Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZugWQ8SsDTxEPWV4u0IYYHq3mq8.roa
File: ZugWQ8SsDTxEPWV4u0IYYHq3mq8.roa (raw, json)
Hash identifier: n/DUbXvP0DlZuk6Vkfg36t60k8/R8K++gIs9wes0/XA=
Subject key identifier: 66:E8:16:43:C4:AC:0D:3C:44:3D:65:78:BB:42:18:60:7A:B7:9A:AF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A173BFB852263329C6CB87448173C00BF8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZugWQ8SsDTxEPWV4u0IYYHq3mq8.roa
Signing time: Sun 25 Oct 2026 15:48:26 +0000
ROA not before: Sun 25 Oct 2026 15:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 31.58.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:bf:b8:52:26:33:29:c6:cb:87:44:81:73:c0:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 25 15:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66e81643c4ac0d3c443d6578bb4218607ab79aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:5c:22:1c:60:22:27:e6:45:dd:92:0e:e5:
ea:da:8f:50:0a:bf:4c:81:79:56:8e:43:14:ba:fe:
1d:71:ab:84:c4:f3:1c:49:1a:ac:6f:64:9a:a4:ef:
d9:57:6b:f5:f4:af:2a:ce:85:0c:f7:5c:b7:4a:4b:
5b:17:85:da:fc:c5:03:9a:4d:48:32:4a:8a:c6:71:
a0:dd:16:fa:5b:9d:21:61:19:38:c9:3d:1b:43:e9:
6b:43:9b:89:bd:bc:ed:36:5d:ec:05:fb:b6:fa:62:
20:b3:ef:b2:7a:5b:2b:bf:21:dc:b0:42:b1:90:c4:
bd:15:29:46:bc:cd:85:b3:d5:a0:34:bd:33:e5:52:
a6:1e:81:ec:ed:be:e4:b0:4e:3d:4e:9b:50:29:3f:
77:da:20:63:0d:52:2d:54:d8:37:2c:5a:85:62:2c:
42:17:f9:c4:bd:92:db:6d:14:0d:a1:51:22:76:12:
e5:bb:f3:89:18:2a:67:0e:78:64:b9:7a:78:15:b7:
4f:1a:d9:1d:39:c9:ac:bb:63:9a:d9:06:27:8f:9c:
d5:13:eb:0c:aa:f3:06:d1:f6:96:02:30:2d:6b:0c:
69:ef:e9:63:92:e3:ef:60:1d:02:7a:af:56:e6:7f:
e0:cf:7a:e0:05:e9:28:0d:4b:f6:bc:e5:83:88:86:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E8:16:43:C4:AC:0D:3C:44:3D:65:78:BB:42:18:60:7A:B7:9A:AF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZugWQ8SsDTxEPWV4u0IYYHq3mq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:56:88:6b:59:40:ce:69:10:f4:bf:78:3d:6e:1c:28:00:91:
b4:b2:c9:41:b1:9a:c2:fc:31:44:ec:67:0f:04:a6:70:f6:a9:
b5:c9:18:06:63:6a:01:eb:bf:b3:85:cc:54:b8:9f:fe:b1:f7:
49:c5:e3:50:8f:b9:05:45:ca:dd:ec:79:ad:de:c6:fd:da:de:
2e:2a:ec:e6:ff:79:c3:26:78:91:b1:5d:12:39:e3:9f:11:30:
3d:05:3d:48:f5:2a:09:39:f3:72:83:40:5b:2b:e7:79:00:45:
3f:8b:25:40:8a:ee:93:46:1b:75:a0:f4:85:39:4b:8a:9a:ce:
2a:cc:8e:68:05:bb:5d:72:d9:34:5c:35:d5:ab:56:10:30:9a:
76:b1:1d:01:67:83:25:6d:0a:51:be:d5:53:2f:47:f4:8c:40:
58:ba:81:7d:56:a1:fb:46:e0:9a:8c:4f:7f:aa:3a:33:52:54:
a5:3f:50:87:f2:bf:65:14:1c:e2:e8:c4:3d:24:41:cb:70:05:
b6:d0:05:ea:c4:55:b5:98:51:3c:ed:ae:21:88:e0:f3:d9:41:
f7:a5:37:4d:13:cc:6e:9a:80:1b:fd:ca:bb:5a:b2:cd:25:fe:
94:00:64:6f:e3:47:30:65:32:67:45:22:21:58:94:44:7d:41:
e2:82:1a:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFzv7hSJjMpxsuHRIFzwAv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDI1MTU0ODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmU4MTY0M2M0YWMwZDNjNDQzZDY1NzhiYjQyMTg2MDdhYjc5YWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFlcIhxgIifmRd2SDuXq2o9QCr9M
gXlWjkMUuv4dcauExPMcSRqsb2SapO/ZV2v19K8qzoUM91y3SktbF4Xa/MUDmk1I
MkqKxnGg3Rb6W50hYRk4yT0bQ+lrQ5uJvbztNl3sBfu2+mIgs++yelsrvyHcsEKx
kMS9FSlGvM2Fs9WgNL0z5VKmHoHs7b7ksE49TptQKT932iBjDVItVNg3LFqFYixC
F/nEvZLbbRQNoVEidhLlu/OJGCpnDnhkuXp4FbdPGtkdOcmsu2Oa2QYnj5zVE+sM
qvMG0faWAjAtawxp7+ljkuPvYB0Ceq9W5n/gz3rgBekoDUv2vOWDiIZDjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGboFkPErA08RD1leLtCGGB6t5qvMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWnVnV1E4U3NEVHhFUFdWNHUwSVlZSHEzbXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzonMA0G
CSqGSIb3DQEBCwUAA4IBAQCsVohrWUDOaRD0v3g9bhwoAJG0sslBsZrC/DFE7GcP
BKZw9qm1yRgGY2oB67+zhcxUuJ/+sfdJxeNQj7kFRcrd7Hmt3sb92t4uKuzm/3nD
JniRsV0SOeOfETA9BT1I9SoJOfNyg0BbK+d5AEU/iyVAiu6TRht1oPSFOUuKms4q
zI5oBbtdctk0XDXVq1YQMJp2sR0BZ4MlbQpRvtVTL0f0jEBYuoF9VqH7RuCajE9/
qjozUlSlP1CH8r9lFBzi6MQ9JEHLcAW20AXqxFW1mFE87a4hiODz2UH3pTdNE8xu
moAb/cq7WrLNJf6UAGRv40cwZTJnRSIhWJREfUHighqa
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:41 2026 by rpki-client