Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VmNiYiQe0UbjevcqqHRGZ9knSBs.roa
File: VmNiYiQe0UbjevcqqHRGZ9knSBs.roa (raw, json)
Hash identifier: Ulay93l6kxi5nfM0f2v8/m6mzVfC3RHIT2xvBWBqEJs=
Subject key identifier: 56:63:62:62:24:1E:D1:46:E3:7A:F7:2A:A8:74:46:67:D9:27:48:1B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E2AF2D77D96C9609C4C3B2B8C5A22FE23
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VmNiYiQe0UbjevcqqHRGZ9knSBs.roa
Signing time: Fri 15 May 2026 09:23:38 +0000
ROA not before: Fri 15 May 2026 09:23:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 31.59.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:f2:d7:7d:96:c9:60:9c:4c:3b:2b:8c:5a:22:fe:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 15 09:23:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56636262241ed146e37af72aa8744667d927481b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:70:10:fb:ca:66:31:c8:7d:b8:ba:43:c6:
38:74:43:d3:11:8f:71:9b:d1:de:71:29:3a:5a:60:
38:2b:7b:cf:0c:69:17:f5:db:30:03:76:16:4f:a8:
5a:7f:b2:4b:68:56:21:aa:94:3b:e9:b2:cc:ee:d6:
43:ac:14:93:52:f8:5d:f3:0f:78:be:d9:a5:bd:45:
6e:19:9a:0b:1c:cd:b8:04:fa:d7:23:e0:ef:3a:79:
19:e2:57:91:18:25:e7:bd:d2:7d:3c:f6:da:95:6c:
be:dd:de:ad:59:90:fe:d7:af:4e:e9:9c:1b:61:bb:
63:8c:c9:f7:83:ed:8d:c8:e4:6a:25:24:b4:5c:b0:
1c:d3:ed:df:94:b6:ae:08:de:7a:9b:01:ab:6d:96:
0e:fa:76:a3:d3:e4:80:bc:db:f9:a7:e4:74:fa:56:
b4:90:24:b7:6e:24:33:8c:7d:3f:8b:de:a3:52:06:
f1:29:21:7c:c3:da:b4:d4:b6:08:18:28:7f:b5:f8:
bc:51:2d:20:96:5b:56:57:38:01:f3:a2:8a:ae:7c:
68:42:9d:0b:54:32:d6:41:55:5e:50:3e:16:8c:9f:
84:0b:8f:32:78:dd:27:48:1e:dc:eb:3e:e0:ee:e1:
fc:cc:78:29:18:bb:87:c8:0a:6b:bb:05:e3:c5:7c:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:63:62:62:24:1E:D1:46:E3:7A:F7:2A:A8:74:46:67:D9:27:48:1B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VmNiYiQe0UbjevcqqHRGZ9knSBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.198.0/24
Signature Algorithm: sha256WithRSAEncryption
95:04:c0:d9:74:2c:69:46:9e:77:76:4f:09:c9:2f:b6:5f:57:
cc:93:45:f5:49:bd:79:24:20:fd:72:e4:e2:89:cc:fa:e2:22:
24:1c:fa:1b:29:bb:d8:ec:6d:70:04:2f:e1:36:61:5a:f4:67:
77:30:07:d6:ee:fc:6d:32:8a:25:65:2f:bc:17:53:3f:dc:b1:
ba:78:ee:86:3e:f3:e3:6a:45:1c:e5:23:7c:33:ec:82:c3:fe:
d7:90:67:12:ed:8e:ca:a8:c8:38:68:e6:58:3e:8d:af:b6:52:
5e:aa:58:ba:5f:16:07:d6:1b:9e:a8:69:ee:92:e1:0e:3a:94:
55:6b:61:9b:19:7c:94:17:05:d4:cf:39:76:cd:78:1b:d4:27:
47:dc:af:bb:92:20:07:58:1f:b4:a8:02:ad:c3:7b:55:b3:a9:
38:0e:6f:9f:43:f3:a8:89:14:98:a9:2d:89:07:98:0b:9a:71:
3c:7c:ac:78:b1:d8:ae:ec:02:b5:9a:c9:82:a2:ed:16:e8:b8:
f5:b8:19:7b:56:f2:7c:24:67:b3:7a:3d:1b:62:db:dd:35:4e:
95:62:e3:19:11:c9:98:d0:97:42:28:23:8a:79:56:40:27:b6:
99:5d:23:87:69:88:a3:36:25:53:9b:82:a2:73:52:d7:c2:74:
75:35:21:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ4q8td9lslgnEw7K4xaIv4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNTE1MDkyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjYzNjI2MjI0MWVkMTQ2ZTM3YWY3MmFhODc0NDY2N2Q5Mjc0ODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwJwEPvKZjHIfbi6Q8Y4dEPTEY9x
m9HecSk6WmA4K3vPDGkX9dswA3YWT6haf7JLaFYhqpQ76bLM7tZDrBSTUvhd8w94
vtmlvUVuGZoLHM24BPrXI+DvOnkZ4leRGCXnvdJ9PPbalWy+3d6tWZD+169O6Zwb
YbtjjMn3g+2NyORqJSS0XLAc0+3flLauCN56mwGrbZYO+naj0+SAvNv5p+R0+la0
kCS3biQzjH0/i96jUgbxKSF8w9q01LYIGCh/tfi8US0glltWVzgB86KKrnxoQp0L
VDLWQVVeUD4WjJ+EC48yeN0nSB7c6z7g7uH8zHgpGLuHyApruwXjxXzsoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZjYmIkHtFG43r3Kqh0RmfZJ0gbMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVm1OaVlpUWUwVWJqZXZjcXFIUkdaOWtuU0JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzvGMA0G
CSqGSIb3DQEBCwUAA4IBAQCVBMDZdCxpRp53dk8JyS+2X1fMk0X1Sb15JCD9cuTi
icz64iIkHPobKbvY7G1wBC/hNmFa9Gd3MAfW7vxtMoolZS+8F1M/3LG6eO6GPvPj
akUc5SN8M+yCw/7XkGcS7Y7KqMg4aOZYPo2vtlJeqli6XxYH1hueqGnukuEOOpRV
a2GbGXyUFwXUzzl2zXgb1CdH3K+7kiAHWB+0qAKtw3tVs6k4Dm+fQ/OoiRSYqS2J
B5gLmnE8fKx4sdiu7AK1msmCou0W6Lj1uBl7VvJ8JGezej0bYtvdNU6VYuMZEcmY
0JdCKCOKeVZAJ7aZXSOHaYijNiVTm4Kic1LXwnR1NSEt
-----END CERTIFICATE-----
Generated at Wed May 27 15:56:17 2026 by rpki-client