Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/exzLaDWuCvJZRmOShGRhr5Q4XuM.roa
File: exzLaDWuCvJZRmOShGRhr5Q4XuM.roa (raw, json)
Hash identifier: 3ZuRPWQQx3fo5fiqYA98P32ISbP+G2bj3IAAqZATcZk=
Subject key identifier: 7B:1C:CB:68:35:AE:0A:F2:59:46:63:92:84:64:61:AF:94:38:5E:E3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DC4D10EA8C903F536CE4DD3FB3A213715
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/exzLaDWuCvJZRmOShGRhr5Q4XuM.roa
Signing time: Sat 25 Apr 2026 13:25:28 +0000
ROA not before: Sat 25 Apr 2026 13:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 31.57.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c4:d1:0e:a8:c9:03:f5:36:ce:4d:d3:fb:3a:21:37:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 25 13:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b1ccb6835ae0af259466392846461af94385ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:d4:e6:60:26:2b:22:a7:3e:71:dc:3a:02:
2d:cb:5f:0f:d0:31:e3:af:95:06:7e:df:2c:1a:ca:
a3:f5:54:1a:72:59:d5:2b:03:e0:a6:56:94:00:5c:
ee:90:33:e5:67:72:b4:53:21:6a:85:9b:57:11:0b:
c2:db:6d:ee:14:3c:f3:3c:59:87:4b:f6:f4:96:fc:
e2:e4:75:54:ee:71:4d:d0:00:3d:f0:38:bf:54:20:
c6:aa:d7:e6:13:ec:37:22:56:1b:a9:68:31:89:13:
ab:e1:39:fc:4a:a6:4a:49:1f:92:20:0b:00:ec:9d:
3b:ae:3b:a0:cc:3c:b7:c7:ae:b4:4c:be:94:f8:c1:
f6:31:ab:0a:09:f4:86:17:e6:ba:06:91:73:c3:4e:
70:2e:5d:0f:52:c5:83:82:85:53:1d:b4:0f:7b:03:
d1:87:02:5f:7b:2d:20:f7:44:7e:7c:40:77:c0:9f:
41:b6:6d:42:3d:7f:16:f1:25:a8:2c:2b:79:0e:dd:
01:be:02:df:d8:0f:79:1e:85:ac:74:05:26:54:dd:
0d:b0:a3:86:3d:ed:d1:58:e8:ec:3c:fe:29:67:9e:
ab:b1:79:81:7c:e0:64:4e:58:5b:6b:b3:44:3d:80:
50:b0:9d:54:b6:fb:9d:de:24:b8:ef:26:b1:d5:da:
00:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:CB:68:35:AE:0A:F2:59:46:63:92:84:64:61:AF:94:38:5E:E3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/exzLaDWuCvJZRmOShGRhr5Q4XuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.13.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8a:a8:e3:2c:57:22:a0:9e:9f:20:58:ed:3d:ae:87:dd:b5:
63:ad:c5:6b:a8:75:33:e0:68:96:17:f3:8e:22:94:7c:66:c4:
92:44:cb:44:87:17:cd:60:ae:31:3f:d7:fb:4c:5d:49:99:3f:
ab:93:8c:3f:30:32:a3:bb:fc:88:4a:70:99:ad:57:36:73:31:
86:70:c5:b5:14:3e:24:7e:ae:64:6b:72:bb:96:02:0e:ac:bc:
cd:3a:c4:ee:84:5b:79:dc:8b:b3:da:7d:45:5e:8a:c3:00:9c:
b1:c5:2e:19:5c:ea:17:e5:42:11:e4:57:f3:00:37:ee:d2:b2:
67:2b:de:0b:02:3d:4c:d2:92:8e:eb:0f:a6:ca:5d:b8:62:de:
fb:19:cf:c3:5f:e5:21:e0:2e:c7:5c:5a:15:83:73:80:12:4d:
40:49:18:16:c1:24:c5:47:c3:9d:7f:e2:af:08:f1:55:1b:28:
33:35:76:6b:ec:98:e3:87:35:48:44:28:e2:13:d8:ce:af:4b:
0c:d4:e4:31:1f:a0:12:cf:99:eb:ef:12:09:f2:88:4a:18:4c:
e5:cb:bb:28:4f:2b:a0:d1:7f:3b:9a:1a:c2:18:c0:5c:d1:ea:
0e:43:e6:1e:1c:a4:cb:33:ee:7b:f5:4d:e0:23:51:01:a9:cb:
13:a3:cf:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3E0Q6oyQP1Ns5N0/s6ITcVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNDI1MTMyNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjFjY2I2ODM1YWUwYWYyNTk0NjYzOTI4NDY0NjFhZjk0Mzg1ZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLvU5mAmKyKnPnHcOgIty18P0DHj
r5UGft8sGsqj9VQaclnVKwPgplaUAFzukDPlZ3K0UyFqhZtXEQvC223uFDzzPFmH
S/b0lvzi5HVU7nFN0AA98Di/VCDGqtfmE+w3IlYbqWgxiROr4Tn8SqZKSR+SIAsA
7J07rjugzDy3x660TL6U+MH2MasKCfSGF+a6BpFzw05wLl0PUsWDgoVTHbQPewPR
hwJfey0g90R+fEB3wJ9Btm1CPX8W8SWoLCt5Dt0BvgLf2A95HoWsdAUmVN0NsKOG
Pe3RWOjsPP4pZ56rsXmBfOBkTlhba7NEPYBQsJ1Utvud3iS47yax1doAwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHscy2g1rgryWUZjkoRkYa+UOF7jMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZXh6TGFEV3VDdkpaUm1PU2hHUmhyNVE0WHVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkNMA0G
CSqGSIb3DQEBCwUAA4IBAQCEiqjjLFcioJ6fIFjtPa6H3bVjrcVrqHUz4GiWF/OO
IpR8ZsSSRMtEhxfNYK4xP9f7TF1JmT+rk4w/MDKju/yISnCZrVc2czGGcMW1FD4k
fq5ka3K7lgIOrLzNOsTuhFt53Iuz2n1FXorDAJyxxS4ZXOoX5UIR5FfzADfu0rJn
K94LAj1M0pKO6w+myl24Yt77Gc/DX+Uh4C7HXFoVg3OAEk1ASRgWwSTFR8Odf+Kv
CPFVGygzNXZr7JjjhzVIRCjiE9jOr0sM1OQxH6ASz5nr7xIJ8ohKGEzly7soTyug
0X87mhrCGMBc0eoOQ+YeHKTLM+579U3gI1EBqcsTo8+w
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:30 2026 by rpki-client