Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1qNXB1E2CbtnCQAO6bMqGMqNo0Q.roa
File: 1qNXB1E2CbtnCQAO6bMqGMqNo0Q.roa (raw, json)
Hash identifier: mwk5WM1WmhKPyNRLosdUWavOXm1MA2jHzaoXDc6QNYY=
Subject key identifier: D6:A3:57:07:51:36:09:BB:67:09:00:0E:E9:B3:2A:18:CA:8D:A3:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A12749534E786B677F299CDDFE61F6663D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1qNXB1E2CbtnCQAO6bMqGMqNo0Q.roa
Signing time: Sat 10 Oct 2026 19:27:59 +0000
ROA not before: Sat 10 Oct 2026 19:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 31.56.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:49:53:4e:78:6b:67:7f:29:9c:dd:fe:61:f6:66:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 10 19:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6a35707513609bb6709000ee9b32a18ca8da344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:13:de:8f:9d:35:90:9b:17:f7:28:f3:71:
b0:99:2d:f5:5c:f9:22:8b:b9:68:a1:5b:8d:6e:67:
38:d2:ff:01:ac:e3:e0:74:03:98:e4:f0:22:d7:b3:
4b:09:51:cb:65:38:ab:e3:59:75:ee:bf:e6:ba:84:
b6:32:b9:30:85:40:bb:1d:76:2a:a6:41:b3:72:7f:
db:70:85:a9:05:0b:a4:7c:08:b7:0d:bf:db:10:67:
d1:56:38:b0:58:17:ff:9a:56:cb:26:2b:07:c6:1f:
fc:0c:c6:2e:d6:07:8c:8a:13:e0:90:19:2c:d5:58:
62:02:57:d4:ca:1a:86:45:ae:24:0c:41:ba:69:71:
ff:ff:51:5d:81:a1:c8:3d:2a:f1:44:7f:b5:58:9b:
25:09:a5:f2:e0:97:f5:5a:90:1a:c2:47:5c:23:76:
ff:d3:34:21:51:20:65:ed:27:d4:ec:34:09:47:14:
8f:3d:5d:6c:28:89:1a:94:7b:bc:2b:05:1d:48:6b:
c2:ee:52:b3:ea:9f:6f:88:03:18:60:8f:ec:e1:f1:
79:56:57:6c:e6:5e:31:34:18:fd:f1:0f:cf:83:a5:
9a:c5:29:c7:a6:05:eb:a0:67:27:f9:d3:34:2f:c6:
00:0f:d4:58:c5:9d:0b:f9:a6:3b:05:05:e9:07:fd:
9e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A3:57:07:51:36:09:BB:67:09:00:0E:E9:B3:2A:18:CA:8D:A3:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1qNXB1E2CbtnCQAO6bMqGMqNo0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.151.0/24
Signature Algorithm: sha256WithRSAEncryption
63:18:44:86:32:73:97:03:04:fd:40:74:9e:d3:9b:28:c5:b1:
6b:73:4e:a3:76:fb:3f:4a:9f:1f:71:15:2a:08:b6:c2:b2:d6:
61:b0:c6:31:63:f0:d6:01:1b:fa:ba:11:68:3e:e4:60:35:a7:
47:60:41:20:e8:29:25:01:fa:60:a8:bf:bd:d6:89:4c:a0:f1:
bc:50:28:9a:fa:d3:b2:7f:04:1f:67:51:3e:08:d9:c3:4a:1a:
73:cd:c5:92:92:75:58:1e:b2:80:92:32:42:73:a5:e5:75:43:
c5:59:c3:d9:45:8e:36:40:1c:5e:c2:a7:c1:91:d9:1e:23:1c:
30:54:f4:3a:30:e8:c6:62:d2:19:02:c1:0b:00:aa:aa:dd:d9:
26:a9:45:75:c9:96:e0:25:83:99:ab:58:a4:c9:19:4d:52:c7:
83:ee:ce:eb:4d:ff:da:87:ca:03:bb:13:a0:b5:c2:6d:47:6d:
3f:00:64:91:41:04:89:65:74:e9:92:26:74:b5:60:55:93:fe:
5b:d7:b3:7c:9d:af:25:38:5e:5c:2d:d4:7f:02:52:a6:69:44:
19:42:f3:a6:ed:cf:74:94:96:36:9a:14:bb:42:a0:1d:b7:5b:
eb:b6:b5:d6:90:3c:69:19:91:57:c2:67:b0:91:ba:0e:53:97:
50:8c:77:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEnSVNOeGtnfymc3f5h9mY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDEwMTkyNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmEzNTcwNzUxMzYwOWJiNjcwOTAwMGVlOWIzMmExOGNhOGRhMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWAT3o+dNZCbF/co83GwmS31XPki
i7looVuNbmc40v8BrOPgdAOY5PAi17NLCVHLZTir41l17r/muoS2MrkwhUC7HXYq
pkGzcn/bcIWpBQukfAi3Db/bEGfRVjiwWBf/mlbLJisHxh/8DMYu1geMihPgkBks
1VhiAlfUyhqGRa4kDEG6aXH//1FdgaHIPSrxRH+1WJslCaXy4Jf1WpAawkdcI3b/
0zQhUSBl7SfU7DQJRxSPPV1sKIkalHu8KwUdSGvC7lKz6p9viAMYYI/s4fF5Vlds
5l4xNBj98Q/Pg6WaxSnHpgXroGcn+dM0L8YAD9RYxZ0L+aY7BQXpB/2eBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNajVwdRNgm7ZwkADumzKhjKjaNEMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMXFOWEIxRTJDYnRuQ1FBTzZiTXFHTXFObzBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHziXMA0G
CSqGSIb3DQEBCwUAA4IBAQBjGESGMnOXAwT9QHSe05soxbFrc06jdvs/Sp8fcRUq
CLbCstZhsMYxY/DWARv6uhFoPuRgNadHYEEg6CklAfpgqL+91olMoPG8UCia+tOy
fwQfZ1E+CNnDShpzzcWSknVYHrKAkjJCc6XldUPFWcPZRY42QBxewqfBkdkeIxww
VPQ6MOjGYtIZAsELAKqq3dkmqUV1yZbgJYOZq1ikyRlNUseD7s7rTf/ah8oDuxOg
tcJtR20/AGSRQQSJZXTpkiZ0tWBVk/5b17N8na8lOF5cLdR/AlKmaUQZQvOm7c90
lJY2mhS7QqAdt1vrtrXWkDxpGZFXwmewkboOU5dQjHen
-----END CERTIFICATE-----
Generated at Mon Oct 19 06:41:23 2026 by rpki-client