Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aY5xYZCIBtZzfAJ9mU1NDhZf3hI.roa
File: aY5xYZCIBtZzfAJ9mU1NDhZf3hI.roa (raw, json)
Hash identifier: eJDy8jfeZbl42JOJ8QUfn9R+oWMhfcCQ0Ou/J2vad+k=
Subject key identifier: 69:8E:71:61:90:88:06:D6:73:7C:02:7D:99:4D:4D:0E:16:5F:DE:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F8FEBFB5AA4F41027D343B63F0BA7D1A2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aY5xYZCIBtZzfAJ9mU1NDhZf3hI.roa
Signing time: Thu 23 Jul 2026 17:00:34 +0000
ROA not before: Thu 23 Jul 2026 17:00:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 31.57.140.0/24 maxlen: 24
31.59.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:fb:5a:a4:f4:10:27:d3:43:b6:3f:0b:a7:d1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 23 17:00:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=698e7161908806d6737c027d994d4d0e165fde12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:03:5d:71:16:ed:8c:19:fc:86:a3:1a:43:
0e:19:81:17:39:ec:6e:10:af:da:a4:4f:0e:6a:13:
3a:6d:02:57:93:53:b3:40:7b:2d:fb:20:c0:3d:33:
ac:67:18:fe:1c:b7:6e:07:5c:bf:f9:bd:ed:5b:24:
38:85:c6:dc:bd:c3:1a:a6:a0:43:08:bb:f1:18:c9:
75:e8:38:87:cb:d3:24:2f:c8:54:a8:3d:85:30:b5:
a1:f1:f3:ca:c3:42:f6:24:4c:49:9f:da:8b:0f:47:
d0:c5:6e:78:42:4c:0b:1a:8a:8b:59:db:b2:96:c6:
ae:1c:d5:e6:d0:09:42:30:f9:64:7e:4b:e8:c5:c3:
95:03:47:6d:d1:d2:59:6e:f2:3c:61:3c:20:91:c2:
2c:ef:d8:fa:94:ac:8f:2a:15:77:52:b4:09:39:a6:
3b:41:65:fa:68:2d:97:17:00:23:58:c0:7f:41:4f:
e2:01:a0:82:cd:be:79:14:c8:cf:ef:16:ab:32:0b:
6b:17:38:20:b3:43:8b:f8:a2:5e:9d:10:b7:36:63:
81:05:29:a5:e3:c3:d9:fd:37:33:15:78:ab:e6:1b:
2b:8b:31:9a:cf:1b:03:b2:2f:33:0c:31:fb:98:b3:
6c:22:be:6b:ee:2a:1e:af:64:50:ba:07:69:28:bf:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:71:61:90:88:06:D6:73:7C:02:7D:99:4D:4D:0E:16:5F:DE:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aY5xYZCIBtZzfAJ9mU1NDhZf3hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.140.0/24
31.59.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:47:6a:9e:a2:b7:25:e3:df:1b:8e:f3:d2:36:c0:02:80:a0:
0f:88:40:4c:80:2d:db:cb:63:dc:fc:57:a2:14:ab:22:7a:e2:
89:9b:2a:5f:1a:18:d5:0b:22:df:ac:56:47:7e:61:b3:e8:75:
bb:6a:fa:24:cb:00:de:7f:a2:90:8a:bd:05:71:94:a8:6f:1b:
4d:a6:75:cd:d0:9b:59:05:7d:fc:26:05:6e:6a:27:d8:f4:b7:
1c:6f:05:19:98:fb:1c:50:3d:20:21:30:d0:c5:03:6a:c9:9c:
3b:ab:9e:cf:6d:4d:ee:61:8e:91:c4:12:13:55:fa:61:1c:20:
20:06:92:10:2f:15:71:be:a8:1a:aa:c7:60:1e:03:70:eb:3e:
47:2b:35:1f:93:9d:0b:47:14:f5:c9:8e:58:98:2b:d0:66:1d:
2e:e0:82:00:72:83:3e:ff:f9:05:18:9b:09:12:b4:98:f1:42:
f6:e9:06:35:64:bb:7c:d1:b7:bc:f8:af:95:d3:72:d9:32:4f:
bb:d6:97:ce:9b:65:75:94:07:d4:da:17:f2:ff:5a:e7:2a:46:
1e:b3:1d:75:3c:9c:1b:a3:ae:ea:d4:09:11:ea:86:59:9c:05:
89:9e:fb:a5:34:7c:ae:d0:b4:6f:19:67:5a:2c:de:f4:4f:4c:
75:82:a5:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+P6/tapPQQJ9NDtj8Lp9GiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzIzMTcwMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OThlNzE2MTkwODgwNmQ2NzM3YzAyN2Q5OTRkNGQwZTE2NWZkZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxYDXXEW7YwZ/IajGkMOGYEXOexu
EK/apE8OahM6bQJXk1OzQHst+yDAPTOsZxj+HLduB1y/+b3tWyQ4hcbcvcMapqBD
CLvxGMl16DiHy9MkL8hUqD2FMLWh8fPKw0L2JExJn9qLD0fQxW54QkwLGoqLWduy
lsauHNXm0AlCMPlkfkvoxcOVA0dt0dJZbvI8YTwgkcIs79j6lKyPKhV3UrQJOaY7
QWX6aC2XFwAjWMB/QU/iAaCCzb55FMjP7xarMgtrFzggs0OL+KJenRC3NmOBBSml
48PZ/TczFXir5hsrizGazxsDsi8zDDH7mLNsIr5r7ioer2RQugdpKL/cFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGmOcWGQiAbWc3wCfZlNTQ4WX94SMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYVk1eFlaQ0lCdFp6ZkFKOW1VMU5EaFpmM2hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmMAwQA
Hzv/MA0GCSqGSIb3DQEBCwUAA4IBAQA7R2qeorcl498bjvPSNsACgKAPiEBMgC3b
y2Pc/FeiFKsieuKJmypfGhjVCyLfrFZHfmGz6HW7avokywDef6KQir0FcZSobxtN
pnXN0JtZBX38JgVuaifY9LccbwUZmPscUD0gITDQxQNqyZw7q57PbU3uYY6RxBIT
VfphHCAgBpIQLxVxvqgaqsdgHgNw6z5HKzUfk50LRxT1yY5YmCvQZh0u4IIAcoM+
//kFGJsJErSY8UL26QY1ZLt80be8+K+V03LZMk+71pfOm2V1lAfU2hfy/1rnKkYe
sx11PJwbo67q1AkR6oZZnAWJnvulNHyu0LRvGWdaLN70T0x1gqUs
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:21 2026 by rpki-client