Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fq68Dmo005UqwPeqFzo0XYWJxps.roa
File: fq68Dmo005UqwPeqFzo0XYWJxps.roa (raw, json)
Hash identifier: LJq2vHW2FXU1z1rm7lLoJI40CukVo1OwV6ur70zrKjc=
Subject key identifier: 7E:AE:BC:0E:6A:34:D3:95:2A:C0:F7:AA:17:3A:34:5D:85:89:C6:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F85880109B903995D62597526E92754F5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fq68Dmo005UqwPeqFzo0XYWJxps.roa
Signing time: Tue 21 Jul 2026 16:35:10 +0000
ROA not before: Tue 21 Jul 2026 16:35:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 31.57.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:88:01:09:b9:03:99:5d:62:59:75:26:e9:27:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 21 16:35:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eaebc0e6a34d3952ac0f7aa173a345d8589c69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:7f:19:1b:e7:99:74:44:7e:59:0c:55:76:
21:2d:49:df:6f:1a:ad:2b:6d:0b:f3:f2:1a:70:3e:
f8:67:fa:e2:fc:6d:72:ce:73:a7:ac:da:af:77:58:
f2:d1:a8:c6:bb:48:4e:99:70:00:fc:bd:49:17:08:
dd:f7:b3:b5:32:ba:00:ca:3c:60:9b:42:3a:2a:ca:
15:47:6b:b6:47:72:1f:67:e4:a0:0f:ba:f4:a5:9c:
45:17:82:54:c5:20:6b:41:66:92:23:98:50:8c:45:
70:d8:f8:fd:3d:05:f3:16:ce:13:88:76:9e:6d:00:
2d:5f:a3:85:36:1e:3b:0c:f2:c6:50:a3:3e:46:c2:
2f:25:3e:56:24:2b:3c:e8:37:ef:76:aa:e5:47:a0:
20:b5:6e:76:d5:7c:c9:a8:ae:53:3b:c2:31:19:3a:
ad:2e:6f:b0:7d:b2:0e:d5:62:c4:1c:1b:fa:fe:fc:
43:27:ac:a6:3d:30:16:0f:31:61:ad:00:31:c3:fc:
0e:1a:85:0a:7a:2e:70:01:86:5e:03:a5:bb:83:0d:
99:3e:17:40:ec:d8:0c:f1:19:3a:ad:be:c4:1b:5b:
49:d7:01:fd:dc:79:59:2d:d2:fc:fa:51:aa:83:94:
82:e6:66:75:2a:6a:ff:02:d3:1e:68:7e:11:a0:52:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:BC:0E:6A:34:D3:95:2A:C0:F7:AA:17:3A:34:5D:85:89:C6:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fq68Dmo005UqwPeqFzo0XYWJxps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.144.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:32:36:de:e7:05:c7:a0:28:c7:e8:57:d3:8c:fe:33:03:bf:
a1:59:ac:1b:cb:7a:6c:6b:45:63:0a:3d:6c:78:6f:33:a8:41:
75:a0:02:bf:a9:cb:dc:85:f9:e3:44:be:37:f0:b6:4e:73:f6:
f7:1e:20:a7:cd:c8:3e:79:39:30:64:54:64:e0:36:8a:5d:05:
90:3a:43:63:e0:af:9b:f7:cd:4f:88:bc:58:b7:f4:21:d0:9a:
69:1c:d3:59:3f:9f:c6:e7:42:be:c3:a1:55:b9:f6:68:6c:8d:
b6:0d:9c:ba:d5:07:1a:57:53:5f:a8:78:67:4b:e8:71:6d:2c:
cf:c6:f2:05:57:a9:c1:9a:c7:46:3e:f1:06:97:a7:04:49:d6:
a5:74:d0:31:80:f2:48:a4:25:ec:cb:8c:21:16:46:02:e1:c8:
c3:6b:89:0f:f1:95:b1:ff:ac:e5:f5:bb:63:0e:d9:e6:ce:a4:
07:e7:53:0f:10:62:9f:76:be:12:08:cf:a2:2d:df:2f:cf:b5:
ca:9f:14:d9:60:a1:63:7c:87:ee:0f:ff:ad:49:03:f6:15:4c:
8b:0b:a8:e3:45:dd:93:d2:09:11:4b:5e:cb:b3:64:59:c7:43:
ae:97:e9:94:bc:ec:8a:cf:50:03:2e:b8:0f:6b:8f:b5:6b:bb:
3a:52:0e:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+FiAEJuQOZXWJZdSbpJ1T1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzIxMTYzNTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWFlYmMwZTZhMzRkMzk1MmFjMGY3YWExNzNhMzQ1ZDg1ODljNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSB/GRvnmXREflkMVXYhLUnfbxqt
K20L8/IacD74Z/ri/G1yznOnrNqvd1jy0ajGu0hOmXAA/L1JFwjd97O1MroAyjxg
m0I6KsoVR2u2R3IfZ+SgD7r0pZxFF4JUxSBrQWaSI5hQjEVw2Pj9PQXzFs4TiHae
bQAtX6OFNh47DPLGUKM+RsIvJT5WJCs86DfvdqrlR6AgtW521XzJqK5TO8IxGTqt
Lm+wfbIO1WLEHBv6/vxDJ6ymPTAWDzFhrQAxw/wOGoUKei5wAYZeA6W7gw2ZPhdA
7NgM8Rk6rb7EG1tJ1wH93HlZLdL8+lGqg5SC5mZ1Kmr/AtMeaH4RoFJ7QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6uvA5qNNOVKsD3qhc6NF2FicabMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZnE2OERtbzAwNVVxd1BlcUZ6bzBYWVdKeHBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmQMA0G
CSqGSIb3DQEBCwUAA4IBAQAcMjbe5wXHoCjH6FfTjP4zA7+hWawby3psa0VjCj1s
eG8zqEF1oAK/qcvchfnjRL438LZOc/b3HiCnzcg+eTkwZFRk4DaKXQWQOkNj4K+b
981PiLxYt/Qh0JppHNNZP5/G50K+w6FVufZobI22DZy61QcaV1NfqHhnS+hxbSzP
xvIFV6nBmsdGPvEGl6cESdaldNAxgPJIpCXsy4whFkYC4cjDa4kP8ZWx/6zl9btj
DtnmzqQH51MPEGKfdr4SCM+iLd8vz7XKnxTZYKFjfIfuD/+tSQP2FUyLC6jjRd2T
0gkRS17Ls2RZx0Oul+mUvOyKz1ADLrgPa4+1a7s6Ug46
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:30 2026 by rpki-client