Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hZFnu7a3yZoMQ6s_QYNCGnABSXE.roa
File: hZFnu7a3yZoMQ6s_QYNCGnABSXE.roa (raw, json)
Hash identifier: wbhwNPZ3B4cU4dH8cB1L8dY+GHby7iaKxFidUaPlVnE=
Subject key identifier: 85:91:67:BB:B6:B7:C9:9A:0C:43:AB:3F:41:83:42:1A:70:01:49:71
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DB1558B16FA65223FE1FA5A28B742D600
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hZFnu7a3yZoMQ6s_QYNCGnABSXE.roa
Signing time: Tue 21 Apr 2026 18:37:46 +0000
ROA not before: Tue 21 Apr 2026 18:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209104
IP address blocks: 31.56.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:55:8b:16:fa:65:22:3f:e1:fa:5a:28:b7:42:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 21 18:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=859167bbb6b7c99a0c43ab3f4183421a70014971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:a4:b5:b1:9d:a4:db:21:36:81:ad:31:88:
3f:1a:b5:cd:d3:c7:e6:f1:71:9c:49:d6:35:9e:f6:
a1:a0:ab:d0:f8:60:97:33:75:d7:0b:b5:2d:88:d3:
41:95:7c:54:24:6f:77:e6:e7:9a:e3:0f:be:84:86:
40:31:0b:c5:5d:0d:c4:d4:47:7d:d5:0c:42:38:80:
21:70:bc:c8:80:96:33:9c:b4:a3:c3:b9:30:b4:4d:
e8:15:17:00:1f:88:51:14:d1:6a:c7:60:b4:56:68:
66:fb:a5:a7:7b:48:f5:36:f4:a5:fc:27:24:48:a9:
e1:e8:70:25:80:54:65:07:29:55:de:13:f4:0b:b7:
87:44:61:6b:5c:c1:14:eb:5a:54:9c:b8:93:66:30:
9a:75:80:6f:86:7c:5b:04:8f:25:8d:8a:4e:a9:b9:
54:d9:db:42:29:71:07:76:43:e9:ad:f8:2c:6d:8e:
81:af:75:bb:12:b7:3d:e2:c9:83:3d:27:5d:18:9d:
cd:a3:51:08:16:36:19:8b:13:8f:2a:14:42:f3:82:
0b:b9:68:ca:0c:be:1f:73:61:08:9f:06:c8:ce:dc:
88:09:4f:f7:83:5d:e4:8d:e3:9f:a8:a1:75:68:24:
e5:48:85:3e:2c:aa:c9:91:40:dd:5e:72:58:29:72:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:67:BB:B6:B7:C9:9A:0C:43:AB:3F:41:83:42:1A:70:01:49:71
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hZFnu7a3yZoMQ6s_QYNCGnABSXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:48:6d:10:f9:27:b0:bd:ce:52:d1:47:ed:81:f8:50:fd:80:
66:92:aa:9f:62:73:63:ae:60:1c:27:78:ab:6f:59:ad:42:f6:
fb:84:fc:e3:66:f2:5f:44:6a:15:72:02:fa:db:9a:6f:80:15:
19:75:62:7e:32:be:91:b2:1d:8a:a2:fa:8a:dc:e5:b1:0b:f2:
fe:75:1b:86:51:fc:46:a8:e0:9f:5e:8e:bd:c2:9f:2d:fa:40:
c4:2c:a6:4a:75:29:d3:b9:6d:e8:a0:bb:3a:ec:31:a0:33:80:
5e:d3:50:cf:c8:fe:ae:cb:f9:d1:72:71:d0:13:ee:91:b6:a5:
88:21:52:5c:d0:67:db:d0:3a:08:a7:43:17:89:1f:c3:b0:9b:
58:d7:1f:86:e4:12:3e:44:90:57:72:04:ae:ce:b1:a0:21:59:
e6:3b:a4:da:6b:c6:74:89:9a:3b:80:37:86:9b:c6:de:cd:37:
c0:7d:a7:64:e2:14:4c:fc:c5:1b:b1:42:c5:eb:60:cc:2a:b9:
f3:ff:d2:61:ec:e9:36:f3:60:b9:08:df:e2:42:c6:4e:30:0b:
d3:71:33:2f:84:9e:2b:98:d0:dd:71:e4:20:45:69:88:8a:c8:
6d:90:31:eb:cc:04:67:16:9a:dc:24:5c:dd:4a:f5:25:f3:91:
62:e6:ff:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2xVYsW+mUiP+H6Wii3QtYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNDIxMTgzNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTkxNjdiYmI2YjdjOTlhMGM0M2FiM2Y0MTgzNDIxYTcwMDE0OTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnGktbGdpNshNoGtMYg/GrXN08fm
8XGcSdY1nvahoKvQ+GCXM3XXC7UtiNNBlXxUJG935uea4w++hIZAMQvFXQ3E1Ed9
1QxCOIAhcLzIgJYznLSjw7kwtE3oFRcAH4hRFNFqx2C0Vmhm+6Wne0j1NvSl/Cck
SKnh6HAlgFRlBylV3hP0C7eHRGFrXMEU61pUnLiTZjCadYBvhnxbBI8ljYpOqblU
2dtCKXEHdkPprfgsbY6Br3W7Erc94smDPSddGJ3No1EIFjYZixOPKhRC84ILuWjK
DL4fc2EInwbIztyICU/3g13kjeOfqKF1aCTlSIU+LKrJkUDdXnJYKXKSkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIWRZ7u2t8maDEOrP0GDQhpwAUlxMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaFpGbnU3YTN5Wm9NUTZzX1FZTkNHbkFCU1hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhhMA0G
CSqGSIb3DQEBCwUAA4IBAQC0SG0Q+Sewvc5S0UftgfhQ/YBmkqqfYnNjrmAcJ3ir
b1mtQvb7hPzjZvJfRGoVcgL625pvgBUZdWJ+Mr6Rsh2KovqK3OWxC/L+dRuGUfxG
qOCfXo69wp8t+kDELKZKdSnTuW3ooLs67DGgM4Be01DPyP6uy/nRcnHQE+6RtqWI
IVJc0Gfb0DoIp0MXiR/DsJtY1x+G5BI+RJBXcgSuzrGgIVnmO6Taa8Z0iZo7gDeG
m8bezTfAfadk4hRM/MUbsULF62DMKrnz/9Jh7Ok282C5CN/iQsZOMAvTcTMvhJ4r
mNDdceQgRWmIishtkDHrzARnFprcJFzdSvUl85Fi5v80
-----END CERTIFICATE-----
Generated at Thu May 7 05:37:57 2026 by rpki-client