Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u6qOl8KMv4stwS-nakJbCeL0Ixc.roa
File: u6qOl8KMv4stwS-nakJbCeL0Ixc.roa (raw, json)
Hash identifier: DTZ5KAkq6O9yZfecUxE/q48gPfp8eUb38I1nMFOqzRY=
Subject key identifier: BB:AA:8E:97:C2:8C:BF:8B:2D:C1:2F:A7:6A:42:5B:09:E2:F4:23:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CD7F4DB350C3689B66C5117207437C3B3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u6qOl8KMv4stwS-nakJbCeL0Ixc.roa
Signing time: Tue 10 Mar 2026 13:34:34 +0000
ROA not before: Tue 10 Mar 2026 13:34:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 31.59.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:f4:db:35:0c:36:89:b6:6c:51:17:20:74:37:c3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 10 13:34:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbaa8e97c28cbf8b2dc12fa76a425b09e2f42317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:25:54:4a:5d:b4:18:1c:36:e9:8c:6a:37:
31:c9:aa:db:1e:ba:88:f0:0c:16:43:49:37:11:5f:
e9:5b:fa:7a:20:b2:f4:77:53:4e:d0:fd:03:3c:e1:
be:ee:c2:7e:bf:f4:49:3a:33:0d:af:96:df:76:62:
82:d9:a9:8a:e4:e0:03:5d:af:83:2f:ef:07:52:2e:
3a:32:b0:7a:23:a5:45:9d:e5:91:b3:3e:fd:9c:0d:
d2:73:65:0f:eb:cb:d9:da:01:3c:10:27:ea:a3:2c:
80:50:a2:70:0f:cc:14:fa:73:ae:82:4d:9b:73:0b:
7f:04:7d:f1:c9:11:32:66:20:ef:79:2e:84:c2:24:
6b:16:dc:28:af:66:88:52:e2:6a:54:1f:65:21:95:
36:8e:3d:97:c7:95:14:d2:95:c7:61:29:90:94:9c:
97:36:46:8f:75:98:05:13:84:61:0c:f0:b9:5d:b6:
7d:55:d2:46:55:48:46:5e:a6:41:55:a9:f2:7e:dd:
7c:68:a3:5d:dd:52:95:16:7b:1d:d1:88:06:d9:4d:
8d:76:ec:cc:79:59:df:b2:ed:5e:7d:ed:d0:25:6c:
f2:17:cd:d9:f7:2c:74:47:1a:09:d4:e5:15:a6:89:
1f:59:1a:05:ff:f3:2b:90:a9:8b:45:48:fb:a4:f2:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AA:8E:97:C2:8C:BF:8B:2D:C1:2F:A7:6A:42:5B:09:E2:F4:23:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u6qOl8KMv4stwS-nakJbCeL0Ixc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.38.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:d0:fb:61:cf:a7:c0:62:48:5e:bd:bc:85:e8:19:d1:b7:92:
65:64:d9:2b:89:02:a7:d4:f3:b4:38:44:1e:23:0d:1a:00:6f:
45:c7:9d:da:b0:04:8f:cc:97:42:5b:7f:22:19:89:69:93:56:
78:2b:58:00:43:2f:d2:af:81:2c:de:8f:09:be:66:33:a3:dd:
6c:db:88:a5:8c:22:e0:62:1f:a0:b1:7c:b6:55:65:cc:ba:1f:
bc:4a:c6:17:49:49:04:45:42:b1:61:45:de:c4:37:ff:84:df:
fe:ef:7d:6d:56:62:6e:6c:25:2b:3f:39:ac:24:8c:db:73:b6:
4e:e4:03:26:fa:5e:96:f9:d3:95:78:1a:86:b8:7d:42:d1:54:
f8:ba:7e:15:13:6b:5e:00:cd:9b:f3:58:0b:bf:30:31:3e:02:
4f:e8:5a:4c:45:98:37:f6:86:a4:59:23:10:cb:df:18:59:33:
49:62:da:6d:06:97:3a:4b:3d:86:54:6d:a4:00:f8:a6:82:a9:
25:c0:ba:91:0f:80:5f:30:59:3f:f4:b8:ac:48:b5:90:97:bf:
45:e9:8d:97:cd:f3:9e:af:86:f8:e2:6a:df:35:73:19:41:02:
0e:46:55:89:93:23:b7:61:78:d2:84:1f:d4:14:94:b0:c7:0c:
b4:c8:40:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzX9Ns1DDaJtmxRFyB0N8OzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzEwMTMzNDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmFhOGU5N2MyOGNiZjhiMmRjMTJmYTc2YTQyNWIwOWUyZjQyMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl4lVEpdtBgcNumMajcxyarbHrqI
8AwWQ0k3EV/pW/p6ILL0d1NO0P0DPOG+7sJ+v/RJOjMNr5bfdmKC2amK5OADXa+D
L+8HUi46MrB6I6VFneWRsz79nA3Sc2UP68vZ2gE8ECfqoyyAUKJwD8wU+nOugk2b
cwt/BH3xyREyZiDveS6EwiRrFtwor2aIUuJqVB9lIZU2jj2Xx5UU0pXHYSmQlJyX
NkaPdZgFE4RhDPC5XbZ9VdJGVUhGXqZBVanyft18aKNd3VKVFnsd0YgG2U2NduzM
eVnfsu1efe3QJWzyF83Z9yx0RxoJ1OUVpokfWRoF//MrkKmLRUj7pPIY3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLuqjpfCjL+LLcEvp2pCWwni9CMXMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdTZxT2w4S012NHN0d1MtbmFrSmJDZUwwSXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzsmMA0G
CSqGSIb3DQEBCwUAA4IBAQCs0Pthz6fAYkhevbyF6BnRt5JlZNkriQKn1PO0OEQe
Iw0aAG9Fx53asASPzJdCW38iGYlpk1Z4K1gAQy/Sr4Es3o8JvmYzo91s24iljCLg
Yh+gsXy2VWXMuh+8SsYXSUkERUKxYUXexDf/hN/+731tVmJubCUrPzmsJIzbc7ZO
5AMm+l6W+dOVeBqGuH1C0VT4un4VE2teAM2b81gLvzAxPgJP6FpMRZg39oakWSMQ
y98YWTNJYtptBpc6Sz2GVG2kAPimgqklwLqRD4BfMFk/9LisSLWQl79F6Y2XzfOe
r4b44mrfNXMZQQIORlWJkyO3YXjShB/UFJSwxwy0yECk
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:24 2026 by rpki-client