Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TbaYMCuxlBxfaK4tQwWmmtYHrb8.roa
File: TbaYMCuxlBxfaK4tQwWmmtYHrb8.roa (raw, json)
Hash identifier: TFbMRwHZtxhiKmjTRI1coWzy14bXj5o0FrSqNv1BonM=
Subject key identifier: 4D:B6:98:30:2B:B1:94:1C:5F:68:AE:2D:43:05:A6:9A:D6:07:AD:BF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A13B0F80753560D0DE1EE208D3A8ECD0C9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TbaYMCuxlBxfaK4tQwWmmtYHrb8.roa
Signing time: Wed 14 Oct 2026 15:37:13 +0000
ROA not before: Wed 14 Oct 2026 15:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219115
IP address blocks: 31.57.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:0f:80:75:35:60:d0:de:1e:e2:08:d3:a8:ec:d0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 15:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4db698302bb1941c5f68ae2d4305a69ad607adbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:86:5b:e8:85:85:d3:bf:1d:52:b6:33:51:
4f:ca:cc:d5:1b:6b:40:a4:54:8c:55:26:7c:f2:de:
8e:47:0d:9b:5f:88:b8:4c:e0:8f:82:16:86:bf:c6:
8a:c1:2d:e2:4a:0e:ee:0f:1c:eb:70:a3:3b:2b:82:
26:17:79:46:b1:b9:36:18:55:c3:da:92:c6:2c:69:
e7:d7:aa:3d:68:b5:f5:ac:73:f6:db:54:be:35:05:
68:03:25:4b:ea:fb:88:15:dc:b5:56:ff:96:7a:10:
11:89:ef:81:4e:57:54:16:6a:d5:91:d6:11:74:ed:
ca:6c:31:4b:b8:6f:ec:b1:dc:9b:61:c8:9b:94:79:
33:fb:18:53:17:d2:07:59:70:aa:91:eb:32:cd:69:
5e:46:33:ff:c1:64:78:53:b7:c0:ca:e9:5e:aa:cd:
df:03:26:25:48:c8:7e:6f:e7:c5:1d:1a:9e:9c:6e:
5b:02:72:d0:c8:d7:eb:58:5e:f9:b8:48:5e:6e:91:
cc:d1:c7:01:35:e3:64:1e:51:f9:c5:80:30:93:69:
a8:1a:f0:ec:00:af:7c:fc:d5:fe:d3:e7:67:e5:41:
3f:6b:e5:19:ce:9c:1e:f9:11:59:0c:6d:86:56:4f:
6d:ba:79:51:4d:20:08:75:04:27:99:3e:e0:c3:bd:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B6:98:30:2B:B1:94:1C:5F:68:AE:2D:43:05:A6:9A:D6:07:AD:BF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TbaYMCuxlBxfaK4tQwWmmtYHrb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.25.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d8:89:5c:f4:09:f6:40:ab:41:91:38:4e:21:49:af:db:64:
31:a2:be:a2:c7:fc:5d:f8:6e:4c:f8:3d:f7:45:d0:6d:2a:c2:
87:8b:fa:4a:66:1c:29:a0:80:7d:f0:e3:bd:f8:ae:78:0c:2a:
9e:3d:95:e8:62:c0:64:ca:6e:2f:53:8d:af:6e:29:cb:99:72:
6c:e8:63:23:b7:c8:a5:6c:8b:f8:8c:c9:d5:34:e6:b3:6d:9b:
8d:a5:f4:fb:d9:64:2f:6f:30:6d:2f:7d:86:c5:e3:34:e2:43:
59:69:78:1e:3a:e6:f1:79:92:cd:8c:1e:52:9a:87:e4:60:05:
fc:7f:b9:7a:e7:12:f5:90:fa:b0:73:c7:c0:48:a3:08:fe:34:
4d:1d:b2:b5:36:2a:f9:9a:59:87:0c:27:1c:82:cb:a2:c2:4c:
d7:aa:1c:e9:30:ff:64:78:9b:8d:47:50:fb:5d:25:65:72:0a:
e7:0b:a1:b5:de:5c:76:be:4c:71:2a:7e:af:45:21:fe:ee:59:
7b:f5:7b:7f:4c:35:85:21:bb:e9:4c:66:f7:25:93:a2:bb:3d:
36:c4:15:c7:1f:40:12:6c:09:8a:28:33:60:47:ff:c6:1c:3b:
52:d2:6e:ab:be:e4:ce:b9:43:11:06:4b:9d:76:40:d8:ae:c0:
00:d9:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:33 2026 by rpki-client