Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xRqHrq9avXSN6Qk9tL7CNOlXTf4.roa
File: xRqHrq9avXSN6Qk9tL7CNOlXTf4.roa (raw, json)
Hash identifier: PjzgGBPVUxww+Duh+jx10/6wLCNarSe+gOA2SGBUeCg=
Subject key identifier: C5:1A:87:AE:AF:5A:BD:74:8D:E9:09:3D:B4:BE:C2:34:E9:57:4D:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F930AF158F57B335502E7DBE6A39D4701
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xRqHrq9avXSN6Qk9tL7CNOlXTf4.roa
Signing time: Fri 24 Jul 2026 07:33:15 +0000
ROA not before: Fri 24 Jul 2026 07:33:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 31.56.60.0/24 maxlen: 24
31.57.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:0a:f1:58:f5:7b:33:55:02:e7:db:e6:a3:9d:47:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 07:33:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c51a87aeaf5abd748de9093db4bec234e9574dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:1e:61:fa:39:c7:da:45:d3:76:eb:d3:83:
58:95:b6:57:b8:6b:6d:aa:a1:92:0c:96:70:58:17:
00:a8:f0:a9:4b:c0:ef:d1:ac:ca:3a:7a:ba:32:ec:
26:51:02:9f:c0:cf:e5:85:ec:dd:8a:34:ad:72:0b:
b3:29:09:61:cc:e1:83:a8:48:cb:33:48:fc:c1:80:
10:e0:df:6d:ec:b6:9e:4b:e6:4a:df:69:c8:4d:40:
55:af:83:3e:5b:02:22:97:fe:db:c8:39:aa:2c:63:
84:8d:dd:d4:d3:15:6b:2a:c8:b3:f8:00:0e:8e:21:
71:91:2a:7e:f5:ad:a1:57:05:42:40:ee:87:17:3e:
05:7f:c4:80:e5:02:d4:ae:f8:1a:4b:f9:78:8f:95:
66:74:13:22:75:9d:1e:12:cc:04:9f:80:c9:e2:bb:
9e:71:bb:5a:b3:9f:bb:84:bc:58:43:ba:e7:30:65:
65:d5:44:b7:19:cc:b1:1b:75:be:ab:ed:4b:f2:92:
d2:66:48:05:44:98:1c:57:9c:7d:86:58:30:e2:fe:
c8:8c:c2:eb:dd:48:f4:9e:9d:fb:d5:ce:49:ca:f6:
a6:26:7e:ac:b6:a2:d6:dd:f7:06:ad:3a:8f:62:4a:
ab:ff:05:1c:85:c3:2c:d0:5c:53:6e:6a:67:a1:3e:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1A:87:AE:AF:5A:BD:74:8D:E9:09:3D:B4:BE:C2:34:E9:57:4D:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xRqHrq9avXSN6Qk9tL7CNOlXTf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.60.0/24
31.57.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a4:6f:1c:0a:35:bf:05:93:42:66:64:79:0a:f8:00:82:98:
2b:5a:79:0d:d1:21:03:c7:06:0a:0e:a0:08:c7:bb:fd:b0:25:
23:16:69:d3:ad:c6:62:3e:b5:28:16:e1:98:4c:af:b4:8d:3b:
89:27:4d:0b:25:75:94:04:fe:01:90:05:b8:57:df:7f:b3:95:
63:1f:4f:68:9b:a2:5b:f8:d9:5c:3c:ea:d5:49:37:7e:de:0c:
ed:ee:6d:a7:97:8c:4a:e7:35:c3:d6:75:a0:8e:b4:7a:e4:ed:
a7:54:7e:bd:e5:b8:4c:22:88:a7:7b:77:34:b9:fb:24:fc:d5:
41:e8:43:8a:00:8f:d1:28:2b:39:a0:2f:5f:f9:84:fc:8e:1f:
b0:8c:e0:f8:4f:d7:4b:62:74:d4:af:38:fb:b2:da:ee:50:43:
3b:41:d4:1f:7a:89:6d:8b:42:7a:4a:9e:46:25:ef:1a:26:18:
7c:95:4e:ba:05:8a:3f:eb:03:3b:b9:a2:10:79:51:e7:23:8c:
e6:e8:17:a4:17:bf:c1:f8:c3:f0:57:4c:82:be:19:22:d4:85:
5e:99:1e:87:3e:2f:5f:de:47:f8:92:73:0e:03:3b:92:b9:33:
34:30:08:ea:51:ba:94:ef:31:58:34:10:ba:e8:3a:b1:4d:e3:
7c:55:d7:83
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+TCvFY9XszVQLn2+ajnUcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzI0MDczMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTFhODdhZWFmNWFiZDc0OGRlOTA5M2RiNGJlYzIzNGU5NTc0ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGweYfo5x9pF03br04NYlbZXuGtt
qqGSDJZwWBcAqPCpS8Dv0azKOnq6MuwmUQKfwM/lhezdijStcguzKQlhzOGDqEjL
M0j8wYAQ4N9t7LaeS+ZK32nITUBVr4M+WwIil/7byDmqLGOEjd3U0xVrKsiz+AAO
jiFxkSp+9a2hVwVCQO6HFz4Ff8SA5QLUrvgaS/l4j5VmdBMidZ0eEswEn4DJ4rue
cbtas5+7hLxYQ7rnMGVl1US3GcyxG3W+q+1L8pLSZkgFRJgcV5x9hlgw4v7IjMLr
3Uj0np371c5JyvamJn6stqLW3fcGrTqPYkqr/wUchcMs0FxTbmpnoT5ZswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMUah66vWr10jekJPbS+wjTpV03+MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveFJxSHJxOWF2WFNONlFrOXRMN0NOT2xYVGY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzg8AwQA
HzmnMA0GCSqGSIb3DQEBCwUAA4IBAQCfpG8cCjW/BZNCZmR5CvgAgpgrWnkN0SED
xwYKDqAIx7v9sCUjFmnTrcZiPrUoFuGYTK+0jTuJJ00LJXWUBP4BkAW4V99/s5Vj
H09om6Jb+NlcPOrVSTd+3gzt7m2nl4xK5zXD1nWgjrR65O2nVH695bhMIoine3c0
ufsk/NVB6EOKAI/RKCs5oC9f+YT8jh+wjOD4T9dLYnTUrzj7struUEM7QdQfeolt
i0J6Sp5GJe8aJhh8lU66BYo/6wM7uaIQeVHnI4zm6BekF7/B+MPwV0yCvhki1IVe
mR6HPi9f3kf4knMOAzuSuTM0MAjqUbqU7zFYNBC66DqxTeN8VdeD
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:19 2026 by rpki-client