Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TnpWEaHlHSFfociosc9-13XmrTw.roa
File: TnpWEaHlHSFfociosc9-13XmrTw.roa (raw, json)
Hash identifier: B5usHJblXgOtzTTBsVtbjRESd/C8ZQ6bF1XfPieP2rI=
Subject key identifier: 4E:7A:56:11:A1:E5:1D:21:5F:A1:C8:A8:B1:CF:7E:D7:75:E6:AD:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E5F70C96FF41F2DE69103EEED21F61FE5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TnpWEaHlHSFfociosc9-13XmrTw.roa
Signing time: Mon 25 May 2026 14:01:27 +0000
ROA not before: Mon 25 May 2026 14:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202759
IP address blocks: 31.57.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:70:c9:6f:f4:1f:2d:e6:91:03:ee:ed:21:f6:1f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 25 14:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e7a5611a1e51d215fa1c8a8b1cf7ed775e6ad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:3e:55:76:b9:2a:e0:c5:9b:c1:e6:9f:4d:
e4:d1:43:e0:59:72:33:c0:3d:9a:28:94:7f:5e:ac:
c0:aa:b3:f9:a3:7d:c6:98:58:28:bd:a9:39:43:9c:
9b:02:92:53:4a:d2:45:e8:5a:36:03:fb:42:12:a9:
47:37:dd:33:b5:b2:bb:7f:e4:73:96:f1:ba:a3:3d:
69:5a:33:db:bc:6e:e7:59:c3:91:bb:16:ce:07:6f:
8c:6d:60:71:02:a1:8e:38:44:a9:32:67:42:d2:68:
e0:59:f5:68:c3:75:99:69:26:14:94:8a:73:d5:43:
90:52:03:8a:e4:2a:79:5a:83:52:75:89:1d:6a:68:
1a:4e:0e:4e:e1:05:ca:7e:a8:3a:64:61:04:b6:d5:
c6:54:f4:e6:d1:b8:44:c9:81:03:44:2f:14:e7:c1:
fa:ae:be:a8:70:08:ec:b5:6a:4a:08:b7:eb:f1:af:
c6:46:0a:7c:7e:5c:76:8e:4c:53:71:07:c5:8c:40:
cd:61:a2:41:e4:e5:39:e8:9f:d1:f2:74:8a:5e:78:
1c:73:03:11:f2:81:c7:4d:ab:f2:f6:01:88:1c:19:
d1:cc:76:d7:a6:70:66:07:5a:69:65:3d:f6:02:c2:
e7:6c:35:89:cc:f0:a7:5e:29:0c:47:03:34:56:64:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7A:56:11:A1:E5:1D:21:5F:A1:C8:A8:B1:CF:7E:D7:75:E6:AD:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TnpWEaHlHSFfociosc9-13XmrTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.25.0/24
Signature Algorithm: sha256WithRSAEncryption
09:a9:ed:96:ff:fd:94:df:ba:66:76:bc:38:c8:34:d6:a7:57:
89:d6:a2:99:26:43:9c:83:90:61:8e:22:74:95:a2:6e:da:e2:
12:5c:87:23:d0:56:37:ba:7b:dc:ee:40:1a:9b:8c:60:cc:50:
c0:c3:60:be:d5:d1:2f:db:e9:95:58:0a:4d:d4:2f:f6:e6:4a:
b0:f8:ad:e6:a4:35:df:04:77:49:23:8f:0f:60:63:35:71:07:
3a:04:e4:6a:8b:9e:8f:7b:32:13:62:81:29:26:ff:55:5b:56:
5e:ae:79:97:13:2f:5c:6a:1a:83:1c:30:b3:75:6d:d6:d5:9f:
67:8c:b4:6f:cb:23:e0:23:48:16:31:d1:81:2a:f6:3b:2e:37:
be:e2:65:b0:88:1b:b0:38:d8:f3:6d:95:1c:7a:5f:55:71:41:
75:9e:f0:0d:7d:ba:f1:03:19:9a:64:cd:8e:42:d1:36:a5:34:
2a:90:58:22:ed:7d:15:7a:94:95:68:2c:e7:0c:32:9a:07:4d:
c7:f2:99:a0:7a:01:d1:f7:74:2c:1c:ff:c1:1a:22:f3:04:0a:
dc:b3:fc:21:7b:58:33:f6:7c:ae:68:a5:53:67:10:0b:e0:64:
e4:9e:d9:49:a4:f5:16:09:ff:c1:c3:ea:c7:c2:e6:b7:4b:bc:
c6:df:3d:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5fcMlv9B8t5pED7u0h9h/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNTI1MTQwMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTdhNTYxMWExZTUxZDIxNWZhMWM4YThiMWNmN2VkNzc1ZTZhZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGU+VXa5KuDFm8Hmn03k0UPgWXIz
wD2aKJR/XqzAqrP5o33GmFgovak5Q5ybApJTStJF6Fo2A/tCEqlHN90ztbK7f+Rz
lvG6oz1pWjPbvG7nWcORuxbOB2+MbWBxAqGOOESpMmdC0mjgWfVow3WZaSYUlIpz
1UOQUgOK5Cp5WoNSdYkdamgaTg5O4QXKfqg6ZGEEttXGVPTm0bhEyYEDRC8U58H6
rr6ocAjstWpKCLfr8a/GRgp8flx2jkxTcQfFjEDNYaJB5OU56J/R8nSKXngccwMR
8oHHTavy9gGIHBnRzHbXpnBmB1ppZT32AsLnbDWJzPCnXikMRwM0VmQj1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE56VhGh5R0hX6HIqLHPftd15q08MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVG5wV0VhSGxIU0Zmb2Npb3NjOS0xM1htclR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkZMA0G
CSqGSIb3DQEBCwUAA4IBAQAJqe2W//2U37pmdrw4yDTWp1eJ1qKZJkOcg5BhjiJ0
laJu2uISXIcj0FY3unvc7kAam4xgzFDAw2C+1dEv2+mVWApN1C/25kqw+K3mpDXf
BHdJI48PYGM1cQc6BORqi56PezITYoEpJv9VW1ZernmXEy9cahqDHDCzdW3W1Z9n
jLRvyyPgI0gWMdGBKvY7Lje+4mWwiBuwONjzbZUcel9VcUF1nvANfbrxAxmaZM2O
QtE2pTQqkFgi7X0VepSVaCznDDKaB03H8pmgegHR93QsHP/BGiLzBArcs/whe1gz
9nyuaKVTZxAL4GTkntlJpPUWCf/Bw+rHwua3S7zG3z2L
-----END CERTIFICATE-----
Generated at Wed May 27 15:54:48 2026 by rpki-client