Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2ZLBUaWXnjCHeen0Tz1idFSqgAY.roa
File: 2ZLBUaWXnjCHeen0Tz1idFSqgAY.roa (raw, json)
Hash identifier: agG4tYqbj0tdkCaaY62vkj1qrZs9iBokAp4i2q+DPdU=
Subject key identifier: D9:92:C1:51:A5:97:9E:30:87:79:E9:F4:4F:3D:62:74:54:AA:80:06
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A12749549DD90D8658CBB0D14DB8260075
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2ZLBUaWXnjCHeen0Tz1idFSqgAY.roa
Signing time: Sat 10 Oct 2026 19:27:59 +0000
ROA not before: Sat 10 Oct 2026 19:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218474
IP address blocks: 31.57.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:49:54:9d:d9:0d:86:58:cb:b0:d1:4d:b8:26:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 10 19:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d992c151a5979e308779e9f44f3d627454aa8006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:52:64:11:12:23:90:14:12:25:02:34:5b:
ea:63:13:ec:99:86:9b:8b:ec:a9:d4:a0:12:66:f6:
c6:d1:02:19:78:88:30:a8:5c:a9:71:64:ba:c3:cb:
49:e8:e8:7f:04:3b:5c:70:4b:5d:be:62:2f:89:4c:
32:32:fe:7e:b0:86:4f:e5:86:4e:39:19:96:fa:5b:
b5:47:66:bf:9c:6d:22:e5:10:fd:da:4b:2b:f5:19:
ae:18:93:90:d0:4a:45:e9:99:72:12:87:e5:07:a8:
8f:06:50:47:9a:74:53:4f:1c:71:ee:00:cb:ed:2a:
63:97:a3:64:c6:3f:d3:78:09:19:a7:b7:61:39:26:
ee:e8:99:fa:c1:a3:f4:d4:b5:e1:21:f0:e4:e5:2f:
14:62:1d:f3:2a:45:c4:be:45:63:b7:8c:45:40:cd:
85:de:dc:2a:b4:8d:f7:58:35:68:ad:b8:fb:d9:7f:
fa:d9:08:07:dc:44:16:35:c3:e5:4a:a2:74:c7:f3:
60:39:18:1b:ed:6c:ec:1e:22:e5:c0:2b:a8:4e:01:
36:8e:e3:73:34:0b:16:68:fb:20:94:6b:c2:4a:6f:
c5:e7:fd:20:1d:9b:cb:d3:bf:50:49:cc:fe:b0:c9:
31:e0:c6:23:fc:7f:25:1a:ba:d8:70:cc:7a:23:0d:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:C1:51:A5:97:9E:30:87:79:E9:F4:4F:3D:62:74:54:AA:80:06
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2ZLBUaWXnjCHeen0Tz1idFSqgAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.9.0/24
Signature Algorithm: sha256WithRSAEncryption
78:74:85:23:5c:1f:74:0a:57:50:bc:3e:a4:6f:90:c5:9e:47:
c8:c1:4e:0b:90:bd:9e:2e:03:87:8a:44:24:80:8f:c3:b4:d8:
48:27:6a:03:14:82:75:60:58:0b:74:89:d7:3e:e1:74:8e:ce:
a2:02:d1:5f:a4:74:ac:b3:97:b8:a4:5c:ba:0a:68:be:6d:64:
77:fc:4c:1b:a4:0d:4d:a8:21:05:13:8a:20:86:6e:19:65:29:
2c:b3:62:31:89:ff:d8:ee:55:a9:fb:93:bb:41:e9:f5:94:19:
d3:6e:ac:01:72:d8:cc:4e:9f:6d:82:c8:e2:fb:29:bf:51:84:
34:5a:ce:ce:1b:df:da:cf:60:48:13:ec:7d:43:30:7b:1f:86:
3e:82:d4:d7:08:5a:84:98:d0:be:12:a6:c5:57:bd:b9:ab:81:
c9:f6:ac:38:bb:68:17:f0:3a:a1:91:ee:99:dc:a3:55:b6:24:
76:cf:af:23:35:f4:a3:ab:51:7b:03:77:92:21:5b:5b:a7:e9:
65:16:5d:0b:ec:21:e8:53:eb:92:d7:68:ba:a7:5c:c3:0a:62:
a8:d2:50:3c:11:08:d3:49:b0:44:7c:b5:db:37:5f:2e:a0:da:
49:07:50:d5:2c:00:00:0d:98:e8:95:f2:a7:8b:04:37:89:40:
1d:c0:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:32 2026 by rpki-client