Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-EN_GQ2vADWTEFZJXQgyYAf_4fg.roa
File: 1-EN_GQ2vADWTEFZJXQgyYAf_4fg.roa (raw, json)
Hash identifier: JZKSC9hw1Xwikx+Prg3FfIyQ/B5M+luWKxsYtFZcS6Y=
Subject key identifier: F8:43:7F:19:0D:AF:00:35:93:10:56:49:5D:08:32:60:07:FF:E1:F8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C8B95AD69B33AEB19AB9139A848E547AB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-EN_GQ2vADWTEFZJXQgyYAf_4fg.roa
Signing time: Mon 23 Feb 2026 17:39:28 +0000
ROA not before: Mon 23 Feb 2026 17:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 31.56.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:95:ad:69:b3:3a:eb:19:ab:91:39:a8:48:e5:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 23 17:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8437f190daf0035931056495d08326007ffe1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:76:b4:20:50:9f:d8:3e:68:27:bb:a4:02:
5b:65:86:2d:99:b9:9a:c2:60:9b:9b:3b:b8:4f:c0:
2e:47:53:a7:7f:7c:f4:0f:eb:db:f5:8b:28:9f:99:
4f:51:fc:e6:f1:f5:af:ba:21:02:51:a2:f0:96:64:
8d:32:33:72:d8:3b:c6:94:6e:83:40:08:d9:c4:4e:
9d:2a:51:1a:19:f4:69:0d:59:58:39:80:71:65:df:
a3:24:e7:2a:b3:47:92:7e:db:09:ec:c9:1d:80:ef:
7d:fe:0b:e8:9b:99:c1:7b:40:58:f2:77:c6:17:6b:
78:0a:fb:6a:f3:81:aa:2a:b5:16:32:c5:fe:de:e3:
83:67:27:24:36:68:81:12:b0:c4:86:9b:e6:c0:72:
1a:1d:d3:ae:73:b7:63:11:df:e8:4f:02:ee:44:57:
d4:73:a6:d2:fb:0f:35:ec:17:9e:f0:1e:76:b1:eb:
e8:b5:65:8a:15:a8:90:93:af:38:aa:e5:54:a8:9a:
81:bc:43:18:bb:f4:fb:21:cf:60:fa:c3:d3:d2:9a:
2b:83:40:7a:9b:7b:c9:07:62:7a:ee:e7:6f:a0:c6:
11:46:2a:c9:5e:fd:d9:ec:f0:5a:c2:75:07:63:fb:
c0:51:c0:56:ff:12:2b:63:47:49:58:2b:8d:f2:7e:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:43:7F:19:0D:AF:00:35:93:10:56:49:5D:08:32:60:07:FF:E1:F8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-EN_GQ2vADWTEFZJXQgyYAf_4fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ce:db:14:6b:36:ac:50:ab:3c:4e:3d:bb:83:c2:11:a2:12:
04:80:56:8c:f3:7d:f9:ac:8e:7b:15:d7:7f:86:1f:c5:15:a8:
a4:a0:09:4b:f9:ce:1a:d5:59:13:7c:1d:c3:2c:54:82:0c:67:
ef:0e:81:8f:8c:d6:04:4b:71:c1:ea:c1:bb:ed:ae:7b:61:b4:
6e:fe:e4:e3:0d:b0:92:0b:36:22:e2:73:44:68:1d:e6:84:5c:
f6:49:a6:82:f7:5f:9d:99:34:a0:8c:3a:4d:91:ac:61:8c:49:
98:fa:21:99:3f:11:ed:f5:e4:a5:ec:11:65:29:f0:9d:3f:00:
95:b3:18:fe:a0:35:c2:fe:60:23:e5:06:b1:29:26:ed:53:44:
ca:fe:d2:1b:8f:1f:66:c8:9b:f7:0a:d2:29:53:35:66:63:2d:
b6:29:49:9a:eb:2e:3a:a1:b5:ea:a2:a4:6c:9c:4a:8e:18:2b:
8a:cb:95:27:f5:8e:7e:d3:f2:42:df:d1:af:de:2e:c9:01:42:
49:43:91:e2:06:98:17:04:7b:6e:e9:f5:29:2a:25:2f:20:79:
a7:83:07:80:62:52:04:b0:77:6b:0d:32:57:11:29:9d:0b:eb:
01:fd:e7:49:f0:2f:3c:46:0c:4c:09:9f:9b:cc:ae:61:cf:79:
96:89:5f:45
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZyLla1pszrrGauROahI5UerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjIzMTczOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODQzN2YxOTBkYWYwMDM1OTMxMDU2NDk1ZDA4MzI2MDA3ZmZlMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4p2tCBQn9g+aCe7pAJbZYYtmbma
wmCbmzu4T8AuR1Onf3z0D+vb9Yson5lPUfzm8fWvuiECUaLwlmSNMjNy2DvGlG6D
QAjZxE6dKlEaGfRpDVlYOYBxZd+jJOcqs0eSftsJ7MkdgO99/gvom5nBe0BY8nfG
F2t4Cvtq84GqKrUWMsX+3uODZyckNmiBErDEhpvmwHIaHdOuc7djEd/oTwLuRFfU
c6bS+w817Bee8B52sevotWWKFaiQk684quVUqJqBvEMYu/T7Ic9g+sPT0porg0B6
m3vJB2J67udvoMYRRirJXv3Z7PBawnUHY/vAUcBW/xIrY0dJWCuN8n7HXwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhDfxkNrwA1kxBWSV0IMmAH/+H4MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMS1FTl9HUTJ2QURXVEVGWkpYUWd5WUFmXzRmZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTIvNTExZjk1LWU0YmYtNDNmMS1hZjJmLWI4MTFjZmNiOWZk
NS8xL1R4c0pYNnRuWXp3Qko5WWY5b1Y0Wk9wckpjVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB84OzAN
BgkqhkiG9w0BAQsFAAOCAQEAdc7bFGs2rFCrPE49u4PCEaISBIBWjPN9+ayOexXX
f4YfxRWopKAJS/nOGtVZE3wdwyxUggxn7w6Bj4zWBEtxwerBu+2ue2G0bv7k4w2w
kgs2IuJzRGgd5oRc9kmmgvdfnZk0oIw6TZGsYYxJmPohmT8R7fXkpewRZSnwnT8A
lbMY/qA1wv5gI+UGsSkm7VNEyv7SG48fZsib9wrSKVM1ZmMttilJmusuOqG16qKk
bJxKjhgrisuVJ/WOftPyQt/Rr94uyQFCSUOR4gaYFwR7bun1KSolLyB5p4MHgGJS
BLB3aw0yVxEpnQvrAf3nSfAvPEYMTAmfm8yuYc95lolfRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:50 2026 by rpki-client