:c3:51:9b:4d:5e:52:dd:68:8f:15:b2:26:9e:
4e:a6:43:ae:fb:71:4b:bc:ed:cc:c8:21:6e:51:1d:
59:dd:02:db:5d:79:33:f7:e8:70:f6:89:6c:81:25:
4d:fa:a0:b2:2a:51:29:00:ac:d7:c5:6c:5d:12:7f:
4b:54:bc:79:90:9a:a5:1e:f7:80:f2:4c:7e:71:54:
6e:20:5c:a1:87:18:50:93:9b:51:3f:ac:82:b5:46:
0e:e1:c2:31:47:b6:61:d8:34:33:72:88:72:c5:e4:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:23:77:09:8E:99:C9:EF:ED:77:93:C7:E7:84:54:32:4D:D6:29:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LiN3CY6Zye_td5PH54RUMk3WKZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.46.0/24
31.56.61.0/24
31.58.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:48:52:13:eb:91:60:35:3c:58:4c:b6:cb:98:4e:46:9f:cb:
43:28:5e:5a:69:42:9d:4d:19:fa:91:70:8e:ba:f7:85:94:ac:
5d:cb:c5:19:9d:06:e3:23:64:7b:85:88:39:a4:5d:7e:8e:ca:
96:2b:6f:91:4d:80:71:a4:bc:c5:9f:8e:5c:cb:18:f2:0b:94:
5b:08:ba:63:d0:af:db:79:26:90:dc:e6:89:51:73:62:e3:c3:
db:52:80:c0:43:4b:fa:8f:08:10:32:84:c8:93:0c:43:86:2e:
dd:bb:9a:87:40:61:b4:83:30:4f:ec:98:8b:21:78:e5:cc:e0:
ed:b2:1e:29:57:52:73:a4:ae:88:b8:d2:bc:9c:71:61:bb:b5:
20:62:3c:13:28:b2:b1:b9:64:db:71:84:5c:c8:55:20:01:43:
0e:af:37:79:e5:95:31:95:0e:fe:97:37:96:5a:2f:72:07:16:
7c:0d:17:26:28:54:f3:ac:5e:de:3f:51:d9:4f:ee:e6:fa:1b:
dd:68:df:ce:6d:87:e5:dd:27:26:fc:e7:e6:d6:ec:83:8a:d0:
cd:3f:9c:8c:4e:a1:13:15:68:a6:bd:63:1c:85:d7:ef:be:ee:
a5:c4:f8:fd:ec:92:d3:42:88:28:04:a4:1b:3e:43:ec:9b:ce:
87:48:6e:e7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ0kh05NWs9uXEP/5qFBAVcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzI1MTAyNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTIzNzcwOThlOTljOWVmZWQ3NzkzYzdlNzg0NTQzMjRkZDYyOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4qU/wF3+6RbATYu2TzoRIEfF6ta
WlDiasxNmw4iJtCrPBPDGNE+1Gz5YtDpKDCIqPTDvGhD9SSKMnx4SZGgfjAzSkV8
fJ4dy7B9NSZBUazpYKb8M21bLCH8lFBt4HRn3sFeyRPnlyPbeLuKUh6WstrovYj4
B0cNEGb+AP8CEYuQJGlREfsH1W2a7nxlUHOSALpQAKaytMNRm01eUt1ojxWyJp5O
pkOu+3FLvO3MyCFuUR1Z3QLbXXkz9+hw9olsgSVN+qCyKlEpAKzXxWxdEn9LVLx5
kJqlHveA8kx+cVRuIFyhhxhQk5tRP6yCtUYO4cIxR7Zh2DQzcohyxeSycwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC4jdwmOmcnv7XeTx+eEVDJN1imVMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTGlOM0NZNlp5ZV90ZDVQSDU0UlVNazNXS1pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzguAwQA
Hzg9AwQAHzonMA0GCSqGSIb3DQEBCwUAA4IBAQAfSFIT65FgNTxYTLbLmE5Gn8tD
KF5aaUKdTRn6kXCOuveFlKxdy8UZnQbjI2R7hYg5pF1+jsqWK2+RTYBxpLzFn45c
yxjyC5RbCLpj0K/beSaQ3OaJUXNi48PbUoDAQ0v6jwgQMoTIkwxDhi7du5qHQGG0
gzBP7JiLIXjlzODtsh4pV1JzpK6IuNK8nHFhu7UgYjwTKLKxuWTbcYRcyFUgAUMO
rzd55ZUxlQ7+lzeWWi9yBxZ8DRcmKFTzrF7eP1HZT+7m+hvdaN/ObYfl3Scm/Ofm
1uyDitDNP5yMTqETFWimvWMchdfvvu6lxPj97JLTQogoBKQbPkPsm86HSG7n
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:34 2026 by rpki-client