Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SxCfqxoKXKvJq6a9OoUOIylrzHc.roa
File: SxCfqxoKXKvJq6a9OoUOIylrzHc.roa (raw, json)
Hash identifier: 4hB0BTIJ/mQV/vGJl4fyYUCEUUJur/tBX8ShkOfXjPo=
Subject key identifier: 4B:10:9F:AB:1A:0A:5C:AB:C9:AB:A6:BD:3A:85:0E:23:29:6B:CC:77
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FB7FECC6C0C1F02842F670BAC012E2AFC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SxCfqxoKXKvJq6a9OoUOIylrzHc.roa
Signing time: Fri 31 Jul 2026 11:45:56 +0000
ROA not before: Fri 31 Jul 2026 11:45:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 31.57.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 06:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:fe:cc:6c:0c:1f:02:84:2f:67:0b:ac:01:2e:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 11:45:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4b109fab1a0a5cabc9aba6bd3a850e23296bcc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:e0:83:8d:a1:15:d5:f0:51:29:c6:7f:f2:
1b:1f:62:70:c5:9f:b7:59:f5:ce:cc:2e:b1:13:b4:
a0:52:14:d7:7f:75:4e:d1:45:3b:32:84:a3:f1:16:
21:d0:75:6f:45:cd:2b:8b:79:77:b1:71:6e:17:46:
ad:73:f7:54:3e:ad:21:7e:79:66:93:9a:24:07:96:
9f:59:15:4d:7c:3c:b8:83:e1:21:60:64:2e:1d:fa:
db:f9:93:d7:f9:e5:a7:22:d2:f4:06:16:79:16:3e:
17:a2:fb:70:96:4b:5a:f9:c5:52:64:70:3b:b2:d8:
58:1c:bc:18:66:0d:6f:0c:41:0a:84:e8:53:fe:fd:
a4:d1:44:d6:35:b1:51:89:e2:fd:09:d9:5b:64:89:
0b:ec:b6:a0:81:f5:ae:c1:9d:c8:e7:76:52:1b:24:
ce:97:32:b9:fd:35:48:e7:b0:5b:10:89:af:f3:2f:
36:a7:b6:2e:a5:f0:45:d1:2b:69:d4:b9:ab:f0:07:
e5:73:b3:08:01:71:c8:b6:b7:e8:6b:73:e5:f3:90:
bf:79:e0:1c:cc:50:c5:6a:2f:3d:e1:a6:92:d8:4b:
8f:f6:b7:11:82:79:75:e4:ea:bc:9c:89:57:4c:13:
21:aa:99:ad:33:b0:6d:49:27:c8:f2:ef:52:92:0d:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:10:9F:AB:1A:0A:5C:AB:C9:AB:A6:BD:3A:85:0E:23:29:6B:CC:77
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SxCfqxoKXKvJq6a9OoUOIylrzHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.48.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:74:44:6a:84:e2:09:01:bd:60:02:92:78:f6:da:ee:4b:04:
a5:83:32:b4:7d:eb:15:2b:6f:67:cb:24:ce:cc:42:48:3c:29:
d7:9a:c5:e7:0c:74:f9:7f:3a:c8:59:38:b4:c2:16:9a:24:79:
ce:07:5f:49:9d:6e:f6:b6:5c:6a:33:88:b0:2a:57:21:9d:b1:
de:8b:95:b6:61:87:4a:61:d7:7a:a9:78:be:74:92:c0:f7:c0:
88:56:2f:20:b7:64:de:d3:9f:3a:b2:75:53:6c:4b:2b:45:0c:
df:d1:3c:a7:6d:01:db:bf:bd:d7:76:11:39:03:fd:a9:67:b0:
1e:80:4d:5d:1a:bb:fe:7b:5f:2e:ac:64:1c:c5:aa:68:eb:49:
93:1e:8b:bb:ce:2b:b8:99:0f:38:8d:7e:78:49:16:2d:95:d5:
61:57:6c:33:cc:ee:14:dc:de:3e:e9:33:f2:2d:d5:6a:e9:a0:
7e:87:f1:45:2d:d0:2a:6d:10:65:bc:ec:45:34:ab:6d:e9:16:
91:43:9a:a6:ad:f9:17:e7:79:d8:4d:e9:fc:f8:dc:20:85:41:
23:9f:d1:67:f6:a7:c3:ab:7f:fd:b7:f3:16:3a:92:1b:23:48:
8e:78:5e:f1:5e:29:74:3b:5b:47:da:dd:e5:2b:7e:4b:22:b7:
83:6d:09:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+3/sxsDB8ChC9nC6wBLir8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzMxMTE0NTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjEwOWZhYjFhMGE1Y2FiYzlhYmE2YmQzYTg1MGUyMzI5NmJjYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Hgg42hFdXwUSnGf/IbH2JwxZ+3
WfXOzC6xE7SgUhTXf3VO0UU7MoSj8RYh0HVvRc0ri3l3sXFuF0atc/dUPq0hfnlm
k5okB5afWRVNfDy4g+EhYGQuHfrb+ZPX+eWnItL0BhZ5Fj4Xovtwlkta+cVSZHA7
sthYHLwYZg1vDEEKhOhT/v2k0UTWNbFRieL9CdlbZIkL7LaggfWuwZ3I53ZSGyTO
lzK5/TVI57BbEImv8y82p7YupfBF0Stp1Lmr8Aflc7MIAXHItrfoa3Pl85C/eeAc
zFDFai894aaS2EuP9rcRgnl15Oq8nIlXTBMhqpmtM7BtSSfI8u9Skg3zSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsQn6saClyryaumvTqFDiMpa8x3MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvU3hDZnF4b0tYS3ZKcTZhOU9vVU9JeWxyekhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkwMA0G
CSqGSIb3DQEBCwUAA4IBAQAfdERqhOIJAb1gApJ49truSwSlgzK0fesVK29nyyTO
zEJIPCnXmsXnDHT5fzrIWTi0whaaJHnOB19JnW72tlxqM4iwKlchnbHei5W2YYdK
Ydd6qXi+dJLA98CIVi8gt2Te0586snVTbEsrRQzf0TynbQHbv73XdhE5A/2pZ7Ae
gE1dGrv+e18urGQcxapo60mTHou7ziu4mQ84jX54SRYtldVhV2wzzO4U3N4+6TPy
LdVq6aB+h/FFLdAqbRBlvOxFNKtt6RaRQ5qmrfkX53nYTen8+NwghUEjn9Fn9qfD
q3/9t/MWOpIbI0iOeF7xXil0O1tH2t3lK35LIreDbQm1
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:15:52 2026 by rpki-client