Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZPPP8yfqnLurxWghQmNVhG4vQKk.roa
File: ZPPP8yfqnLurxWghQmNVhG4vQKk.roa (raw, json)
Hash identifier: /lZ/0B7dgg+v8YOG7L6wyMCmQyRCvLavlITG0IYlOXE=
Subject key identifier: 64:F3:CF:F3:27:EA:9C:BB:AB:C5:68:21:42:63:55:84:6E:2F:40:A9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DABAA2822CEC51F452A2DD5C8A9D29101
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZPPP8yfqnLurxWghQmNVhG4vQKk.roa
Signing time: Mon 20 Apr 2026 16:12:28 +0000
ROA not before: Mon 20 Apr 2026 16:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6642
IP address blocks: 31.58.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:aa:28:22:ce:c5:1f:45:2a:2d:d5:c8:a9:d2:91:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 20 16:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64f3cff327ea9cbbabc56821426355846e2f40a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:56:69:8c:e3:d7:d5:07:c1:9e:c5:a0:5e:
1f:db:2e:c1:cd:43:f4:d4:c7:41:69:1e:87:5f:82:
39:04:76:42:ba:a3:3a:a1:32:59:fa:69:5a:4b:8a:
74:cd:f1:ea:ea:c9:43:c1:9e:11:d3:f6:48:c6:d4:
bb:4d:00:91:59:7d:48:1d:4b:09:51:c0:73:54:27:
de:bc:54:0f:2f:c0:f8:15:b8:f3:e3:14:21:cd:30:
a7:6d:7f:1f:a4:82:2c:2d:88:6f:f4:f3:97:9e:78:
83:3d:3a:60:28:9d:20:0c:96:aa:08:87:57:2b:6f:
2b:00:85:96:93:d9:67:66:c6:28:41:d7:ee:cc:5b:
14:bb:73:7d:31:9c:40:e0:40:30:3d:d4:e4:7c:f3:
bc:9e:c9:6a:9e:53:b1:5c:f8:07:42:e7:38:4d:c6:
bf:26:ba:7c:85:60:f8:bc:a8:66:18:7e:af:89:0b:
8b:bd:ef:b9:de:e7:d6:17:cc:93:f7:10:c0:6f:18:
83:70:7d:f7:57:ea:ce:21:40:4e:32:aa:bf:78:85:
6d:14:9e:95:ec:33:93:34:bc:17:94:81:a2:f8:70:
64:b5:25:a4:fc:62:5a:55:75:b8:14:df:d4:d7:95:
00:a4:26:f8:1f:b3:6c:3d:8a:54:78:f9:0d:e4:2b:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F3:CF:F3:27:EA:9C:BB:AB:C5:68:21:42:63:55:84:6E:2F:40:A9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZPPP8yfqnLurxWghQmNVhG4vQKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.86.0/24
Signature Algorithm: sha256WithRSAEncryption
40:14:46:d3:f2:c5:02:a1:c9:9c:fc:d9:fe:49:ab:c5:6c:3d:
12:c6:5a:44:e3:55:7f:7a:35:dc:1f:8d:15:79:70:e5:00:8c:
13:a8:fb:0a:e2:44:5e:70:52:8e:f0:2c:55:3e:aa:f9:cc:d4:
e1:f5:52:64:c0:aa:09:9c:33:72:4d:9b:e7:54:ba:b5:81:37:
d3:97:27:43:02:b1:58:a0:14:d4:ed:0c:29:96:ad:9b:ae:d2:
50:2d:c1:01:18:28:b2:f5:5c:fe:79:3d:50:5e:e9:51:b1:08:
8e:63:cf:ca:9c:c7:f5:88:71:d4:ca:e8:97:8a:31:b6:3e:84:
6b:1f:a6:13:94:c7:70:39:2b:fd:36:2b:c9:28:09:de:8d:9e:
87:17:6e:98:fa:83:27:c0:de:19:5a:4a:da:46:f5:c8:b0:bb:
19:65:68:68:f2:7f:69:af:79:c9:c6:6c:33:12:94:e9:4b:6f:
65:7d:48:37:86:d8:d0:c6:b7:5a:89:c5:e0:c0:a6:31:4b:f8:
74:18:b6:d8:c5:de:88:f8:d3:65:23:cc:a7:b4:14:bd:2e:a2:
b7:66:84:fc:41:70:c3:17:90:22:85:a2:20:37:bb:1f:a4:65:
79:cc:41:a4:0d:68:bc:29:2b:f7:2e:14:cb:3c:53:a6:e6:19:
41:36:bd:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2rqigizsUfRSot1cip0pEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNDIwMTYxMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGYzY2ZmMzI3ZWE5Y2JiYWJjNTY4MjE0MjYzNTU4NDZlMmY0MGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF9WaYzj19UHwZ7FoF4f2y7BzUP0
1MdBaR6HX4I5BHZCuqM6oTJZ+mlaS4p0zfHq6slDwZ4R0/ZIxtS7TQCRWX1IHUsJ
UcBzVCfevFQPL8D4Fbjz4xQhzTCnbX8fpIIsLYhv9POXnniDPTpgKJ0gDJaqCIdX
K28rAIWWk9lnZsYoQdfuzFsUu3N9MZxA4EAwPdTkfPO8nslqnlOxXPgHQuc4Tca/
Jrp8hWD4vKhmGH6viQuLve+53ufWF8yT9xDAbxiDcH33V+rOIUBOMqq/eIVtFJ6V
7DOTNLwXlIGi+HBktSWk/GJaVXW4FN/U15UApCb4H7NsPYpUePkN5CufmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTzz/Mn6py7q8VoIUJjVYRuL0CpMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWlBQUDh5ZnFuTHVyeFdnaFFtTlZoRzR2UUtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpWMA0G
CSqGSIb3DQEBCwUAA4IBAQBAFEbT8sUCocmc/Nn+SavFbD0SxlpE41V/ejXcH40V
eXDlAIwTqPsK4kRecFKO8CxVPqr5zNTh9VJkwKoJnDNyTZvnVLq1gTfTlydDArFY
oBTU7Qwplq2brtJQLcEBGCiy9Vz+eT1QXulRsQiOY8/KnMf1iHHUyuiXijG2PoRr
H6YTlMdwOSv9NivJKAnejZ6HF26Y+oMnwN4ZWkraRvXIsLsZZWho8n9pr3nJxmwz
EpTpS29lfUg3htjQxrdaicXgwKYxS/h0GLbYxd6I+NNlI8yntBS9LqK3ZoT8QXDD
F5AihaIgN7sfpGV5zEGkDWi8KSv3LhTLPFOm5hlBNr36
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:22 2026 by rpki-client