Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NR2r4oAmmUjP5VU1pMVTZYDaJcA.roa
File: NR2r4oAmmUjP5VU1pMVTZYDaJcA.roa (raw, json)
Hash identifier: ZQosXJUnZum99ttKwnH7BkZah0zzFUDLCZlwJl67wRo=
Subject key identifier: 35:1D:AB:E2:80:26:99:48:CF:E5:55:35:A4:C5:53:65:80:DA:25:C0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EE013BABE12102AD4BD55BDB514AA095F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NR2r4oAmmUjP5VU1pMVTZYDaJcA.roa
Signing time: Fri 19 Jun 2026 13:30:49 +0000
ROA not before: Fri 19 Jun 2026 13:30:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 31.57.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e0:13:ba:be:12:10:2a:d4:bd:55:bd:b5:14:aa:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 19 13:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=351dabe280269948cfe55535a4c5536580da25c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:c9:6b:50:c1:6f:6e:05:9e:87:92:aa:5f:
9e:2f:c5:94:71:13:80:7c:68:1c:be:e2:d0:f5:bb:
67:5d:a6:6b:e6:44:87:34:72:25:aa:be:d7:fe:b0:
a6:ad:bd:4e:7f:42:74:bc:5c:74:47:13:74:30:09:
6a:93:de:b2:0c:81:80:fa:68:0d:b8:88:8b:23:cb:
52:9a:ed:c4:19:18:7f:c1:bf:f0:29:ae:4a:29:ca:
c9:5d:c9:68:99:17:e5:96:d3:b7:99:84:0e:cc:75:
9c:89:ec:47:e1:17:cc:25:bd:0c:0d:11:1b:4b:41:
c2:d9:cc:85:44:c5:bb:5d:82:b8:ec:89:eb:ff:74:
3a:21:82:9e:fa:aa:23:38:65:ef:1f:ea:b3:fe:67:
57:7b:0a:af:c4:0e:3e:60:bf:e1:a2:87:eb:a3:26:
77:d8:72:93:eb:90:8a:2a:61:4c:14:15:ef:c5:df:
1e:fc:74:68:1a:44:80:86:f5:32:7b:16:17:37:f0:
af:50:aa:56:97:b3:a3:bd:66:6c:f7:8e:63:91:04:
d6:e4:bc:de:be:ca:40:7a:a1:d5:62:89:4e:8d:ae:
9b:39:b6:cb:20:ec:19:51:6e:bb:a4:af:9a:15:2b:
5d:97:32:b3:f2:54:ce:8f:f5:66:2c:0c:16:87:fe:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1D:AB:E2:80:26:99:48:CF:E5:55:35:A4:C5:53:65:80:DA:25:C0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NR2r4oAmmUjP5VU1pMVTZYDaJcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.177.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:97:36:d0:74:51:27:96:d3:d4:0b:4d:5b:97:6d:a8:31:ba:
9a:42:0c:bd:8f:78:78:f4:ba:0e:80:4a:17:ce:66:79:3b:a3:
77:7f:9a:1d:91:ae:9c:9e:ea:53:d3:37:c6:5d:ed:0c:02:04:
9e:7f:10:ca:72:20:b5:d3:f5:52:62:95:97:cc:e5:b4:a2:75:
82:87:6d:fe:4e:af:e4:be:b0:1d:27:a6:d4:66:82:02:85:af:
73:19:15:ba:21:6d:e2:22:2a:64:57:0d:1d:ff:3e:e3:8a:1a:
2d:c1:2b:b9:07:e1:9c:ca:bd:aa:4f:83:e2:92:be:c8:65:f3:
42:89:42:ac:ac:f2:a8:21:47:11:17:71:f5:58:c7:4a:61:71:
f2:e4:da:b2:0c:2f:c0:02:5a:53:50:f5:06:1b:ca:01:14:82:
9a:4c:4a:a4:58:82:0f:13:0a:11:06:fb:b6:74:c1:51:9c:25:
e0:5f:8c:36:d8:4b:76:3a:c6:c8:81:a8:dc:45:c5:58:53:90:
76:19:33:56:47:9a:36:0a:e8:9f:3d:60:ee:3c:80:3c:84:66:
da:20:d0:86:1a:f9:83:21:73:e8:5b:3d:9b:c8:5d:26:38:8f:
bf:31:8d:97:ac:c5:94:64:cc:6b:95:dd:43:7a:c8:9a:df:f7:
45:09:a4:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7gE7q+EhAq1L1VvbUUqglfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjE5MTMzMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTFkYWJlMjgwMjY5OTQ4Y2ZlNTU1MzVhNGM1NTM2NTgwZGEyNWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT7Ja1DBb24FnoeSql+eL8WUcROA
fGgcvuLQ9btnXaZr5kSHNHIlqr7X/rCmrb1Of0J0vFx0RxN0MAlqk96yDIGA+mgN
uIiLI8tSmu3EGRh/wb/wKa5KKcrJXclomRflltO3mYQOzHWciexH4RfMJb0MDREb
S0HC2cyFRMW7XYK47Inr/3Q6IYKe+qojOGXvH+qz/mdXewqvxA4+YL/hoofroyZ3
2HKT65CKKmFMFBXvxd8e/HRoGkSAhvUyexYXN/CvUKpWl7OjvWZs945jkQTW5Lze
vspAeqHVYolOja6bObbLIOwZUW67pK+aFStdlzKz8lTOj/VmLAwWh/4VMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUdq+KAJplIz+VVNaTFU2WA2iXAMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTlIycjRvQW1tVWpQNVZVMXBNVlRaWURhSmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmxMA0G
CSqGSIb3DQEBCwUAA4IBAQDClzbQdFEnltPUC01bl22oMbqaQgy9j3h49LoOgEoX
zmZ5O6N3f5odka6cnupT0zfGXe0MAgSefxDKciC10/VSYpWXzOW0onWCh23+Tq/k
vrAdJ6bUZoICha9zGRW6IW3iIipkVw0d/z7jihotwSu5B+Gcyr2qT4Pikr7IZfNC
iUKsrPKoIUcRF3H1WMdKYXHy5NqyDC/AAlpTUPUGG8oBFIKaTEqkWIIPEwoRBvu2
dMFRnCXgX4w22Et2OsbIgajcRcVYU5B2GTNWR5o2CuifPWDuPIA8hGbaINCGGvmD
IXPoWz2byF0mOI+/MY2XrMWUZMxrld1Desia3/dFCaSL
-----END CERTIFICATE-----
Generated at Fri Jun 26 17:03:25 2026 by rpki-client