Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yajImsMq4KFNl9yHouLCZPPJd2g.roa
File: yajImsMq4KFNl9yHouLCZPPJd2g.roa (raw, json)
Hash identifier: LdsXMqSO9tn/sWuCN/Gg9ahSh8YPPlZx4T/hyf/CdPM=
Subject key identifier: C9:A8:C8:9A:C3:2A:E0:A1:4D:97:DC:87:A2:E2:C2:64:F3:C9:77:68
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1346665389439E4D43E01D32C92C40B03
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yajImsMq4KFNl9yHouLCZPPJd2g.roa
Signing time: Tue 13 Oct 2026 08:34:47 +0000
ROA not before: Tue 13 Oct 2026 08:34:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218757
IP address blocks: 31.59.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:66:65:38:94:39:e4:d4:3e:01:d3:2c:92:c4:0b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 13 08:34:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9a8c89ac32ae0a14d97dc87a2e2c264f3c97768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:ba:2d:49:62:fb:64:da:b9:3d:1c:17:d9:
75:5f:38:9f:f2:9c:8a:c7:5a:34:5d:5a:b7:d2:a2:
b0:e4:c2:e1:a2:58:c4:cd:e8:0a:b7:27:f6:87:9b:
e6:79:d5:a0:d0:56:18:75:fc:06:75:00:23:70:f5:
47:ce:c8:c0:4a:31:ad:97:94:99:e5:eb:e4:64:1c:
21:af:c9:5c:92:e4:fc:e7:87:ab:e8:1d:22:32:d4:
ed:a8:a3:05:89:fa:e3:97:0e:7c:f2:b6:44:2d:03:
b1:57:04:81:22:1b:e1:68:87:ad:f1:61:62:38:3c:
33:06:24:2d:81:03:6b:ae:cc:ef:90:77:2f:77:63:
eb:42:66:e2:e4:c0:ca:e8:90:0a:99:1e:32:a5:32:
d4:a1:16:ba:58:1d:68:fa:14:a5:d1:3c:79:c4:6d:
75:e6:e0:1f:d5:42:38:d8:53:bc:d8:c0:30:6a:c7:
91:35:49:bb:ed:8a:0e:55:37:4b:52:b8:e2:be:2a:
64:5a:0a:bc:48:44:fa:21:b4:34:7d:3f:5f:cf:04:
11:6c:1e:e0:41:04:12:4c:97:61:f4:16:ce:9a:f2:
dd:22:7e:47:a1:26:17:4f:9d:83:0e:b0:9e:d8:aa:
69:1f:39:7b:f1:e9:88:b8:24:6f:08:4b:95:7a:79:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A8:C8:9A:C3:2A:E0:A1:4D:97:DC:87:A2:E2:C2:64:F3:C9:77:68
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yajImsMq4KFNl9yHouLCZPPJd2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.223.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c6:8d:d9:e3:4b:13:64:2b:a4:42:b2:9d:ba:a3:a0:79:39:
f4:f7:b8:c2:98:61:82:6e:57:40:80:a4:f0:60:5b:58:fa:79:
25:d1:f1:54:5d:2e:21:84:bf:ee:7d:f9:9b:a2:47:e6:51:5d:
b0:8f:d5:ed:be:f7:50:26:0a:8a:a3:40:2c:11:49:68:34:26:
1c:41:4a:b6:cd:5f:46:0f:d3:b7:7b:91:72:46:74:3d:98:76:
bf:f5:07:61:60:1f:e9:b7:2b:18:95:4b:a5:08:c2:9f:07:42:
a3:fe:76:08:56:af:04:79:21:10:ac:b5:49:d5:49:47:50:15:
f4:19:c5:18:1c:9a:6d:56:d2:6e:dc:ff:8d:57:4e:92:81:86:
5a:d1:f5:b7:70:3a:9c:d8:8a:b1:31:19:77:13:4c:41:80:e3:
86:9e:b5:dc:39:86:17:97:59:76:c8:05:9f:79:4a:0b:9a:2d:
71:56:da:8e:ce:e6:08:d6:b9:3f:ef:af:45:69:7a:25:d4:4b:
95:48:bd:df:79:85:84:e0:07:ab:48:81:a9:f1:d7:82:ca:20:
41:35:e5:23:8d:cf:35:e5:c2:d0:b4:bb:ad:46:50:53:59:1b:
a8:5f:fa:f0:ab:c3:ff:77:d2:3e:a2:d4:36:2b:72:25:9f:2f:
b9:8b:0c:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE0ZmU4lDnk1D4B0yySxAsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDEzMDgzNDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWE4Yzg5YWMzMmFlMGExNGQ5N2RjODdhMmUyYzI2NGYzYzk3NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+66LUli+2TauT0cF9l1Xzif8pyK
x1o0XVq30qKw5MLholjEzegKtyf2h5vmedWg0FYYdfwGdQAjcPVHzsjASjGtl5SZ
5evkZBwhr8lckuT854er6B0iMtTtqKMFifrjlw588rZELQOxVwSBIhvhaIet8WFi
ODwzBiQtgQNrrszvkHcvd2PrQmbi5MDK6JAKmR4ypTLUoRa6WB1o+hSl0Tx5xG11
5uAf1UI42FO82MAwaseRNUm77YoOVTdLUrjivipkWgq8SET6IbQ0fT9fzwQRbB7g
QQQSTJdh9BbOmvLdIn5HoSYXT52DDrCe2KppHzl78emIuCRvCEuVenkmNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMmoyJrDKuChTZfch6LiwmTzyXdoMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveWFqSW1zTXE0S0ZObDl5SG91TENaUFBKZDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzvfMA0G
CSqGSIb3DQEBCwUAA4IBAQCExo3Z40sTZCukQrKduqOgeTn097jCmGGCbldAgKTw
YFtY+nkl0fFUXS4hhL/uffmbokfmUV2wj9XtvvdQJgqKo0AsEUloNCYcQUq2zV9G
D9O3e5FyRnQ9mHa/9QdhYB/ptysYlUulCMKfB0Kj/nYIVq8EeSEQrLVJ1UlHUBX0
GcUYHJptVtJu3P+NV06SgYZa0fW3cDqc2IqxMRl3E0xBgOOGnrXcOYYXl1l2yAWf
eUoLmi1xVtqOzuYI1rk/769FaXol1EuVSL3feYWE4AerSIGp8deCyiBBNeUjjc81
5cLQtLutRlBTWRuoX/rwq8P/d9I+otQ2K3Ilny+5iwyB
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:18 2026 by rpki-client