Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T1cJ-I4DA7G5uv49W8Yu1Ug_Mlg.roa
File: T1cJ-I4DA7G5uv49W8Yu1Ug_Mlg.roa (raw, json)
Hash identifier: a5zitRGv7lBSZV14m0IfqXPTDjfzVfqbSsquZSriW6U=
Subject key identifier: 4F:57:09:F8:8E:03:03:B1:B9:BA:FE:3D:5B:C6:2E:D5:48:3F:32:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A14B182143C7578F1F3DCBEA3F4098DA21
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T1cJ-I4DA7G5uv49W8Yu1Ug_Mlg.roa
Signing time: Sat 17 Oct 2026 18:20:34 +0000
ROA not before: Sat 17 Oct 2026 18:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197769
IP address blocks: 31.57.37.0/24 maxlen: 24
31.57.184.0/24 maxlen: 24
31.57.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:18:21:43:c7:57:8f:1f:3d:cb:ea:3f:40:98:da:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 18:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f5709f88e0303b1b9bafe3d5bc62ed5483f3258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:6b:ff:f2:bc:8c:58:b9:82:aa:06:42:23:
30:cc:0c:44:67:27:37:bb:4c:9e:81:09:10:46:13:
00:ea:f9:ba:75:b1:be:ed:e0:f2:db:85:6a:a2:c8:
66:34:97:01:ec:2b:38:b9:68:cf:0e:1c:24:62:ef:
9c:07:92:02:2a:f2:c6:0b:40:99:5c:5f:7f:d6:21:
14:9f:18:2e:95:51:e5:15:50:85:49:24:7b:17:5d:
49:89:65:7d:fc:28:21:66:3c:6c:15:dc:19:3c:63:
34:72:00:b0:d9:9b:63:1e:a6:55:d2:8f:5e:b5:36:
49:9c:00:f2:75:6c:0f:54:cc:27:3c:b1:09:40:bf:
5d:21:92:71:3f:85:5a:84:aa:a1:0d:cc:91:1c:b3:
63:81:92:6c:fe:cb:75:bb:de:c8:d6:7e:89:af:96:
75:2f:eb:ef:51:3a:2c:db:cf:8b:ea:7e:27:2a:dc:
98:4c:9b:71:0c:62:a5:43:96:59:c7:c6:2e:f3:aa:
7e:63:ac:ba:54:64:88:ab:11:2e:d2:b2:2f:d6:16:
9a:90:a0:1f:b6:0b:fa:b4:18:45:c1:ac:85:4c:12:
d8:42:62:65:5f:c3:39:2a:03:5a:fd:1e:52:37:79:
1b:a4:e7:ca:a9:7e:1c:a7:f4:3f:5b:9e:bf:12:83:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:09:F8:8E:03:03:B1:B9:BA:FE:3D:5B:C6:2E:D5:48:3F:32:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T1cJ-I4DA7G5uv49W8Yu1Ug_Mlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.37.0/24
31.57.184.0/24
31.57.216.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7f:41:e7:e3:25:be:d8:1f:02:ce:74:96:4f:75:af:e3:e0:
1b:a6:b8:db:a9:1c:a5:e6:d2:43:31:cc:8d:bc:cf:45:12:e4:
65:bc:8e:27:1d:c7:7c:29:08:bb:fc:d3:57:a1:08:95:9e:86:
cb:57:c5:12:d7:98:c1:38:26:89:f0:0b:44:4c:03:f0:ec:d1:
4b:7d:73:30:fa:30:2d:6f:ae:84:39:44:7e:1a:af:69:7c:dd:
0a:62:41:6a:46:2b:5d:d3:9a:32:39:b6:76:0f:11:2d:a8:d8:
c3:47:c5:3a:83:f3:01:fd:8b:71:16:7c:63:06:cd:6b:21:e0:
75:3a:1a:21:bd:06:e3:fe:0c:b8:8e:2a:95:57:f7:47:ed:fb:
40:b3:e6:ea:c6:58:38:a6:12:c6:7e:77:10:f9:d3:86:02:2a:
13:b2:a1:d7:6c:ae:e7:44:4e:e4:56:68:8f:47:9c:bf:cc:36:
65:74:a3:b2:b9:82:1e:4d:f0:39:7f:9c:d4:e8:ec:74:e1:2f:
3b:a6:cd:ea:dc:22:88:59:1d:09:53:9e:b2:e7:61:e7:28:75:
28:b2:6e:48:18:4b:85:0b:a4:cd:77:28:0b:aa:a7:c0:5b:35:
13:f2:8b:d2:31:96:7a:bc:46:e0:6e:4a:e5:f1:db:71:3e:7d:
94:c4:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:25 2026 by rpki-client