Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iv1Tut089uQlAAgJb6MQV30nKoI.roa
File: Iv1Tut089uQlAAgJb6MQV30nKoI.roa (raw, json)
Hash identifier: 2uG4PnLntTMCyb/pTkCyg4mK6X7Ng2cmoWsiwlgWIoA=
Subject key identifier: 22:FD:53:BA:DD:3C:F6:E4:25:00:08:09:6F:A3:10:57:7D:27:2A:82
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FF5CFA000473601A4FBB12787D1DA11E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iv1Tut089uQlAAgJb6MQV30nKoI.roa
Signing time: Wed 12 Aug 2026 11:50:52 +0000
ROA not before: Wed 12 Aug 2026 11:50:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 31.57.202.0/24 maxlen: 24
31.58.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:cf:a0:00:47:36:01:a4:fb:b1:27:87:d1:da:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 12 11:50:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22fd53badd3cf6e4250008096fa310577d272a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1d:c6:75:72:b9:7f:7f:a8:5f:cc:c0:a6:00:
9f:43:ce:c5:59:dd:67:cd:92:79:7d:cc:f9:e9:c4:
ce:ec:14:76:f7:db:aa:6f:e1:76:ad:a8:eb:66:97:
21:64:b5:fd:e5:cd:4a:d1:ae:56:02:b7:ed:34:e5:
96:a8:60:4e:11:7a:bc:60:15:02:d7:70:83:0c:6c:
49:ca:a4:12:89:75:1a:a4:50:fc:1e:8f:2f:80:6c:
0e:70:c1:04:c3:3d:2a:6e:7f:70:ed:a5:45:81:dc:
1c:30:c4:26:89:40:28:75:45:7b:ac:7f:68:62:15:
0f:39:87:2c:ed:ae:cd:44:57:d8:df:e3:d9:f9:6b:
dc:c0:ea:e3:bc:d3:0e:7f:11:d3:7d:b6:db:c9:de:
68:62:f1:56:ee:44:37:d9:13:51:7a:3d:ee:94:87:
9e:32:82:33:f5:99:fd:37:c8:a6:73:0f:3b:24:6f:
03:b9:ec:17:22:5f:5e:27:4b:80:7c:56:c1:a9:a4:
b0:2e:33:f6:ef:4c:f7:9a:95:ff:f9:90:e9:7c:7a:
83:de:7b:c5:a9:c9:67:dd:af:d7:8f:6a:ce:45:1c:
55:89:58:f3:fb:cf:be:45:74:e2:cc:7e:4a:1c:88:
93:43:cd:a6:b6:8e:82:5e:65:fc:26:ec:3d:05:1e:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:53:BA:DD:3C:F6:E4:25:00:08:09:6F:A3:10:57:7D:27:2A:82
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iv1Tut089uQlAAgJb6MQV30nKoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.202.0/24
31.58.62.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0d:37:5b:4f:79:5e:6b:76:cf:4b:ed:c3:31:8a:79:8c:b2:
fa:e4:8a:9f:7e:ca:94:aa:4a:a5:81:c5:cb:9c:8d:c6:d7:bc:
5d:09:6c:8f:1b:c6:59:e6:b4:eb:bf:2b:54:7d:64:59:6c:ce:
39:6e:91:4b:c6:f8:2f:58:d3:a7:23:f1:f8:ee:82:d7:99:1d:
b8:6b:a4:fd:84:af:4e:66:b0:d8:e7:df:cd:6a:37:32:c3:e7:
f6:2d:d3:62:2a:98:1b:10:36:75:4f:8b:1b:f9:96:90:2c:a4:
ab:61:fc:13:6a:ef:76:a6:67:14:b8:6c:44:71:53:89:de:bd:
52:b0:ff:bb:3c:e2:cc:ef:93:8f:30:60:f8:06:32:fa:49:ed:
99:73:cf:ea:8b:77:c3:9e:cb:ce:56:a8:d1:e9:5f:51:b9:d2:
70:b8:d4:35:92:88:3d:52:ac:f9:e8:9d:32:61:ea:65:ed:90:
3f:b6:6f:14:52:ae:47:ab:a3:88:45:f6:4d:db:67:0f:d3:77:
7c:77:66:3d:61:d9:dc:c6:d5:35:9d:d1:fb:f2:1d:0d:43:5b:
2a:1b:7e:4f:f4:f4:2e:cb:46:45:07:d2:f0:95:b4:62:0c:35:
7f:e9:c6:07:1b:f0:c9:01:a3:47:58:73:ec:f0:a4:2d:16:66:
1c:9c:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:46 2026 by rpki-client