Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5OfqfbEcjXY8Hbu-7JW9g6MD45s.roa
File: 5OfqfbEcjXY8Hbu-7JW9g6MD45s.roa (raw, json)
Hash identifier: wY4r8wWLsrDNXt2h8Rp1KbNVGh/1Rv+88+jgsL6uur0=
Subject key identifier: E4:E7:EA:7D:B1:1C:8D:76:3C:1D:BB:BE:EC:95:BD:83:A3:03:E3:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A13B106A074B6D0DEF499DE328C7728BCE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5OfqfbEcjXY8Hbu-7JW9g6MD45s.roa
Signing time: Wed 14 Oct 2026 15:38:13 +0000
ROA not before: Wed 14 Oct 2026 15:38:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 31.57.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:10:6a:07:4b:6d:0d:ef:49:9d:e3:28:c7:72:8b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 15:38:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4e7ea7db11c8d763c1dbbbeec95bd83a303e39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:7c:81:58:fe:1d:46:a4:23:6b:ba:17:b9:
16:b4:3e:3d:1d:37:72:31:d3:4d:14:ce:f8:5a:96:
ca:1b:eb:ff:36:fb:d3:32:d7:83:24:28:90:26:19:
69:c5:0f:87:61:ae:1d:32:5a:38:83:9c:7d:5f:97:
91:04:2f:15:eb:45:30:07:df:85:5f:da:38:4d:fb:
28:3d:47:77:85:e5:45:cb:8d:ec:11:35:40:b7:e3:
6c:ca:16:4f:41:4a:03:18:06:c1:41:18:0f:43:56:
61:9f:23:70:c3:83:3b:95:7e:a8:8f:1b:11:4d:38:
9e:de:ec:29:c0:75:81:f2:31:94:00:a7:df:d1:f4:
61:bf:33:fc:1c:db:a1:37:11:8a:49:c7:7c:09:e0:
d4:40:0f:5d:60:17:1a:91:ee:5a:34:a1:2d:40:d2:
cd:6d:af:83:33:42:de:29:73:d2:8d:65:10:26:81:
63:ce:ee:a2:f5:cd:e8:e5:c7:e7:43:98:fd:a2:61:
be:88:de:55:79:51:f4:80:80:03:5d:3b:df:4e:84:
29:27:0a:31:6d:dc:c9:79:60:25:40:52:a9:27:75:
d9:b0:6a:32:07:81:77:aa:84:6d:f7:5d:93:98:03:
a8:63:66:01:5c:aa:6f:89:2d:67:5f:d8:18:d0:fe:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E7:EA:7D:B1:1C:8D:76:3C:1D:BB:BE:EC:95:BD:83:A3:03:E3:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5OfqfbEcjXY8Hbu-7JW9g6MD45s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.66.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9a:e1:8f:99:1d:97:75:73:dd:fe:60:71:c5:a0:fc:96:be:
a7:2e:d3:73:7b:be:82:64:50:ed:30:64:19:db:d7:9b:1c:29:
87:95:54:90:dd:07:b2:be:cc:42:8a:92:9b:9a:76:34:92:bc:
2a:95:82:9e:9f:e1:e4:37:1e:87:65:b0:8a:ad:e2:6e:aa:b6:
72:94:65:32:f9:6a:ce:fb:b2:b3:28:20:0e:d2:f4:51:12:2d:
0f:b2:48:d4:ed:43:7d:2a:4a:ac:3d:ff:ef:7e:69:3d:96:1a:
cf:12:ee:d5:78:5a:bc:61:95:e6:ee:c7:3b:57:16:98:d1:56:
e7:8c:f3:8e:4e:f4:dc:1a:9b:de:ed:65:ce:43:5c:c1:cf:a2:
22:2a:41:7d:af:ea:85:4c:c9:c1:cb:87:14:9a:61:00:6d:20:
17:13:25:75:28:56:4e:71:32:4a:be:86:d5:7a:db:15:8d:37:
6c:bb:a8:b5:7e:60:2f:81:3d:f8:2d:ad:2d:a9:fb:0d:c2:32:
71:7e:44:3b:34:8e:0a:f2:3a:7f:a3:e1:a7:a3:d5:5a:d6:4c:
7a:98:ad:57:83:dd:a2:ea:d1:66:fc:47:47:f9:d8:95:b0:ff:
3b:cb:46:d7:a3:ab:33:c8:da:fe:a5:87:a5:f2:16:c5:6f:2b:
02:12:13:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE7EGoHS20N70md4yjHcovOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDE0MTUzODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGU3ZWE3ZGIxMWM4ZDc2M2MxZGJiYmVlYzk1YmQ4M2EzMDNlMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFZ8gVj+HUakI2u6F7kWtD49HTdy
MdNNFM74WpbKG+v/NvvTMteDJCiQJhlpxQ+HYa4dMlo4g5x9X5eRBC8V60UwB9+F
X9o4TfsoPUd3heVFy43sETVAt+NsyhZPQUoDGAbBQRgPQ1ZhnyNww4M7lX6ojxsR
TTie3uwpwHWB8jGUAKff0fRhvzP8HNuhNxGKScd8CeDUQA9dYBcake5aNKEtQNLN
ba+DM0LeKXPSjWUQJoFjzu6i9c3o5cfnQ5j9omG+iN5VeVH0gIADXTvfToQpJwox
bdzJeWAlQFKpJ3XZsGoyB4F3qoRt912TmAOoY2YBXKpviS1nX9gY0P5U0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTn6n2xHI12PB27vuyVvYOjA+ObMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNU9mcWZiRWNqWFk4SGJ1LTdKVzlnNk1ENDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzlCMA0G
CSqGSIb3DQEBCwUAA4IBAQASmuGPmR2XdXPd/mBxxaD8lr6nLtNze76CZFDtMGQZ
29ebHCmHlVSQ3QeyvsxCipKbmnY0krwqlYKen+HkNx6HZbCKreJuqrZylGUy+WrO
+7KzKCAO0vRREi0PskjU7UN9KkqsPf/vfmk9lhrPEu7VeFq8YZXm7sc7VxaY0Vbn
jPOOTvTcGpve7WXOQ1zBz6IiKkF9r+qFTMnBy4cUmmEAbSAXEyV1KFZOcTJKvobV
etsVjTdsu6i1fmAvgT34La0tqfsNwjJxfkQ7NI4K8jp/o+Gno9Va1kx6mK1Xg92i
6tFm/EdH+diVsP87y0bXo6szyNr+pYel8hbFbysCEhNi
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:30 2026 by rpki-client