Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BHGfkl49rhTcXTZYL3F3ckUfLgI.roa
File: BHGfkl49rhTcXTZYL3F3ckUfLgI.roa (raw, json)
Hash identifier: WiaKHuXRWBrT+8Sfn0tuxzvA3WXEDVVTm3hBmp36sEE=
Subject key identifier: 04:71:9F:92:5E:3D:AE:14:DC:5D:36:58:2F:71:77:72:45:1F:2E:02
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E9CBF6F5A7BF929F5D838004300E53FF9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BHGfkl49rhTcXTZYL3F3ckUfLgI.roa
Signing time: Sat 06 Jun 2026 11:44:11 +0000
ROA not before: Sat 06 Jun 2026 11:44:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43094
IP address blocks: 31.58.89.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:bf:6f:5a:7b:f9:29:f5:d8:38:00:43:00:e5:3f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 11:44:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04719f925e3dae14dc5d36582f717772451f2e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:d5:d2:89:d0:42:c8:82:c0:11:4a:fb:c6:
d4:87:82:e9:72:42:86:c2:3f:cd:38:67:7e:2b:6f:
56:d0:78:69:eb:9d:35:fc:6f:ef:11:8b:25:49:dc:
29:c2:bd:8f:cd:c8:3d:d2:59:57:30:54:d3:dd:2f:
ea:92:12:24:3f:b2:47:82:c0:a5:99:0b:a8:6c:d3:
3e:fa:b3:99:fe:9a:dd:9b:29:1a:51:ec:7d:20:71:
cb:c0:7f:76:dc:80:55:9b:66:e4:92:bf:35:1e:b5:
c5:10:ca:0c:1f:0b:19:48:c8:82:2f:18:4f:32:68:
e6:1b:c1:aa:8d:96:8e:e0:3d:07:cc:61:91:06:40:
99:d4:24:bf:ed:1a:bf:9d:ab:8a:9e:73:8f:62:7c:
77:38:f8:e2:a4:12:6f:59:ae:da:8c:e7:f2:2e:01:
60:6c:9e:ed:c9:a7:89:d5:69:c0:7e:7f:01:51:d7:
42:58:0a:79:ba:09:47:f7:00:8f:c1:b8:2c:6a:57:
1b:3e:2e:e0:bd:23:50:37:21:20:99:89:54:4f:24:
4d:ae:1c:c6:e0:fc:ff:20:b8:1d:51:8a:19:40:58:
05:bb:6d:90:92:76:19:33:a7:8d:3b:c4:ee:11:28:
73:b7:1e:3a:a2:9e:83:c6:ea:6a:4a:df:f6:28:38:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:71:9F:92:5E:3D:AE:14:DC:5D:36:58:2F:71:77:72:45:1F:2E:02
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BHGfkl49rhTcXTZYL3F3ckUfLgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.89.0/24
31.59.70.0/24
Signature Algorithm: sha256WithRSAEncryption
24:fa:f8:97:8f:29:f2:de:69:5f:df:da:50:0d:7b:ae:a2:83:
e8:f1:62:15:5d:42:ab:f0:d4:d2:8e:93:c8:1b:b3:78:ce:65:
63:67:ff:45:7c:a3:1d:df:e2:72:87:28:b6:ee:bb:a6:cf:2c:
3c:46:b8:60:b5:f8:11:46:43:f3:15:81:4b:f3:25:1c:18:fc:
31:c9:16:e6:01:73:7c:0a:e9:7a:e3:5c:14:c0:88:01:1d:97:
84:cb:42:0e:76:aa:98:b9:90:60:bd:58:e2:8e:a1:15:ca:be:
c9:58:24:9f:2b:57:2c:6e:19:f6:4f:47:43:5a:c3:76:7c:8c:
7f:55:5e:c9:42:f0:72:38:ed:bb:ac:55:d1:07:e9:1a:13:e4:
f4:7c:82:bd:b5:da:c0:1f:58:3b:20:70:2e:bd:01:bf:0b:96:
c2:6a:f6:3f:cd:5e:99:8b:36:56:e1:0f:90:8e:9d:39:d1:86:
d0:c2:39:18:37:45:8d:c9:7f:a0:bf:06:c9:a0:9a:15:e2:35:
cf:b0:04:30:49:d7:04:ee:e3:99:f8:e2:60:ca:2b:23:00:05:
4c:5e:a4:f4:e2:88:15:88:6a:95:db:46:7a:d5:ca:2d:97:48:
1b:f3:6b:60:63:68:3a:ec:e9:82:dc:9a:ae:48:ff:54:87:b9:
7e:d4:70:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6cv29ae/kp9dg4AEMA5T/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjA2MTE0NDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDcxOWY5MjVlM2RhZTE0ZGM1ZDM2NTgyZjcxNzc3MjQ1MWYyZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqybV0onQQsiCwBFK+8bUh4LpckKG
wj/NOGd+K29W0Hhp6501/G/vEYslSdwpwr2Pzcg90llXMFTT3S/qkhIkP7JHgsCl
mQuobNM++rOZ/prdmykaUex9IHHLwH923IBVm2bkkr81HrXFEMoMHwsZSMiCLxhP
MmjmG8GqjZaO4D0HzGGRBkCZ1CS/7Rq/nauKnnOPYnx3OPjipBJvWa7ajOfyLgFg
bJ7tyaeJ1WnAfn8BUddCWAp5uglH9wCPwbgsalcbPi7gvSNQNyEgmYlUTyRNrhzG
4Pz/ILgdUYoZQFgFu22QknYZM6eNO8TuEShztx46op6DxupqSt/2KDiukQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFARxn5JePa4U3F02WC9xd3JFHy4CMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQkhHZmtsNDlyaFRjWFRaWUwzRjNja1VmTGdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzpZAwQA
HztGMA0GCSqGSIb3DQEBCwUAA4IBAQAk+viXjyny3mlf39pQDXuuooPo8WIVXUKr
8NTSjpPIG7N4zmVjZ/9FfKMd3+Jyhyi27rumzyw8RrhgtfgRRkPzFYFL8yUcGPwx
yRbmAXN8Cul641wUwIgBHZeEy0IOdqqYuZBgvVjijqEVyr7JWCSfK1csbhn2T0dD
WsN2fIx/VV7JQvByOO27rFXRB+kaE+T0fIK9tdrAH1g7IHAuvQG/C5bCavY/zV6Z
izZW4Q+Qjp050YbQwjkYN0WNyX+gvwbJoJoV4jXPsAQwSdcE7uOZ+OJgyisjAAVM
XqT04ogViGqV20Z61cotl0gb82tgY2g67OmC3JquSP9Uh7l+1HCQ
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:51 2026 by rpki-client