Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zFSHwDoz6s-ZkanH5xQDkIu_xw4.roa
File: zFSHwDoz6s-ZkanH5xQDkIu_xw4.roa (raw, json)
Hash identifier: Cg2L17Virvk+4z439yw8pR+n6MXGZWQ0NJzL1i0alXc=
Subject key identifier: CC:54:87:C0:3A:33:EA:CF:99:91:A9:C7:E7:14:03:90:8B:BF:C7:0E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C80EB93ECB3971342FA81576C61577705
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zFSHwDoz6s-ZkanH5xQDkIu_xw4.roa
Signing time: Sat 21 Feb 2026 15:57:28 +0000
ROA not before: Sat 21 Feb 2026 15:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135120
IP address blocks: 31.57.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 14:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:80:eb:93:ec:b3:97:13:42:fa:81:57:6c:61:57:77:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 21 15:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc5487c03a33eacf9991a9c7e71403908bbfc70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:74:c8:cf:44:4e:4e:a4:95:8b:87:b4:71:e4:
e4:2c:1d:a6:32:27:6f:41:08:a0:45:ff:cf:91:00:
d8:94:a6:d2:02:98:77:cf:5a:22:35:1f:33:8c:37:
b1:6f:11:6a:d9:b3:45:77:fc:72:95:49:eb:ce:eb:
72:3c:a8:00:ed:b7:2c:08:34:af:c3:3f:ab:a6:36:
5c:97:fc:17:c3:ca:c7:4f:c2:db:3d:ea:37:60:2c:
1e:4a:a8:da:c7:40:81:76:86:2d:f5:52:f3:b9:e6:
2f:21:26:8e:52:72:f9:43:1e:0e:28:cb:d6:a4:f1:
89:cc:f0:fa:93:fb:46:11:65:50:3a:f1:9d:62:da:
97:3e:ce:51:e0:87:2d:31:1f:6c:32:93:4f:9e:73:
93:04:45:ce:d0:26:ef:79:66:b5:f6:5d:d6:46:e6:
07:fd:9f:95:ad:83:0a:57:78:cc:8c:d8:33:38:82:
84:73:32:75:e6:bd:3f:d2:f6:24:35:74:ca:77:ae:
bf:13:f7:1a:5f:dd:21:2f:aa:f2:e8:72:22:70:2f:
0c:e7:1f:7e:c4:5d:43:a0:b3:d3:69:04:7e:bb:c9:
37:44:d0:b2:99:f6:93:de:ef:c9:f3:af:2f:65:5f:
4b:77:61:2e:93:52:55:1d:28:70:d8:39:be:39:ff:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:54:87:C0:3A:33:EA:CF:99:91:A9:C7:E7:14:03:90:8B:BF:C7:0E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zFSHwDoz6s-ZkanH5xQDkIu_xw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.50.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3b:c5:76:b7:aa:ae:d4:c2:3d:85:da:78:1d:56:96:13:9f:
3b:29:05:e5:b5:6b:b4:38:de:45:63:ba:c4:53:b0:67:4a:2c:
06:53:84:5d:2d:0e:be:55:af:3e:ed:34:d9:bf:df:fd:8a:95:
8f:ca:43:f2:10:4b:7d:c2:4b:27:0b:21:db:a8:f4:92:b8:93:
b3:8d:2e:e5:4e:91:9f:36:f2:fd:7d:a8:3c:4b:12:b9:5a:9d:
41:58:c1:46:21:3c:ea:d5:41:2b:85:66:b2:b0:35:12:ca:e2:
27:06:2e:55:bb:ba:3f:83:1b:f9:2c:29:a6:e0:1f:36:60:e6:
1e:b6:97:56:d5:0c:7b:fa:02:77:c6:27:26:b1:f9:c6:91:36:
14:38:43:12:10:ca:0f:c7:59:52:8d:f1:38:69:72:79:7a:d7:
44:b5:26:a9:d6:39:b7:9a:35:fd:d7:4c:8b:9f:62:c6:76:24:
91:2c:ca:c2:f5:bb:53:f6:4c:dd:6d:ad:28:68:1f:2b:e1:b3:
b7:ac:ea:e9:8d:30:72:90:86:3e:55:fd:65:da:c3:4f:02:55:
aa:1f:ea:f6:9a:5f:38:82:bd:4f:07:42:04:65:c4:0b:1f:9e:
78:c7:f4:d3:bc:81:ca:c0:cf:b3:07:4d:ba:7c:ca:f0:68:c7:
10:b4:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 19:22:01 2026 by rpki-client