Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q7QUKipv8-mIEkh2bWpSTbwbnx4.roa
File: q7QUKipv8-mIEkh2bWpSTbwbnx4.roa (raw, json)
Hash identifier: YRWY9dJXilCwR55cGtPJeF00XxAQ84M3b6RGHC37JZ0=
Subject key identifier: AB:B4:14:2A:2A:6F:F3:E9:88:12:48:76:6D:6A:52:4D:BC:1B:9F:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DBE084C167FCED130E4F96837764F37AE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q7QUKipv8-mIEkh2bWpSTbwbnx4.roa
Signing time: Fri 24 Apr 2026 05:48:27 +0000
ROA not before: Fri 24 Apr 2026 05:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 31.57.37.0/24 maxlen: 24
31.57.185.0/24 maxlen: 24
217.60.241.0/24 maxlen: 24
217.60.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:be:08:4c:16:7f:ce:d1:30:e4:f9:68:37:76:4f:37:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 24 05:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abb4142a2a6ff3e9881248766d6a524dbc1b9f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:48:95:a9:0b:1e:62:3e:d5:0a:0b:46:d0:
17:2d:67:a5:8d:51:d2:b3:a9:ee:7c:70:88:c6:d3:
9c:92:7f:5e:86:72:05:e1:d5:27:be:ec:22:ee:66:
64:df:cc:66:c5:8d:d2:e8:bf:c3:65:25:41:2b:5f:
25:a1:b4:e5:67:6b:bd:2c:f8:6b:29:37:d5:0c:7b:
7c:ff:2e:5b:a6:31:c8:7f:5f:34:22:09:4f:3b:66:
1c:8c:c3:a6:5d:99:df:ea:ed:11:ef:80:80:9c:70:
30:5b:61:04:6e:d4:cc:c8:81:d3:e5:6d:9b:43:46:
e0:ee:eb:ac:be:af:c2:16:fe:31:75:b8:17:70:1d:
16:47:ee:08:68:31:ca:c6:72:f3:9f:a7:12:a6:fb:
b8:f1:6a:53:56:03:60:58:35:57:b1:48:80:f2:3b:
96:19:a3:00:dc:e7:8d:a3:14:ec:5d:d8:bb:58:50:
67:b7:11:e6:83:29:d8:20:2b:76:5d:b8:60:bc:05:
40:06:b6:b6:22:8b:a0:ec:d9:e5:a3:d0:86:20:44:
c9:ef:53:5e:42:92:bd:44:5a:47:91:78:18:2b:73:
2f:37:44:1c:08:d1:b6:b0:05:c1:df:ed:08:d3:82:
cf:41:b2:a5:8a:5c:58:9c:10:67:40:8f:36:6f:1a:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:14:2A:2A:6F:F3:E9:88:12:48:76:6D:6A:52:4D:BC:1B:9F:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/q7QUKipv8-mIEkh2bWpSTbwbnx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.37.0/24
31.57.185.0/24
217.60.241.0/24
217.60.250.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1c:fd:4b:da:e1:92:f7:39:89:35:e8:a1:13:66:de:56:e2:
66:b2:06:e9:4b:cb:19:ce:30:a3:22:23:e8:76:d7:d4:e5:79:
40:33:b6:69:4d:2e:b4:37:3d:e8:50:7e:23:2f:27:ea:30:b6:
50:4e:d0:ae:92:b6:58:e0:7a:54:c0:88:c7:49:94:db:65:1d:
3d:6f:6b:f1:62:00:6c:c4:43:c3:65:25:29:ec:60:30:a4:29:
58:df:40:81:83:e7:e7:a5:13:07:00:db:aa:5e:a0:d8:45:3e:
db:34:ff:3b:1c:0d:77:68:35:44:9a:39:19:11:fb:06:e7:56:
0e:a2:b2:74:9e:34:69:59:04:27:cc:cc:66:5a:db:4e:5e:11:
e1:0f:58:ba:ec:da:1f:71:a4:06:c3:74:89:0b:6d:bb:e6:56:
e4:58:b9:28:bf:1b:1b:c0:3e:e5:5c:d9:f7:8d:3c:3d:a6:5a:
e6:f0:40:0d:04:97:7b:91:04:25:b1:5c:12:d5:0a:91:08:25:
0d:43:f6:bd:44:3a:2b:f2:05:1e:11:af:d6:8a:44:43:60:31:
5a:20:d5:41:46:a9:12:d1:18:f2:6f:56:31:43:fa:37:f9:0c:
cb:6b:1a:95:df:26:6a:72:87:f4:b6:7c:29:45:3d:66:c7:4b:
cd:25:46:26
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ2+CEwWf87RMOT5aDd2TzeuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNDI0MDU0ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmI0MTQyYTJhNmZmM2U5ODgxMjQ4NzY2ZDZhNTI0ZGJjMWI5ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI5IlakLHmI+1QoLRtAXLWeljVHS
s6nufHCIxtOckn9ehnIF4dUnvuwi7mZk38xmxY3S6L/DZSVBK18lobTlZ2u9LPhr
KTfVDHt8/y5bpjHIf180IglPO2YcjMOmXZnf6u0R74CAnHAwW2EEbtTMyIHT5W2b
Q0bg7uusvq/CFv4xdbgXcB0WR+4IaDHKxnLzn6cSpvu48WpTVgNgWDVXsUiA8juW
GaMA3OeNoxTsXdi7WFBntxHmgynYICt2XbhgvAVABra2Ioug7Nnlo9CGIETJ71Ne
QpK9RFpHkXgYK3MvN0QcCNG2sAXB3+0I04LPQbKlilxYnBBnQI82bxolPQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKu0FCoqb/PpiBJIdm1qUk28G58eMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcTdRVUtpcHY4LW1JRWtoMmJXcFNUYndibng0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzklAwQA
Hzm5AwQA2TzxAwQA2Tz6MA0GCSqGSIb3DQEBCwUAA4IBAQAhHP1L2uGS9zmJNeih
E2beVuJmsgbpS8sZzjCjIiPodtfU5XlAM7ZpTS60Nz3oUH4jLyfqMLZQTtCukrZY
4HpUwIjHSZTbZR09b2vxYgBsxEPDZSUp7GAwpClY30CBg+fnpRMHANuqXqDYRT7b
NP87HA13aDVEmjkZEfsG51YOorJ0njRpWQQnzMxmWttOXhHhD1i67NofcaQGw3SJ
C2275lbkWLkovxsbwD7lXNn3jTw9plrm8EANBJd7kQQlsVwS1QqRCCUNQ/a9RDor
8gUeEa/WikRDYDFaINVBRqkS0Rjyb1YxQ/o3+QzLaxqV3yZqcof0tnwpRT1mx0vN
JUYm
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:57:27 2026 by rpki-client