Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4a298TYH1J5ivjUeU0r6mHiPMT8.roa
File: 4a298TYH1J5ivjUeU0r6mHiPMT8.roa (raw, json)
Hash identifier: U6vsme+50feJbZGaQUn44Z2C4VjxAE7k41LaNDmDnho=
Subject key identifier: E1:AD:BD:F1:36:07:D4:9E:62:BE:35:1E:53:4A:FA:98:78:8F:31:3F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D8F8E000BD50326703B13BA093F712769
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4a298TYH1J5ivjUeU0r6mHiPMT8.roa
Signing time: Wed 15 Apr 2026 05:12:21 +0000
ROA not before: Wed 15 Apr 2026 05:12:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:8e:00:0b:d5:03:26:70:3b:13:ba:09:3f:71:27:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 15 05:12:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1adbdf13607d49e62be351e534afa98788f313f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:71:60:2b:3d:57:96:45:81:9e:05:59:ac:
df:aa:36:4e:4f:1a:b2:4a:a1:fd:45:e0:d9:7f:61:
70:66:b7:02:fb:8e:62:5f:64:b7:be:2b:a3:a8:5e:
35:8b:a9:87:61:93:b6:75:6b:bb:fa:34:3c:86:ba:
8e:6a:eb:6d:34:1b:94:75:e9:03:04:44:38:96:33:
9f:94:0e:70:37:c6:23:9c:c3:2a:49:ec:d4:18:b7:
c3:92:a9:9c:c8:23:33:76:05:d0:30:8b:b2:61:1d:
0e:37:77:c1:62:59:48:94:8e:43:38:1b:d7:bf:fc:
3d:65:de:2e:60:77:90:ab:cc:5d:a8:59:40:80:78:
83:d2:50:8d:26:27:91:8b:78:79:75:f3:be:ea:08:
c6:69:9d:37:33:25:c2:06:89:7d:f6:3d:db:d8:1e:
00:ad:7e:74:bd:47:a6:4f:12:b2:8f:cc:6f:a4:34:
a8:95:98:f6:a3:92:97:aa:db:46:ce:0a:ac:b5:91:
9d:c3:8d:bb:38:99:94:bd:7a:43:45:21:c0:9b:d8:
2e:d0:9e:dd:4b:a9:4d:80:9f:f0:70:bc:42:f5:4a:
e7:aa:27:9d:bb:a2:00:12:49:9e:56:da:bb:4b:94:
93:84:c7:ae:fb:b7:bd:3f:7a:47:96:16:e5:18:84:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AD:BD:F1:36:07:D4:9E:62:BE:35:1E:53:4A:FA:98:78:8F:31:3F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4a298TYH1J5ivjUeU0r6mHiPMT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.36.0/24
31.59.39.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9b:9a:fc:ee:47:ff:66:85:14:75:03:07:76:c3:93:66:ed:
a3:5f:87:93:0c:26:dc:6d:2a:59:f7:36:3b:23:34:dd:8f:c6:
f1:03:ad:86:6b:59:96:e6:a8:9c:4c:c8:a1:a6:44:cb:3a:b5:
45:aa:f5:10:70:11:b7:49:c1:23:92:01:21:60:38:35:ef:d7:
f3:36:05:ca:3f:dd:c8:54:bd:25:44:8f:fe:52:1a:58:e0:4d:
ef:b8:47:93:23:f7:55:c3:48:ef:de:bd:2f:26:a8:b5:84:06:
6a:0b:0a:80:ea:d7:38:6d:b2:02:91:ec:8d:45:d0:f3:70:64:
86:3c:97:d9:49:49:f0:0c:03:63:2c:97:3a:eb:98:7e:fd:94:
58:90:53:28:8a:b9:77:d0:95:fb:3b:d3:6e:f6:75:3c:ff:3c:
f6:be:52:1b:dc:82:f2:b1:8a:a4:eb:35:07:f9:05:4d:46:7f:
ed:c4:1f:91:b3:f5:b4:95:7b:de:a8:88:ff:33:ce:46:43:06:
11:15:20:ca:c2:a4:ab:11:96:85:11:ea:42:6a:9b:9d:c1:38:
1f:ff:f8:0e:c7:25:d0:ea:89:d0:89:f4:96:70:0e:60:79:d1:
0c:be:14:d4:ff:fb:97:b4:56:8c:45:1b:99:e2:fb:80:39:dd:
58:1d:5e:2e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ2PjgAL1QMmcDsTugk/cSdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNDE1MDUxMjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWFkYmRmMTM2MDdkNDllNjJiZTM1MWU1MzRhZmE5ODc4OGYzMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgVxYCs9V5ZFgZ4FWazfqjZOTxqy
SqH9ReDZf2FwZrcC+45iX2S3viujqF41i6mHYZO2dWu7+jQ8hrqOauttNBuUdekD
BEQ4ljOflA5wN8YjnMMqSezUGLfDkqmcyCMzdgXQMIuyYR0ON3fBYllIlI5DOBvX
v/w9Zd4uYHeQq8xdqFlAgHiD0lCNJieRi3h5dfO+6gjGaZ03MyXCBol99j3b2B4A
rX50vUemTxKyj8xvpDSolZj2o5KXqttGzgqstZGdw427OJmUvXpDRSHAm9gu0J7d
S6lNgJ/wcLxC9Urnqiedu6IAEkmeVtq7S5SThMeu+7e9P3pHlhblGIS4mwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOGtvfE2B9SeYr41HlNK+ph4jzE/MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNGEyOThUWUgxSjVpdmpVZVUwcjZtSGlQTVQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHzroAwQA
HzskAwQAHzsnMA0GCSqGSIb3DQEBCwUAA4IBAQBWm5r87kf/ZoUUdQMHdsOTZu2j
X4eTDCbcbSpZ9zY7IzTdj8bxA62Ga1mW5qicTMihpkTLOrVFqvUQcBG3ScEjkgEh
YDg179fzNgXKP93IVL0lRI/+UhpY4E3vuEeTI/dVw0jv3r0vJqi1hAZqCwqA6tc4
bbICkeyNRdDzcGSGPJfZSUnwDANjLJc665h+/ZRYkFMoirl30JX7O9Nu9nU8/zz2
vlIb3ILysYqk6zUH+QVNRn/txB+Rs/W0lXveqIj/M85GQwYRFSDKwqSrEZaFEepC
apudwTgf//gOxyXQ6onQifSWcA5gedEMvhTU//uXtFaMRRuZ4vuAOd1YHV4u
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:19 2026 by rpki-client