Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IFtIDz5j-rgYu6duDa_N5TufX-o.roa
File: IFtIDz5j-rgYu6duDa_N5TufX-o.roa (raw, json)
Hash identifier: WMrxUhQJYWAEQ+aN9VRT0AqzgdLMwnbk53CIvPGna7o=
Subject key identifier: 20:5B:48:0F:3E:63:FA:B8:18:BB:A7:6E:0D:AF:CD:E5:3B:9F:5F:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A102D6254878291633AA98CF77D371F109
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IFtIDz5j-rgYu6duDa_N5TufX-o.roa
Signing time: Sat 03 Oct 2026 17:35:51 +0000
ROA not before: Sat 03 Oct 2026 17:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211507
IP address blocks: 31.59.148.0/24 maxlen: 24
31.59.182.0/24 maxlen: 24
217.60.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:d6:25:48:78:29:16:33:aa:98:cf:77:d3:71:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 17:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=205b480f3e63fab818bba76e0dafcde53b9f5fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f4:2f:72:91:92:c0:e3:91:93:37:9f:5d:c9:
8c:50:4e:52:9e:4b:3d:2c:ea:f1:2e:bd:21:02:42:
9b:e9:84:b4:3c:7f:cf:fe:39:fb:16:ae:53:89:9b:
07:48:54:18:9b:db:6c:06:f5:08:a8:8d:ff:f1:7b:
fd:ce:17:a5:6f:5e:07:20:18:3c:cc:20:dd:76:c5:
04:bb:05:75:00:2c:a4:e1:ba:66:37:88:8a:69:1c:
bc:09:28:38:3f:d2:2b:0a:be:02:a1:75:ee:9e:aa:
2d:4d:30:4c:c7:5c:04:5d:f8:cb:93:fc:e7:fe:83:
b1:c1:f2:ed:33:8e:f1:02:2b:84:fa:e5:71:9b:53:
af:63:c5:38:15:34:bf:b9:bc:39:e4:fe:9e:9d:b2:
e3:bb:04:95:e4:e9:fc:59:d9:63:85:2c:0d:0c:eb:
47:b4:3d:3d:70:f8:ba:d4:43:4e:19:07:20:34:6f:
06:3b:ce:26:f1:0a:32:87:ef:3c:ea:09:0c:0d:78:
37:74:55:9f:ee:c8:9c:3d:9c:38:74:5d:5a:4e:b1:
41:8d:c9:90:bd:37:27:51:39:35:40:73:93:d3:2b:
c1:7f:dd:02:fc:52:82:db:ee:ba:58:45:0e:b2:66:
b6:24:d1:6f:19:8e:3d:c9:30:02:5e:03:a1:2a:f4:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5B:48:0F:3E:63:FA:B8:18:BB:A7:6E:0D:AF:CD:E5:3B:9F:5F:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IFtIDz5j-rgYu6duDa_N5TufX-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.148.0/24
31.59.182.0/24
217.60.185.0/24
Signature Algorithm: sha256WithRSAEncryption
50:df:49:35:cc:72:9f:32:46:0e:47:a3:b6:b3:bb:fc:9a:12:
3a:66:7d:fe:78:05:68:55:14:b4:f0:c5:23:6a:28:d4:f6:26:
43:64:26:8d:7d:d4:27:a6:34:42:18:35:2c:ee:22:a0:80:b8:
84:32:f4:23:46:24:61:20:7d:ca:ed:2c:8d:cd:02:db:80:44:
a9:29:c6:4b:dc:36:89:2a:e7:ca:47:d1:ef:af:15:ad:e7:06:
fd:d2:fa:2e:76:af:72:ea:31:e9:81:e9:53:6d:73:0e:87:c6:
e2:e3:95:f9:6a:68:1e:3e:d9:81:23:71:ce:f2:ff:cd:53:30:
fe:40:c9:b2:6c:2c:00:d6:a6:15:02:b5:eb:bb:12:e1:ca:b7:
3a:22:32:50:f9:0b:20:ba:24:f8:19:82:d7:1d:d7:eb:1e:95:
4a:80:2f:dd:d9:57:b3:0f:25:75:fc:68:a1:19:5e:9d:8f:9f:
0e:24:17:fd:5b:2c:31:aa:1e:80:e7:dd:29:f3:b7:02:66:dc:
f7:04:c6:20:d2:95:9b:98:66:a7:4b:72:86:2a:88:b7:a9:6e:
ad:05:a3:cf:35:a1:a7:39:eb:00:a6:ec:44:7f:97:0b:e3:b1:
a7:2a:96:55:71:e1:d6:d6:06:a9:24:d6:df:65:81:d8:45:77:
86:ea:9d:3c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEC1iVIeCkWM6qYz3fTcfEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDAzMTczNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDViNDgwZjNlNjNmYWI4MThiYmE3NmUwZGFmY2RlNTNiOWY1ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivQvcpGSwOORkzefXcmMUE5Snks9
LOrxLr0hAkKb6YS0PH/P/jn7Fq5TiZsHSFQYm9tsBvUIqI3/8Xv9zhelb14HIBg8
zCDddsUEuwV1ACyk4bpmN4iKaRy8CSg4P9IrCr4CoXXunqotTTBMx1wEXfjLk/zn
/oOxwfLtM47xAiuE+uVxm1OvY8U4FTS/ubw55P6enbLjuwSV5On8WdljhSwNDOtH
tD09cPi61ENOGQcgNG8GO84m8Qoyh+886gkMDXg3dFWf7sicPZw4dF1aTrFBjcmQ
vTcnUTk1QHOT0yvBf90C/FKC2+66WEUOsma2JNFvGY49yTACXgOhKvTBlQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCBbSA8+Y/q4GLunbg2vzeU7n1/qMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSUZ0SUR6NWotcmdZdTZkdURhX041VHVmWC1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzuUAwQA
Hzu2AwQA2Ty5MA0GCSqGSIb3DQEBCwUAA4IBAQBQ30k1zHKfMkYOR6O2s7v8mhI6
Zn3+eAVoVRS08MUjaijU9iZDZCaNfdQnpjRCGDUs7iKggLiEMvQjRiRhIH3K7SyN
zQLbgESpKcZL3DaJKufKR9HvrxWt5wb90voudq9y6jHpgelTbXMOh8bi45X5amge
PtmBI3HO8v/NUzD+QMmybCwA1qYVArXruxLhyrc6IjJQ+QsguiT4GYLXHdfrHpVK
gC/d2VezDyV1/GihGV6dj58OJBf9Wywxqh6A590p87cCZtz3BMYg0pWbmGanS3KG
Koi3qW6tBaPPNaGnOesApuxEf5cL47GnKpZVceHW1gapJNbfZYHYRXeG6p08
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:33 2026 by rpki-client