Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bmJu7iMHiBUBqELV_PVQUFcT5LE.roa
File: bmJu7iMHiBUBqELV_PVQUFcT5LE.roa (raw, json)
Hash identifier: B4TZjjPXWMJK6yDPezNL0P950iA3//bPPL//k23NNC0=
Subject key identifier: 6E:62:6E:EE:23:07:88:15:01:A8:42:D5:FC:F5:50:50:57:13:E4:B1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FD08D7039AB41FCFE28598A02F29C8053
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bmJu7iMHiBUBqELV_PVQUFcT5LE.roa
Signing time: Wed 05 Aug 2026 06:12:38 +0000
ROA not before: Wed 05 Aug 2026 06:12:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26042
IP address blocks: 31.58.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:8d:70:39:ab:41:fc:fe:28:59:8a:02:f2:9c:80:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 5 06:12:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e626eee2307881501a842d5fcf550505713e4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:d6:f2:71:62:8a:0e:d3:a3:8f:65:48:ab:
dc:f8:77:21:ea:7d:01:cd:6a:79:ac:91:d6:08:9c:
7e:f0:e2:7a:5c:ab:59:ef:62:ec:be:71:ce:ce:3a:
e5:44:4f:95:2c:f8:c7:ab:a9:bb:e6:4e:2f:24:94:
8e:d6:92:c8:01:96:92:16:78:4e:ba:d3:68:56:18:
a5:3f:94:ce:82:ec:ab:54:91:93:c0:61:bc:86:9e:
3d:e5:8f:5f:d4:38:40:04:75:86:1d:42:01:ac:9b:
aa:49:cd:2c:44:0d:c6:9e:d3:1c:f1:f3:ef:86:7c:
f5:0b:8f:2c:49:cf:4d:b1:7b:99:ac:0b:be:5b:c6:
13:51:2c:ee:5f:64:44:ce:62:c2:80:29:42:f7:87:
b8:ca:22:ae:18:03:a9:0c:66:0d:69:f4:bd:15:13:
80:a4:70:31:15:8e:44:9e:8a:b6:d9:fb:d0:d5:d3:
64:e8:53:e0:0e:ba:ec:e3:b4:1d:86:04:c5:a5:86:
15:31:53:37:7f:61:c4:2d:bf:0b:ef:57:74:78:67:
01:1a:35:a7:69:f8:64:64:6f:86:fb:e1:0b:b7:95:
93:cb:62:dd:fc:92:96:12:43:56:e4:38:b9:44:5f:
11:f1:21:43:ae:44:6d:6b:dc:f7:d1:9a:29:ac:96:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:62:6E:EE:23:07:88:15:01:A8:42:D5:FC:F5:50:50:57:13:E4:B1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bmJu7iMHiBUBqELV_PVQUFcT5LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b1:07:ae:7c:f8:3a:c0:52:38:97:22:70:c1:70:64:35:b8:
03:23:e3:b7:32:40:f1:07:11:4f:ff:ac:29:77:5c:7e:fc:e5:
a9:36:62:4a:d9:4c:c8:b9:60:c0:50:b1:7c:0f:39:c0:49:9b:
b8:12:2c:58:a9:74:1e:6a:a5:2a:42:4f:7f:6a:18:2e:2b:69:
a7:25:37:9e:fd:85:bf:22:33:9e:9f:f5:46:fd:6f:54:2f:35:
41:f3:a7:90:3b:66:c7:06:08:a0:8e:05:77:79:4b:49:6a:bd:
1c:02:2c:f2:59:eb:f8:e1:fb:2e:4b:ac:57:74:5c:93:ab:8d:
6b:ab:a6:e5:5d:aa:f9:07:2c:b3:81:03:30:b8:34:4c:82:3c:
6c:2f:9e:31:72:4f:cc:4c:51:11:a3:6a:8c:48:ac:97:dc:7b:
e1:0e:e3:99:48:52:c7:52:da:0c:97:f8:0d:5f:f5:cb:a7:c7:
90:48:16:ab:a7:36:e0:5b:de:a2:26:5d:74:ad:97:bc:26:eb:
57:fa:ec:76:d7:ab:30:84:5e:3d:47:7f:94:ce:bf:61:98:64:
c4:71:e5:e2:ef:28:8a:d9:35:04:e7:4c:04:17:99:27:dd:8c:
06:28:cc:84:89:08:e8:d0:ed:0b:9b:db:0b:5a:b3:89:60:3a:
96:5b:1e:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/QjXA5q0H8/ihZigLynIBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODA1MDYxMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTYyNmVlZTIzMDc4ODE1MDFhODQyZDVmY2Y1NTA1MDU3MTNlNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKvW8nFiig7To49lSKvc+Hch6n0B
zWp5rJHWCJx+8OJ6XKtZ72LsvnHOzjrlRE+VLPjHq6m75k4vJJSO1pLIAZaSFnhO
utNoVhilP5TOguyrVJGTwGG8hp495Y9f1DhABHWGHUIBrJuqSc0sRA3GntMc8fPv
hnz1C48sSc9NsXuZrAu+W8YTUSzuX2REzmLCgClC94e4yiKuGAOpDGYNafS9FROA
pHAxFY5Enoq22fvQ1dNk6FPgDrrs47QdhgTFpYYVMVM3f2HELb8L71d0eGcBGjWn
afhkZG+G++ELt5WTy2Ld/JKWEkNW5Di5RF8R8SFDrkRta9z30ZoprJbmsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5ibu4jB4gVAahC1fz1UFBXE+SxMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYm1KdTdpTUhpQlVCcUVMVl9QVlFVRmNUNUxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzqbMA0G
CSqGSIb3DQEBCwUAA4IBAQA6sQeufPg6wFI4lyJwwXBkNbgDI+O3MkDxBxFP/6wp
d1x+/OWpNmJK2UzIuWDAULF8DznASZu4EixYqXQeaqUqQk9/ahguK2mnJTee/YW/
IjOen/VG/W9ULzVB86eQO2bHBgigjgV3eUtJar0cAizyWev44fsuS6xXdFyTq41r
q6blXar5ByyzgQMwuDRMgjxsL54xck/MTFERo2qMSKyX3HvhDuOZSFLHUtoMl/gN
X/XLp8eQSBarpzbgW96iJl10rZe8JutX+ux216swhF49R3+Uzr9hmGTEceXi7yiK
2TUE50wEF5kn3YwGKMyEiQjo0O0Lm9sLWrOJYDqWWx7d
-----END CERTIFICATE-----
Generated at Thu Aug 13 19:55:17 2026 by rpki-client