Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vv4_0yqqrYmaPUOJWPWjCEV-dVQ.roa
File: Vv4_0yqqrYmaPUOJWPWjCEV-dVQ.roa (raw, json)
Hash identifier: qo4krN3SllWEMUxleIoKxs57r7p+ZFRWQ2F2ICeLvaU=
Subject key identifier: 56:FE:3F:D3:2A:AA:AD:89:9A:3D:43:89:58:F5:A3:08:45:7E:75:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F2D2AC29C6532BCCD4336A720C7D20715
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vv4_0yqqrYmaPUOJWPWjCEV-dVQ.roa
Signing time: Sat 04 Jul 2026 12:46:44 +0000
ROA not before: Sat 04 Jul 2026 12:46:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211507
IP address blocks: 31.59.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2d:2a:c2:9c:65:32:bc:cd:43:36:a7:20:c7:d2:07:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 12:46:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56fe3fd32aaaad899a3d438958f5a308457e7554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:c7:bb:1e:71:bc:dd:73:7f:66:f3:9c:9e:
36:a2:39:84:b6:c5:4e:f7:ff:9d:00:54:81:44:91:
4b:4e:3d:be:17:a6:df:22:71:e3:70:b8:e8:7e:41:
b2:be:91:cc:6e:45:f0:ed:3e:9a:4d:6b:91:65:80:
96:47:2b:e5:58:fb:80:4b:31:08:00:41:4b:66:20:
77:99:22:b3:7c:79:38:ef:a6:78:db:c6:38:c3:9e:
e1:46:bc:85:2f:2e:5e:d8:ec:2d:97:f7:1b:f6:54:
df:cb:84:0b:dc:3f:c6:e8:3b:31:73:59:9e:01:56:
05:cb:0c:fb:62:a1:c7:aa:91:9e:d4:cf:a1:0a:e9:
b2:80:c3:86:9d:76:93:9f:68:8d:4e:fa:e6:b2:26:
c1:b6:03:ad:10:c6:c2:6e:52:a5:52:eb:a6:a7:10:
02:39:1a:db:b7:36:90:cc:b2:4b:84:19:78:aa:60:
af:ed:75:e0:de:d6:5b:6a:b4:72:f8:f8:6f:da:14:
ee:8d:8b:37:fb:17:ff:3d:1b:42:1b:9f:1b:bb:44:
f1:5b:6a:f6:82:6b:7a:15:23:8f:36:ca:ca:5e:fe:
a5:f9:79:c3:6c:f3:1c:f1:4c:42:2b:b2:9d:f2:31:
75:e9:44:ed:9b:72:eb:d5:d2:86:da:a0:f3:6c:36:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:3F:D3:2A:AA:AD:89:9A:3D:43:89:58:F5:A3:08:45:7E:75:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vv4_0yqqrYmaPUOJWPWjCEV-dVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:38:54:b5:f9:ab:ac:5c:24:e5:78:41:15:8f:39:1f:4e:4c:
e6:96:f0:54:49:0a:4e:fc:20:0c:12:e9:5e:01:5a:7d:1b:f0:
85:bd:2f:9c:39:98:e8:45:fc:9b:6a:bd:2e:10:89:a2:c0:45:
ff:aa:7e:a6:18:40:bc:47:e4:f0:1e:c2:40:dd:09:40:a4:b9:
a3:69:af:54:4f:a2:44:af:62:e6:29:e0:e9:c7:66:f5:ed:f4:
d7:bf:7d:8e:cc:cc:79:0e:b7:5f:a0:37:14:c2:19:18:55:64:
07:ec:b9:ef:4f:be:9d:4d:94:2e:12:7f:1f:60:ee:68:16:62:
8c:9e:9f:c0:91:17:3d:1e:17:a3:31:aa:24:2e:a0:c3:5f:90:
8d:51:6a:4f:fd:ef:1f:b4:a2:cd:99:e5:1e:05:e3:ad:a8:e5:
f3:73:54:04:c9:d3:5d:3c:e9:86:32:71:89:0b:39:2c:10:ee:
f0:1e:e6:41:0c:11:52:1d:b8:54:14:0e:91:52:75:fe:e7:8d:
52:6e:d5:35:97:aa:dc:79:85:e8:e4:f6:3f:a6:f2:03:f5:06:
ef:ad:46:58:2c:ce:05:08:cd:47:5b:15:47:c5:1d:d2:5f:9d:
6e:7c:6e:be:69:8b:61:53:49:3e:2d:09:0e:91:86:7c:a8:57:
8b:19:b7:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8tKsKcZTK8zUM2pyDH0gcVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzA0MTI0NjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmZlM2ZkMzJhYWFhZDg5OWEzZDQzODk1OGY1YTMwODQ1N2U3NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ETHux5xvN1zf2bznJ42ojmEtsVO
9/+dAFSBRJFLTj2+F6bfInHjcLjofkGyvpHMbkXw7T6aTWuRZYCWRyvlWPuASzEI
AEFLZiB3mSKzfHk476Z428Y4w57hRryFLy5e2Owtl/cb9lTfy4QL3D/G6Dsxc1me
AVYFywz7YqHHqpGe1M+hCumygMOGnXaTn2iNTvrmsibBtgOtEMbCblKlUuumpxAC
ORrbtzaQzLJLhBl4qmCv7XXg3tZbarRy+Phv2hTujYs3+xf/PRtCG58bu0TxW2r2
gmt6FSOPNsrKXv6l+XnDbPMc8UxCK7Kd8jF16UTtm3Lr1dKG2qDzbDaKpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFb+P9Mqqq2Jmj1DiVj1owhFfnVUMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVnY0XzB5cXFyWW1hUFVPSldQV2pDRVYtZFZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzuUMA0G
CSqGSIb3DQEBCwUAA4IBAQB9OFS1+ausXCTleEEVjzkfTkzmlvBUSQpO/CAMEule
AVp9G/CFvS+cOZjoRfybar0uEImiwEX/qn6mGEC8R+TwHsJA3QlApLmjaa9UT6JE
r2LmKeDpx2b17fTXv32OzMx5DrdfoDcUwhkYVWQH7LnvT76dTZQuEn8fYO5oFmKM
np/AkRc9HhejMaokLqDDX5CNUWpP/e8ftKLNmeUeBeOtqOXzc1QEydNdPOmGMnGJ
CzksEO7wHuZBDBFSHbhUFA6RUnX+541SbtU1l6rceYXo5PY/pvID9QbvrUZYLM4F
CM1HWxVHxR3SX51ufG6+aYthU0k+LQkOkYZ8qFeLGbcA
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:46 2026 by rpki-client