Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XWXdTqxkCaWrr4Eq4IMJQdy2XFk.roa
File: XWXdTqxkCaWrr4Eq4IMJQdy2XFk.roa (raw, json)
Hash identifier: 0Day4giqdjfYB0mUEunU3Mh1sL0WG86/mMjlT0MIk+g=
Subject key identifier: 5D:65:DD:4E:AC:64:09:A5:AB:AF:81:2A:E0:83:09:41:DC:B6:5C:59
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0352AC046152952721044AFB1C3A91D31
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XWXdTqxkCaWrr4Eq4IMJQdy2XFk.roa
Signing time: Mon 24 Aug 2026 19:06:29 +0000
ROA not before: Mon 24 Aug 2026 19:06:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 31.57.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:2a:c0:46:15:29:52:72:10:44:af:b1:c3:a9:1d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 24 19:06:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d65dd4eac6409a5abaf812ae0830941dcb65c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:a3:6f:15:71:1e:2f:8e:9f:d4:3a:c7:85:
c1:6e:f0:d3:a5:f8:32:93:d1:06:0b:9a:66:5e:8c:
dd:cd:6a:06:e3:36:4e:1a:9a:ec:d4:69:21:e5:6e:
2c:23:45:65:31:4f:e8:e3:13:75:f6:10:cf:14:b1:
0d:d4:75:0d:62:6f:f7:dd:de:9d:cf:8d:eb:2b:9d:
ee:26:9a:7d:f6:fe:5f:53:57:20:af:59:fa:35:78:
d5:31:69:8d:5d:16:ad:d5:d4:da:f4:f1:6f:1b:6a:
cf:a2:9c:d3:cf:db:eb:1f:98:f4:6b:af:c5:56:84:
88:77:90:d6:f4:e2:62:6e:1d:55:96:d5:34:27:7f:
dc:78:f7:ed:b8:dd:84:c8:47:14:13:06:c4:e3:82:
5f:ca:d8:7a:e1:ac:80:16:67:d4:11:41:ec:99:ea:
b0:17:09:54:6b:6a:26:dd:8b:49:27:d9:ab:a7:a9:
26:1f:11:b0:0e:7f:29:bb:2b:10:87:e5:f8:52:42:
67:b7:7a:b8:0e:67:86:a6:21:7d:41:52:80:68:47:
0c:66:c4:66:46:45:ce:9a:4f:66:47:60:58:ae:34:
f0:43:0c:7f:ed:0d:85:dc:65:5f:a2:5f:92:32:cf:
96:41:a0:b4:54:f6:56:3f:f5:47:db:d5:6b:86:33:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:DD:4E:AC:64:09:A5:AB:AF:81:2A:E0:83:09:41:DC:B6:5C:59
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XWXdTqxkCaWrr4Eq4IMJQdy2XFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.0.0/24
Signature Algorithm: sha256WithRSAEncryption
50:84:a8:52:54:dd:e7:a9:4d:c5:87:b3:f6:a4:0d:81:ae:14:
3a:f9:22:0c:67:f0:b9:6a:b8:f9:d5:61:62:46:4d:a5:53:66:
2b:e0:d4:5e:d7:5d:9c:5d:78:21:2b:19:cb:03:38:66:1c:c9:
54:4e:a9:63:84:8c:dd:48:a6:f9:e5:34:0c:79:67:c7:1c:33:
b9:6f:73:a9:7a:af:62:69:40:f9:02:18:dc:7c:6e:a8:58:ab:
9b:71:cb:85:f5:8e:5a:fa:5f:b9:fc:b8:8b:44:b1:63:d1:d4:
f1:7a:4b:05:a0:14:f0:85:3e:3b:99:77:11:44:09:a3:9f:d8:
e8:64:f0:b9:6c:f3:f6:3f:82:8e:0b:f8:83:ce:41:30:40:99:
cd:ba:ed:e1:9c:9d:7a:94:fb:f6:0e:cb:5a:6a:9c:55:c0:75:
17:1e:4c:13:d2:4e:e6:38:a1:c3:c7:fd:f3:ef:5b:3b:f3:f3:
8c:ee:52:2d:0e:1e:9f:52:77:71:f4:2d:17:28:21:6b:5d:ea:
a7:aa:6f:2a:74:2b:51:13:cd:06:1d:75:a4:c8:76:19:50:17:
bb:18:90:3d:0f:8c:be:e0:7d:2e:7d:1c:07:85:8f:5c:92:02:
8c:d2:b4:5b:98:11:39:14:cc:97:69:dd:e6:cf:48:5d:18:68:
43:b5:1d:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA1KsBGFSlSchBEr7HDqR0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODI0MTkwNjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDY1ZGQ0ZWFjNjQwOWE1YWJhZjgxMmFlMDgzMDk0MWRjYjY1YzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhajbxVxHi+On9Q6x4XBbvDTpfgy
k9EGC5pmXozdzWoG4zZOGprs1Gkh5W4sI0VlMU/o4xN19hDPFLEN1HUNYm/33d6d
z43rK53uJpp99v5fU1cgr1n6NXjVMWmNXRat1dTa9PFvG2rPopzTz9vrH5j0a6/F
VoSId5DW9OJibh1VltU0J3/cePftuN2EyEcUEwbE44Jfyth64ayAFmfUEUHsmeqw
FwlUa2om3YtJJ9mrp6kmHxGwDn8puysQh+X4UkJnt3q4DmeGpiF9QVKAaEcMZsRm
RkXOmk9mR2BYrjTwQwx/7Q2F3GVfol+SMs+WQaC0VPZWP/VH29VrhjOmoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1l3U6sZAmlq6+BKuCDCUHctlxZMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWFdYZFRxeGtDYVdycjRFcTRJTUpRZHkyWEZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkAMA0G
CSqGSIb3DQEBCwUAA4IBAQBQhKhSVN3nqU3Fh7P2pA2BrhQ6+SIMZ/C5arj51WFi
Rk2lU2Yr4NRe112cXXghKxnLAzhmHMlUTqljhIzdSKb55TQMeWfHHDO5b3Opeq9i
aUD5AhjcfG6oWKubccuF9Y5a+l+5/LiLRLFj0dTxeksFoBTwhT47mXcRRAmjn9jo
ZPC5bPP2P4KOC/iDzkEwQJnNuu3hnJ16lPv2DstaapxVwHUXHkwT0k7mOKHDx/3z
71s78/OM7lItDh6fUndx9C0XKCFrXeqnqm8qdCtRE80GHXWkyHYZUBe7GJA9D4y+
4H0ufRwHhY9ckgKM0rRbmBE5FMyXad3mz0hdGGhDtR2r
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:35 2026 by rpki-client