Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qnt_iD8A3kAK7JLEXp3ySeaF8VM.roa
File: Qnt_iD8A3kAK7JLEXp3ySeaF8VM.roa (raw, json)
Hash identifier: bac4cMI0HFjoitEjh9rNa5tVspHkqF5T4REgB5AEp2E=
Subject key identifier: 42:7B:7F:88:3F:00:DE:40:0A:EC:92:C4:5E:9D:F2:49:E6:85:F1:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0582BB2D5D494F50A7CD7A39A7339CB02
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qnt_iD8A3kAK7JLEXp3ySeaF8VM.roa
Signing time: Mon 31 Aug 2026 14:14:13 +0000
ROA not before: Mon 31 Aug 2026 14:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 31.57.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:2b:b2:d5:d4:94:f5:0a:7c:d7:a3:9a:73:39:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 31 14:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=427b7f883f00de400aec92c45e9df249e685f153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:ce:81:4e:0e:0c:78:fe:5a:33:c6:4f:7d:
a3:86:b6:f7:5b:50:21:86:d0:54:50:f5:88:a5:c0:
dc:9e:e0:42:8e:c3:b2:3a:d0:dd:fa:a1:69:67:e1:
8a:12:95:5a:d4:cc:29:11:32:71:79:d8:6b:2e:ed:
9f:3c:2c:20:93:26:9c:9c:b6:d5:ca:bb:5c:de:a5:
fb:fe:2a:d7:0b:2a:83:24:62:60:20:44:54:82:02:
a0:d8:67:a6:c0:65:c5:21:03:ea:79:e3:27:b3:63:
44:cf:60:a2:6e:d1:7a:5e:ac:41:53:fc:ba:77:2b:
83:d8:eb:cd:32:b3:31:89:86:5e:e0:14:ba:aa:0d:
f2:8d:04:50:f5:3a:b3:1c:25:3c:4f:d8:ab:d4:0f:
75:bc:3e:48:ea:fa:45:1c:fe:ec:35:28:24:69:fa:
f2:85:1f:2d:99:f2:d3:60:a0:ff:69:a8:19:eb:11:
0d:3b:b4:02:76:28:c1:f9:25:59:b0:00:13:b8:d5:
10:30:a2:9e:52:09:06:19:98:d7:b2:61:49:d3:a9:
64:27:cc:71:f6:9c:1a:d0:54:d2:f7:45:cf:2b:26:
66:e8:97:99:b9:64:0c:cf:85:bf:66:a0:13:d3:f2:
cb:2b:1d:c6:1c:6c:7e:e7:f8:76:33:4c:85:1a:8a:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:7F:88:3F:00:DE:40:0A:EC:92:C4:5E:9D:F2:49:E6:85:F1:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qnt_iD8A3kAK7JLEXp3ySeaF8VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f8:48:8e:47:7a:9a:a3:54:50:be:26:60:48:7a:56:0f:1c:
f9:2a:67:50:26:75:84:18:b9:c1:df:4e:cd:96:bf:e6:86:88:
00:92:c2:ff:99:43:fd:08:21:dc:a7:7e:a4:96:2a:11:8b:08:
32:6b:52:09:c7:a4:8a:70:e6:61:9b:7b:59:55:43:79:26:b4:
66:ff:ba:f0:a7:98:18:e5:6b:1e:c9:0c:22:58:0c:21:d5:06:
29:0b:c3:49:e7:23:94:f9:47:79:4e:e6:c6:1d:7a:8d:a5:53:
25:0c:80:81:5a:7f:9b:ca:8a:95:4c:06:9a:5d:67:c0:58:b9:
9e:3a:4f:1d:a9:bf:38:f0:31:4e:b0:7d:c0:f1:c6:25:8c:08:
53:6a:6b:e4:71:cb:f2:66:11:0a:7b:4a:83:1c:b3:0b:17:a9:
52:74:c1:a7:c1:34:c4:cf:19:91:60:d4:7b:3b:88:83:13:a7:
50:77:ce:23:b5:f3:94:dc:35:0d:28:5e:d4:c1:c4:f6:08:d8:
e8:dc:f2:d7:ca:a5:31:19:74:05:fa:e5:a7:98:9a:09:2a:4b:
72:14:ac:f9:97:7a:2c:ca:0b:5d:b5:fd:93:08:a7:cc:92:e4:
af:55:1e:1c:3f:5c:fe:16:59:78:64:78:89:10:85:6a:92:6f:
ff:4d:7a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:09 2026 by rpki-client