Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lcTIdjUBmaGY5lgWsPO2_doN6A4.roa
File: lcTIdjUBmaGY5lgWsPO2_doN6A4.roa (raw, json)
Hash identifier: lLidubQfW7XoDOHz2d3/espS+HylXh/gQa2gNRl4YoA=
Subject key identifier: 95:C4:C8:76:35:01:99:A1:98:E6:58:16:B0:F3:B6:FD:DA:0D:E8:0E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C2CBF1C2B64EDA7ECD75E9C775EC82D43
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lcTIdjUBmaGY5lgWsPO2_doN6A4.roa
Signing time: Thu 05 Feb 2026 07:40:47 +0000
ROA not before: Thu 05 Feb 2026 07:40:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23470
IP address blocks: 31.58.49.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 11:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2c:bf:1c:2b:64:ed:a7:ec:d7:5e:9c:77:5e:c8:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 5 07:40:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95c4c876350199a198e65816b0f3b6fdda0de80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:09:36:15:f5:5b:1b:ee:66:ad:2b:53:07:
18:32:8f:b1:8b:04:52:5b:3d:7b:eb:2b:a2:31:0a:
f1:4c:c5:93:43:d9:ab:e7:25:2b:3c:36:b8:97:d3:
3a:68:a1:61:b6:ba:b7:d9:15:31:f0:b9:d8:bd:1a:
bb:6e:85:b5:f7:ca:be:48:45:16:0c:d5:9f:2a:a4:
5a:c2:4d:5e:cc:d7:20:bf:98:c2:e3:ce:0a:a8:98:
63:01:da:c5:a7:9b:bf:6f:d1:46:73:5f:8b:8e:96:
08:95:10:51:a5:27:4d:76:12:0e:2a:0e:22:51:c6:
25:07:b2:04:39:d6:64:ed:67:75:23:5b:8c:04:2d:
99:77:9b:86:a3:56:50:28:c9:4a:28:97:b3:37:71:
3a:0b:c1:d6:e7:5b:96:e2:4e:4a:03:c2:49:59:89:
b3:40:02:c7:8b:99:ab:70:bb:2f:8b:6a:50:2a:cb:
42:e5:8f:29:f5:6a:12:8f:4e:26:c1:17:a4:eb:be:
d8:ef:03:5f:73:27:cd:18:1c:ce:62:1c:cd:15:2a:
d3:85:a9:83:52:9d:2a:8d:61:1c:b5:84:7a:8c:a4:
28:90:5c:ee:b3:a3:0d:0b:b6:17:43:c3:c2:80:1e:
82:95:cd:59:23:a9:44:51:7a:f4:ea:a3:1f:43:cf:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:C8:76:35:01:99:A1:98:E6:58:16:B0:F3:B6:FD:DA:0D:E8:0E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lcTIdjUBmaGY5lgWsPO2_doN6A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.49.0/24
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:ab:9b:44:1a:9c:7a:bd:7e:c7:da:3c:7b:8b:70:70:97:ed:
ec:6d:a0:e8:1b:a6:76:14:51:1e:34:3b:17:75:89:18:30:2a:
8d:16:e3:09:49:c4:5e:05:15:d9:5b:bb:2c:6d:dd:3b:6c:81:
53:d1:e8:78:fe:f8:d7:ec:d3:bf:ea:98:2a:5d:3b:92:75:24:
a1:9d:64:49:20:d7:a5:72:e0:5f:fc:50:70:27:29:f1:2c:ab:
56:ee:09:6f:90:8a:53:1a:72:af:f3:ab:c2:fe:34:64:66:93:
39:d0:ac:60:53:85:a0:29:89:a0:d7:a7:c3:95:9d:92:e6:d8:
9d:8e:ee:99:43:82:6b:39:7d:d7:80:49:42:df:18:26:d7:2d:
9b:3f:65:5a:6e:2e:c8:02:08:6c:95:2e:09:36:22:c8:e6:f8:
0a:d7:be:18:37:20:fc:cc:31:96:27:bb:f3:f4:79:25:0a:57:
48:9d:df:c4:ed:94:b1:6f:64:3c:01:9d:84:58:d2:61:ce:f7:
d8:b3:45:39:50:28:aa:07:5d:66:07:2c:d0:ec:df:43:0d:e6:
e2:8c:f9:81:a0:ff:6e:19:e3:4d:85:5f:98:b4:49:61:a7:ab:
e3:00:39:4e:23:31:78:23:8a:40:70:b4:01:cf:f7:d3:ac:b3:
8e:3b:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 21:42:37 2026 by rpki-client