Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tRqeAbPo7kCJvazot5rIEMRZHKM.roa
File: tRqeAbPo7kCJvazot5rIEMRZHKM.roa (raw, json)
Hash identifier: lwzcDHD/yZjmNsoRRfxQm6b1MRAE4m5znYJV+kn2YVo=
Subject key identifier: B5:1A:9E:01:B3:E8:EE:40:89:BD:AC:E8:B7:9A:C8:10:C4:59:1C:A3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1985014A0CFBD3D09710E95DC62C15B8E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tRqeAbPo7kCJvazot5rIEMRZHKM.roa
Signing time: Sun 01 Nov 2026 18:12:27 +0000
ROA not before: Sun 01 Nov 2026 18:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49608
IP address blocks: 31.58.130.0/24 maxlen: 24
31.59.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:50:14:a0:cf:bd:3d:09:71:0e:95:dc:62:c1:5b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 18:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b51a9e01b3e8ee4089bdace8b79ac810c4591ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:64:b6:4e:b2:26:6b:e7:01:e4:fc:54:08:
a2:b2:40:59:fc:93:c1:c3:66:7e:3d:84:7b:18:31:
d3:3b:c7:17:e0:37:ee:db:b6:0d:88:fa:bb:9d:32:
ce:e9:9f:9c:65:ad:3e:36:d6:42:7e:2f:03:14:e6:
e8:9f:1b:cb:76:3a:37:48:55:58:b4:86:57:06:be:
33:fc:8f:c1:46:d7:54:04:0e:a9:35:9b:87:d9:91:
58:09:40:24:c6:f5:ee:18:83:c1:95:44:f0:22:4e:
73:14:cc:26:d1:dd:bc:ab:50:2c:50:4b:7a:b5:86:
57:ed:0a:61:1a:ef:a3:cb:5c:e4:5d:f2:75:4d:ff:
53:c6:c2:96:2a:6a:01:b3:9c:4d:cd:15:ea:11:33:
06:2e:cf:81:93:03:e5:56:24:b3:7d:b0:2a:de:85:
26:93:11:8b:e7:27:4f:24:66:a8:2b:09:4d:7d:42:
50:6c:cd:3f:3f:54:f0:07:05:e0:14:85:7c:53:14:
af:0d:6c:17:fc:bc:4e:22:82:f1:1a:ce:85:ea:25:
86:ad:73:16:06:18:8e:3c:6e:f2:5d:24:bb:2c:11:
91:0a:57:f5:da:ab:aa:5e:a9:e0:b7:df:1c:72:3b:
ae:67:9d:f0:4b:f7:2c:fd:00:a6:e3:53:e8:5c:d2:
63:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:9E:01:B3:E8:EE:40:89:BD:AC:E8:B7:9A:C8:10:C4:59:1C:A3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tRqeAbPo7kCJvazot5rIEMRZHKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.130.0/24
31.59.72.0/24
Signature Algorithm: sha256WithRSAEncryption
21:63:15:28:3b:ea:15:35:8a:39:aa:a7:9f:05:f6:27:ea:66:
fb:db:23:78:9b:10:80:77:62:83:66:83:1f:43:8c:8b:91:91:
57:82:37:e6:4a:5a:c5:3c:01:dd:b7:4d:ee:83:28:e8:65:20:
82:97:77:e9:f0:bc:4b:2b:ac:b1:3f:0b:04:70:c2:29:b1:73:
5f:6d:cc:ae:ac:9b:bd:52:d7:9a:e8:ea:72:9f:5f:06:90:eb:
91:45:39:ee:61:a1:6b:0d:4c:2f:2f:1c:27:25:35:64:30:7e:
b4:24:3b:ab:44:80:ef:12:37:a4:bf:d9:cd:19:e1:65:0f:72:
4b:a3:09:36:f7:75:f3:4b:73:c9:6e:88:f9:60:1e:7d:4a:68:
40:29:70:5a:08:33:f7:89:4f:17:ea:fe:0e:8a:ff:7e:36:70:
e4:4e:44:67:f7:02:ff:5f:a0:c4:16:09:ba:a5:29:e9:94:d0:
c8:97:9e:3f:82:29:67:08:04:ad:60:4e:76:23:c2:5b:aa:95:
c7:73:2b:21:20:56:d2:22:91:57:9f:f8:b1:d8:a6:38:2e:d2:
b8:19:fc:a3:dc:21:51:6e:f0:e9:fc:f2:39:89:ff:8b:87:48:
06:5d:32:6e:e9:61:59:81:c3:c7:8f:0a:2d:26:1b:35:db:0d:
c1:ed:ca:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGYUBSgz709CXEOldxiwVuOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTAxMTgxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTFhOWUwMWIzZThlZTQwODliZGFjZThiNzlhYzgxMGM0NTkxY2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ1ktk6yJmvnAeT8VAiiskBZ/JPB
w2Z+PYR7GDHTO8cX4Dfu27YNiPq7nTLO6Z+cZa0+NtZCfi8DFObonxvLdjo3SFVY
tIZXBr4z/I/BRtdUBA6pNZuH2ZFYCUAkxvXuGIPBlUTwIk5zFMwm0d28q1AsUEt6
tYZX7QphGu+jy1zkXfJ1Tf9TxsKWKmoBs5xNzRXqETMGLs+BkwPlViSzfbAq3oUm
kxGL5ydPJGaoKwlNfUJQbM0/P1TwBwXgFIV8UxSvDWwX/LxOIoLxGs6F6iWGrXMW
BhiOPG7yXSS7LBGRClf12quqXqngt98ccjuuZ53wS/cs/QCm41PoXNJjmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLUangGz6O5Aib2s6LeayBDEWRyjMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdFJxZUFiUG83a0NKdmF6b3Q1cklFTVJaSEtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzqCAwQA
HztIMA0GCSqGSIb3DQEBCwUAA4IBAQAhYxUoO+oVNYo5qqefBfYn6mb72yN4mxCA
d2KDZoMfQ4yLkZFXgjfmSlrFPAHdt03ugyjoZSCCl3fp8LxLK6yxPwsEcMIpsXNf
bcyurJu9Utea6Opyn18GkOuRRTnuYaFrDUwvLxwnJTVkMH60JDurRIDvEjekv9nN
GeFlD3JLowk293XzS3PJboj5YB59SmhAKXBaCDP3iU8X6v4Oiv9+NnDkTkRn9wL/
X6DEFgm6pSnplNDIl54/gilnCAStYE52I8JbqpXHcyshIFbSIpFXn/ix2KY4LtK4
Gfyj3CFRbvDp/PI5if+Lh0gGXTJu6WFZgcPHjwotJhs12w3B7cpI
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:57 2026 by rpki-client