Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4Zl7e2s6YLfotkVgCzaHIAnOvrA.roa
File: 4Zl7e2s6YLfotkVgCzaHIAnOvrA.roa (raw, json)
Hash identifier: OQBgItW3TjQofP2+mJ+nyMt3FNM3XFl8ip6OfJvflvw=
Subject key identifier: E1:99:7B:7B:6B:3A:60:B7:E8:B6:45:60:0B:36:87:20:09:CE:BE:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D3DD62BAE9A784A148FF83EDF32823B70
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4Zl7e2s6YLfotkVgCzaHIAnOvrA.roa
Signing time: Mon 30 Mar 2026 08:22:19 +0000
ROA not before: Mon 30 Mar 2026 08:22:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 31.57.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:d6:2b:ae:9a:78:4a:14:8f:f8:3e:df:32:82:3b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 30 08:22:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1997b7b6b3a60b7e8b645600b36872009cebeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:69:74:49:a2:c4:85:11:89:b1:1b:88:be:
d4:d6:06:70:2f:b2:5a:89:4d:b5:7b:59:38:e5:57:
c0:e2:82:12:f8:e2:44:f4:42:3e:29:d4:f7:fa:8c:
3f:3f:d4:90:b7:2f:37:7f:09:e9:89:45:19:aa:d3:
b5:0e:a9:b8:11:1a:2a:ce:e3:c5:7e:95:6d:5c:9e:
8d:6e:40:fa:59:9d:bd:f3:0c:d7:c8:60:31:a1:8d:
f7:7c:24:b0:4a:fb:04:34:2a:58:04:64:5c:e0:61:
5c:da:3b:a1:44:71:4c:a0:6d:3a:32:64:9c:18:46:
e9:34:7f:96:04:63:e2:bc:60:c1:c0:03:b0:e3:14:
2f:4c:1b:fd:81:12:bb:b6:7d:09:5d:50:da:bd:11:
ca:6c:42:f7:db:10:26:9e:88:37:f3:c2:4b:1c:7f:
aa:31:c0:bd:9b:61:8d:fc:65:a8:c4:d5:c3:7a:26:
b4:b3:2e:af:d0:70:24:d3:43:d0:82:3b:5f:69:b8:
eb:c9:df:3b:62:68:81:30:9d:58:79:c7:7f:ff:3f:
63:cd:56:94:4b:b1:ca:2a:bf:36:25:63:b6:48:9a:
18:12:fd:a6:59:57:a8:27:1a:a2:46:7e:0e:6d:de:
46:49:6d:58:5f:ac:bf:30:7d:6f:75:44:8b:ac:02:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:7B:7B:6B:3A:60:B7:E8:B6:45:60:0B:36:87:20:09:CE:BE:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4Zl7e2s6YLfotkVgCzaHIAnOvrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.140.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c2:c2:30:53:03:3e:73:05:7f:4d:87:6a:4e:f7:13:3a:6b:
06:fb:a9:d5:bd:de:93:c1:f8:5c:0d:4d:66:a0:88:36:f2:e4:
ba:51:bb:fd:1a:5b:6d:fc:a7:30:48:f9:6a:2a:c2:4e:e5:3b:
70:4d:82:bc:2e:84:d4:c2:4f:2f:cd:e2:5f:10:a4:7e:7a:23:
fc:b5:3b:03:12:2d:a0:6c:aa:23:4b:36:0f:cd:05:57:c2:63:
57:ca:e1:a5:57:13:81:fe:7d:cd:ad:30:ed:7c:01:db:02:9d:
6f:85:35:97:53:dd:96:0f:ee:3e:ce:01:14:3b:15:cd:45:7a:
e6:47:91:63:0a:87:8b:3b:25:48:b3:01:07:09:de:fa:a1:7b:
44:5f:ef:34:54:fe:de:48:07:fe:ad:c3:4e:83:eb:a8:84:bb:
06:83:79:b7:e0:e3:5b:88:20:ea:c4:f5:aa:f8:04:4d:b3:c7:
ce:5b:e9:6c:31:55:a8:ef:f2:4b:8f:46:0e:19:22:55:f1:6b:
44:18:d0:ff:66:c4:6b:3c:8c:2a:b9:23:bd:d4:df:76:f5:ce:
8e:02:0f:36:fd:2b:b0:57:34:34:a7:34:4b:cf:05:ea:50:f1:
df:48:1f:11:f6:cf:73:7b:26:d3:26:96:18:8b:b2:42:b8:69:
5e:ed:8d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:11 2026 by rpki-client