Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KCJBDJ6Do2BbSXtk-pgNEeLDqPQ.roa
File: KCJBDJ6Do2BbSXtk-pgNEeLDqPQ.roa (raw, json)
Hash identifier: ypdl41iwNYj/YJOVrgsPieJpVIUp7YAZpOBU1l3R56w=
Subject key identifier: 28:22:41:0C:9E:83:A3:60:5B:49:7B:64:FA:98:0D:11:E2:C3:A8:F4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F3DE945D96016EBE4B5D648400C5FE402
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KCJBDJ6Do2BbSXtk-pgNEeLDqPQ.roa
Signing time: Tue 07 Jul 2026 18:48:45 +0000
ROA not before: Tue 07 Jul 2026 18:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393942
IP address blocks: 31.58.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:e9:45:d9:60:16:eb:e4:b5:d6:48:40:0c:5f:e4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 18:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2822410c9e83a3605b497b64fa980d11e2c3a8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:41:f2:62:6c:b2:d7:35:b9:af:c4:84:8b:
e4:80:34:b5:16:91:f8:3d:33:07:2f:16:23:ab:32:
cf:71:6d:93:28:e1:87:71:76:2a:85:14:6c:26:1f:
32:81:a8:c8:37:b4:91:ae:9e:82:c9:fa:a8:b7:59:
9e:e4:14:ea:a0:6f:5c:fa:87:03:1f:de:1d:a1:6c:
da:57:d9:16:bb:74:c0:93:c9:d7:9a:51:de:75:ae:
70:55:79:46:0d:63:6b:3a:2f:d0:b1:3c:5b:40:ab:
ce:81:00:ae:d9:5e:cb:21:b6:c2:97:a4:fa:9f:f5:
cb:18:21:c8:f1:b7:17:98:a4:3b:5e:2e:97:67:dc:
74:f7:fa:3d:ec:bc:53:61:0e:c0:de:8a:59:bf:86:
69:38:f8:98:25:db:53:ae:b0:21:df:ed:80:e6:d4:
7c:02:a1:6e:12:00:4d:57:6e:5c:7c:39:df:eb:3c:
aa:b9:16:14:d8:5b:4c:d5:df:55:eb:c1:ea:99:46:
fb:4d:51:96:ee:49:7d:2e:5d:f3:7e:cb:5d:1d:a1:
2d:e1:dc:1d:04:7f:b9:b9:5f:c0:45:6a:94:ed:4c:
8f:28:47:f9:9a:eb:90:96:00:90:b7:0f:01:ad:fb:
a1:6f:1f:1e:d0:c2:e2:c7:c3:8d:9a:0e:8d:85:2b:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:22:41:0C:9E:83:A3:60:5B:49:7B:64:FA:98:0D:11:E2:C3:A8:F4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KCJBDJ6Do2BbSXtk-pgNEeLDqPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e1:d1:70:21:aa:d2:59:4b:74:4c:74:e5:6a:3c:be:b5:b9:
2b:51:21:15:61:84:93:7f:49:30:46:84:3c:d6:79:f8:08:f7:
ca:ff:05:17:35:b3:6a:01:ec:e1:c3:1b:62:de:11:cd:88:bd:
f1:bc:f0:10:3d:b7:a4:53:cf:df:8d:c7:37:0d:df:dd:7a:aa:
43:76:fa:b6:59:28:b0:0c:a2:f3:d1:17:bf:6b:07:03:f2:0a:
b8:3a:b2:18:8a:93:57:3d:3b:2e:35:f0:47:5f:2a:72:9b:1d:
34:d4:50:bc:8f:0c:42:f5:39:86:39:c5:78:03:d0:0c:c4:50:
7d:1c:97:23:50:9b:c5:7f:a0:27:63:44:d1:52:55:56:c3:a0:
18:f3:a8:ed:89:2c:95:d1:50:db:07:d0:f7:12:0e:52:85:64:
3f:e8:2c:41:6b:a1:c4:c8:5f:6a:83:89:44:c5:a3:b4:33:60:
21:7e:77:0b:1a:64:ad:e1:af:0a:87:95:0e:5f:d7:3f:8b:2a:
0a:24:21:35:b3:a5:64:e4:c3:11:46:29:28:91:d6:5d:3d:5c:
c5:9f:31:b9:32:93:dd:d2:47:ef:21:84:28:75:ae:4a:fa:a8:
3b:69:4a:6c:39:41:56:71:c0:0b:aa:4d:5b:a6:43:d8:a6:2b:
bd:2e:07:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ896UXZYBbr5LXWSEAMX+QCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzA3MTg0ODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODIyNDEwYzllODNhMzYwNWI0OTdiNjRmYTk4MGQxMWUyYzNhOGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1hB8mJsstc1ua/EhIvkgDS1FpH4
PTMHLxYjqzLPcW2TKOGHcXYqhRRsJh8ygajIN7SRrp6Cyfqot1me5BTqoG9c+ocD
H94doWzaV9kWu3TAk8nXmlHeda5wVXlGDWNrOi/QsTxbQKvOgQCu2V7LIbbCl6T6
n/XLGCHI8bcXmKQ7Xi6XZ9x09/o97LxTYQ7A3opZv4ZpOPiYJdtTrrAh3+2A5tR8
AqFuEgBNV25cfDnf6zyquRYU2FtM1d9V68HqmUb7TVGW7kl9Ll3zfstdHaEt4dwd
BH+5uV/ARWqU7UyPKEf5muuQlgCQtw8Brfuhbx8e0MLix8ONmg6NhStk4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCgiQQyeg6NgW0l7ZPqYDRHiw6j0MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvS0NKQkRKNkRvMkJiU1h0ay1wZ05FZUxEcVBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzpFMA0G
CSqGSIb3DQEBCwUAA4IBAQCj4dFwIarSWUt0THTlajy+tbkrUSEVYYSTf0kwRoQ8
1nn4CPfK/wUXNbNqAezhwxti3hHNiL3xvPAQPbekU8/fjcc3Dd/deqpDdvq2WSiw
DKLz0Re/awcD8gq4OrIYipNXPTsuNfBHXypymx001FC8jwxC9TmGOcV4A9AMxFB9
HJcjUJvFf6AnY0TRUlVWw6AY86jtiSyV0VDbB9D3Eg5ShWQ/6CxBa6HEyF9qg4lE
xaO0M2AhfncLGmSt4a8Kh5UOX9c/iyoKJCE1s6Vk5MMRRikokdZdPVzFnzG5MpPd
0kfvIYQoda5K+qg7aUpsOUFWccALqk1bpkPYpiu9Lgel
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:38 2026 by rpki-client