Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lbFSvZ418BUqH-BfBMWh4mhNHyE.roa
File: lbFSvZ418BUqH-BfBMWh4mhNHyE.roa (raw, json)
Hash identifier: i3XzHUIqm+v1PvtkQNYLhVnl74bkw+Osf15fQAn9gKE=
Subject key identifier: 95:B1:52:BD:9E:35:F0:15:2A:1F:E0:5F:04:C5:A1:E2:68:4D:1F:21
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F7538B60687F0580D7A35C17946855783
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lbFSvZ418BUqH-BfBMWh4mhNHyE.roa
Signing time: Sat 18 Jul 2026 12:34:38 +0000
ROA not before: Sat 18 Jul 2026 12:34:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219357
IP address blocks: 31.59.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:38:b6:06:87:f0:58:0d:7a:35:c1:79:46:85:57:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 18 12:34:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95b152bd9e35f0152a1fe05f04c5a1e2684d1f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:a0:2f:79:24:0f:fe:06:28:80:9f:c0:ba:
35:80:d1:0f:0d:b5:d6:48:ee:d0:a6:e2:86:41:27:
90:55:e1:e0:47:2d:8c:52:2b:02:55:72:12:86:7e:
75:59:d7:98:db:ee:47:9c:a2:a4:0e:ad:52:28:af:
c6:57:e7:92:f5:40:73:08:51:87:d4:a1:46:ce:9e:
c1:0c:c9:32:48:6e:f5:4c:d7:0f:4a:05:36:d7:99:
6a:18:cf:f3:e5:b0:fa:8e:12:ac:0f:05:37:c0:46:
b2:93:db:af:3d:8e:30:27:fe:eb:a7:c2:85:59:37:
d6:8d:1e:5b:d3:50:a3:00:c0:b2:b6:2f:13:0d:da:
04:11:bf:d4:d6:da:1e:d6:1d:53:af:75:e5:22:ad:
59:c5:01:e9:c2:f8:c0:65:5c:d8:8b:07:36:3e:61:
0a:70:a6:3b:6a:41:b5:0d:58:fb:56:b7:27:46:64:
d2:a6:35:c6:b8:1b:63:4c:da:23:89:71:a7:b9:9a:
03:82:89:15:50:e2:3e:58:b0:2f:cf:85:5e:6d:6b:
55:e9:66:71:e8:f4:0a:ba:63:10:1b:68:ea:b0:cb:
ae:c5:15:85:0d:17:bb:7f:c2:7d:02:ab:48:90:2f:
d9:cb:4c:79:67:57:9a:4f:82:cb:a9:7e:31:fe:53:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:52:BD:9E:35:F0:15:2A:1F:E0:5F:04:C5:A1:E2:68:4D:1F:21
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lbFSvZ418BUqH-BfBMWh4mhNHyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.140.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ce:2d:13:44:2d:5b:d9:37:f8:a8:ee:ce:29:a7:bf:ef:0e:
80:48:67:b4:08:b0:6e:7a:6a:91:d4:4d:22:7c:8f:57:03:c0:
cc:26:e0:a5:88:83:e1:90:66:95:12:54:61:6c:ac:61:33:e7:
f7:b8:9a:f0:d8:b6:89:9d:71:dc:05:10:7c:96:29:f8:b7:d4:
6c:03:1f:89:13:18:60:0e:cd:b5:39:af:4a:e8:ad:56:fb:1f:
ee:17:fc:ce:f2:4e:3a:f3:9f:ad:e9:66:57:0a:cd:e8:e1:84:
72:c0:36:22:10:e3:37:a1:7b:9f:1f:04:4b:7c:cb:df:ea:a1:
0f:17:96:10:79:a1:9c:bd:91:0e:19:94:06:1a:06:0d:33:78:
69:cf:d9:68:ae:53:18:54:4f:27:38:93:97:1b:1a:e5:29:b2:
fe:6f:db:70:bf:62:43:61:2c:22:0b:6c:ed:d3:4e:98:00:3f:
56:79:8b:42:43:50:34:d4:b8:d3:a1:8a:af:52:41:6d:54:9f:
fc:ff:e6:17:58:54:c6:32:a3:b9:af:3f:c9:00:64:69:49:ec:
fb:fc:48:0f:45:d6:3a:90:bc:e6:9f:14:0b:39:f3:6a:5a:99:
98:4b:4a:29:25:80:1d:3b:e7:63:65:8b:8e:96:af:80:8d:5d:
17:15:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:33:53 2026 by rpki-client