Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/avuVa5tlscwdIb-kb5rNC3L0zQk.roa
File: avuVa5tlscwdIb-kb5rNC3L0zQk.roa (raw, json)
Hash identifier: z/SGBR434KOr+y1k3gnyjo3J0gY2p+ovEmbkRqY9v1k=
Subject key identifier: 6A:FB:95:6B:9B:65:B1:CC:1D:21:BF:A4:6F:9A:CD:0B:72:F4:CD:09
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F8FEBF9E39679151FFD2C5530C9035BE7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/avuVa5tlscwdIb-kb5rNC3L0zQk.roa
Signing time: Thu 23 Jul 2026 17:00:34 +0000
ROA not before: Thu 23 Jul 2026 17:00:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 31.57.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:f9:e3:96:79:15:1f:fd:2c:55:30:c9:03:5b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 23 17:00:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6afb956b9b65b1cc1d21bfa46f9acd0b72f4cd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:83:68:df:7b:7c:33:57:ed:13:2f:e2:4c:
e2:da:a6:83:c8:c8:b3:bc:ee:d8:5f:c5:8d:86:51:
4a:6c:7c:45:58:a2:09:e6:81:c4:4f:90:90:fc:5a:
65:01:d1:ca:15:ee:80:80:b4:15:ba:1a:49:9d:c2:
a2:78:39:c0:97:39:b1:4f:b9:7a:66:eb:15:aa:24:
86:0d:85:fd:d5:50:d9:62:66:b2:3b:55:d5:bd:00:
87:cb:65:e5:60:5a:af:7f:44:86:62:f0:0b:2c:0a:
f2:49:c8:89:ef:7a:74:ed:c2:0f:e2:75:19:87:b9:
dd:32:c0:97:96:87:6a:04:5c:d4:6b:92:0f:9e:68:
ce:73:78:a9:05:a4:47:d4:c9:e5:80:c3:5a:10:f2:
2a:e9:35:1e:e5:5a:0f:b5:c3:d1:50:18:1c:2d:5a:
db:1d:c4:f1:85:df:32:7c:2b:81:33:a4:b4:ee:48:
e3:18:61:2b:5d:b3:86:ac:6a:ff:c0:c3:5d:d1:73:
34:51:3c:c6:78:d1:1f:2b:06:05:13:68:7b:88:a0:
ef:d9:e1:bb:e3:01:45:4f:e7:0d:c7:1a:a6:c1:44:
2b:46:35:4b:4b:13:50:90:ac:dd:92:2d:f3:51:09:
bb:a7:1f:24:70:80:c1:5a:93:2a:5b:d9:2b:53:c4:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:95:6B:9B:65:B1:CC:1D:21:BF:A4:6F:9A:CD:0B:72:F4:CD:09
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/avuVa5tlscwdIb-kb5rNC3L0zQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:be:a9:62:6a:ce:8f:85:8b:e8:78:f0:b8:e6:7a:c8:62:88:
7a:17:71:38:54:81:96:ed:8b:d5:d1:86:c9:82:0a:9e:48:fb:
3f:7d:90:fe:89:be:71:38:c8:71:33:b0:e8:e1:5a:b2:28:89:
db:60:3c:60:be:88:d0:07:a0:af:8c:ec:74:75:02:c0:d3:d7:
c7:0e:9c:e8:59:8c:8d:7e:80:3b:8a:f9:7e:90:87:3c:3b:3e:
0c:7a:e5:cf:7e:36:0f:08:09:2a:af:e7:72:35:36:a6:28:74:
a5:d0:98:2f:0e:f9:2f:04:a3:f4:47:83:b8:ad:53:5f:2a:0a:
ab:67:8d:14:de:16:d5:3f:71:35:63:45:b2:5f:6d:4f:25:54:
c0:30:75:68:b9:68:5e:22:95:17:25:4c:c4:f2:d5:54:ed:1a:
e3:8b:03:0c:b1:c8:3f:c3:ca:07:ac:56:51:54:89:26:37:c9:
59:91:e9:7d:e1:99:95:b8:c9:e5:8f:33:c9:b6:24:59:28:6f:
9b:a0:f0:5d:96:1c:f1:53:02:c1:ff:5b:4d:e6:2d:a9:7e:68:
d6:59:20:2b:8a:59:ac:89:57:94:c1:44:74:5d:c0:11:b0:bb:
36:01:04:55:71:18:bb:39:7c:4d:ce:86:2d:a5:81:1a:b6:4b:
dc:d9:72:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+P6/njlnkVH/0sVTDJA1vnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzIzMTcwMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWZiOTU2YjliNjViMWNjMWQyMWJmYTQ2ZjlhY2QwYjcyZjRjZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MSDaN97fDNX7RMv4kzi2qaDyMiz
vO7YX8WNhlFKbHxFWKIJ5oHET5CQ/FplAdHKFe6AgLQVuhpJncKieDnAlzmxT7l6
ZusVqiSGDYX91VDZYmayO1XVvQCHy2XlYFqvf0SGYvALLArySciJ73p07cIP4nUZ
h7ndMsCXlodqBFzUa5IPnmjOc3ipBaRH1MnlgMNaEPIq6TUe5VoPtcPRUBgcLVrb
HcTxhd8yfCuBM6S07kjjGGErXbOGrGr/wMNd0XM0UTzGeNEfKwYFE2h7iKDv2eG7
4wFFT+cNxxqmwUQrRjVLSxNQkKzdki3zUQm7px8kcIDBWpMqW9krU8TXzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGr7lWubZbHMHSG/pG+azQty9M0JMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYXZ1VmE1dGxzY3dkSWIta2I1ck5DM0wwelFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmbMA0G
CSqGSIb3DQEBCwUAA4IBAQAKvqlias6PhYvoePC45nrIYoh6F3E4VIGW7YvV0YbJ
ggqeSPs/fZD+ib5xOMhxM7Do4VqyKInbYDxgvojQB6CvjOx0dQLA09fHDpzoWYyN
foA7ivl+kIc8Oz4MeuXPfjYPCAkqr+dyNTamKHSl0JgvDvkvBKP0R4O4rVNfKgqr
Z40U3hbVP3E1Y0WyX21PJVTAMHVouWheIpUXJUzE8tVU7RrjiwMMscg/w8oHrFZR
VIkmN8lZkel94ZmVuMnljzPJtiRZKG+boPBdlhzxUwLB/1tN5i2pfmjWWSArilms
iVeUwUR0XcARsLs2AQRVcRi7OXxNzoYtpYEatkvc2XLk
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:46 2026 by rpki-client