Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iFGIG2WnMGDb5ytyp6neWeJGdXw.roa
File: iFGIG2WnMGDb5ytyp6neWeJGdXw.roa (raw, json)
Hash identifier: diNd+GnMzgazURAZSubJPfD6tAppWOCyeq1Ql0NYf3M=
Subject key identifier: 88:51:88:1B:65:A7:30:60:DB:E7:2B:72:A7:A9:DE:59:E2:46:75:7C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CD3B2201E349B4A854056DDBBF62048A9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iFGIG2WnMGDb5ytyp6neWeJGdXw.roa
Signing time: Mon 09 Mar 2026 17:43:11 +0000
ROA not before: Mon 09 Mar 2026 17:43:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 31.58.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 10:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:b2:20:1e:34:9b:4a:85:40:56:dd:bb:f6:20:48:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 9 17:43:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8851881b65a73060dbe72b72a7a9de59e246757c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:b5:73:7f:02:16:ea:cd:af:22:97:d8:b8:
ab:c4:e3:94:c5:cb:a2:1d:1e:d8:6e:dd:e1:a9:07:
ef:5d:7d:a5:83:6f:2a:25:36:fd:b2:11:33:5a:83:
45:22:6e:5c:54:25:4e:79:dc:3d:31:15:da:05:d5:
31:1b:1c:08:86:1a:f7:f6:ef:57:9c:84:9e:51:fb:
45:cc:19:5e:19:1c:3a:d4:1c:85:d4:87:2c:14:53:
ff:4f:7e:19:bb:84:37:09:29:1f:11:df:05:49:2a:
a8:80:ea:a0:93:40:cf:30:b6:f4:6b:7f:79:08:cc:
0a:6a:81:7f:f0:99:4f:9b:e7:6a:a5:70:df:2d:7b:
3b:e7:20:d6:d9:d2:46:d0:2c:4e:79:b9:81:59:3c:
3a:4a:26:26:43:88:8c:82:bd:72:5e:5c:6e:7f:3a:
5d:26:9d:6e:a0:fd:d3:af:93:e6:7a:e6:74:2a:ce:
51:d0:9c:99:16:59:0e:c4:30:c7:5f:c4:b9:5b:84:
30:30:17:bb:93:19:ab:66:6a:81:84:84:fd:a9:83:
99:bb:45:1d:55:eb:a3:33:2f:8b:ac:56:6a:40:54:
89:1f:7c:1a:11:01:8f:fa:12:de:0e:5c:1c:4a:53:
ba:29:6a:76:22:98:96:9b:41:e5:ee:2f:2e:e9:a1:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:88:1B:65:A7:30:60:DB:E7:2B:72:A7:A9:DE:59:E2:46:75:7C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iFGIG2WnMGDb5ytyp6neWeJGdXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.180.0/24
Signature Algorithm: sha256WithRSAEncryption
87:b1:7a:86:ba:b7:38:e0:95:a0:64:5b:19:b8:3d:81:9b:90:
5c:88:79:7a:81:13:39:4f:7d:af:7c:1e:15:94:9e:eb:9f:f8:
51:63:30:57:3d:20:44:c9:6d:07:94:a1:dc:90:00:d1:5e:22:
18:e2:6e:a7:9f:72:e5:c0:7e:11:f4:31:73:8f:bd:f7:5d:3b:
77:5e:52:dc:0d:28:22:ef:3a:5d:2e:dc:6c:0f:ca:4d:8a:15:
d4:19:98:97:e6:52:ad:9b:72:a2:ec:31:40:69:cc:9a:bb:a1:
cb:eb:01:2f:db:c0:b2:89:65:b7:20:7f:6b:47:c0:3d:db:eb:
ed:ab:d2:fa:c3:1b:70:a3:fb:6f:b8:84:2b:1b:0d:30:fd:90:
1d:6a:dd:92:d4:ce:ee:56:f2:d1:c8:29:12:2d:e7:56:42:7e:
73:cb:96:98:26:5c:4b:78:63:27:6b:60:b5:35:31:3b:30:75:
fe:4d:78:ee:4c:a0:d1:28:2d:e7:67:9d:d2:6e:3e:a9:5c:3c:
c2:4d:b6:1d:30:bc:f6:03:80:e9:a4:61:b2:98:c2:fc:5a:c7:
76:da:11:01:5f:3a:b5:c9:a0:65:c4:24:7a:ae:74:cc:c8:a1:
6a:18:3e:37:b8:8c:7b:33:d3:02:bb:72:f5:5a:1d:0b:c9:21:
f3:81:b0:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzTsiAeNJtKhUBW3bv2IEipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzA5MTc0MzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODUxODgxYjY1YTczMDYwZGJlNzJiNzJhN2E5ZGU1OWUyNDY3NTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZG1c38CFurNryKX2LirxOOUxcui
HR7Ybt3hqQfvXX2lg28qJTb9shEzWoNFIm5cVCVOedw9MRXaBdUxGxwIhhr39u9X
nISeUftFzBleGRw61ByF1IcsFFP/T34Zu4Q3CSkfEd8FSSqogOqgk0DPMLb0a395
CMwKaoF/8JlPm+dqpXDfLXs75yDW2dJG0CxOebmBWTw6SiYmQ4iMgr1yXlxufzpd
Jp1uoP3Tr5PmeuZ0Ks5R0JyZFlkOxDDHX8S5W4QwMBe7kxmrZmqBhIT9qYOZu0Ud
VeujMy+LrFZqQFSJH3waEQGP+hLeDlwcSlO6KWp2IpiWm0Hl7i8u6aEAsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhRiBtlpzBg2+crcqep3lniRnV8MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaUZHSUcyV25NR0RiNXl0eXA2bmVXZUpHZFh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzq0MA0G
CSqGSIb3DQEBCwUAA4IBAQCHsXqGurc44JWgZFsZuD2Bm5BciHl6gRM5T32vfB4V
lJ7rn/hRYzBXPSBEyW0HlKHckADRXiIY4m6nn3LlwH4R9DFzj733XTt3XlLcDSgi
7zpdLtxsD8pNihXUGZiX5lKtm3Ki7DFAacyau6HL6wEv28CyiWW3IH9rR8A92+vt
q9L6wxtwo/tvuIQrGw0w/ZAdat2S1M7uVvLRyCkSLedWQn5zy5aYJlxLeGMna2C1
NTE7MHX+TXjuTKDRKC3nZ53Sbj6pXDzCTbYdMLz2A4DppGGymML8Wsd22hEBXzq1
yaBlxCR6rnTMyKFqGD43uIx7M9MCu3L1Wh0LySHzgbDn
-----END CERTIFICATE-----
Generated at Thu Mar 12 17:54:31 2026 by rpki-client