Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/51FGx4Ah2EuZeCsTkAOR9cCLyL0.roa
File: 51FGx4Ah2EuZeCsTkAOR9cCLyL0.roa (raw, json)
Hash identifier: U15pJB+nhAYaBU/l5RHJkSYHcdrbPDhrl3ROyT79SX4=
Subject key identifier: E7:51:46:C7:80:21:D8:4B:99:78:2B:13:90:03:91:F5:C0:8B:C8:BD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BA33245167362A8A069CA97BC9868EE9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/51FGx4Ah2EuZeCsTkAOR9cCLyL0.roa
Signing time: Sat 19 Sep 2026 15:05:08 +0000
ROA not before: Sat 19 Sep 2026 15:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31549
IP address blocks: 31.57.200.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:33:24:51:67:36:2a:8a:06:9c:a9:7b:c9:86:8e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 19 15:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e75146c78021d84b99782b13900391f5c08bc8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:0e:39:2d:77:18:cd:21:4d:16:1b:10:d3:
38:a6:f8:e2:78:d0:10:51:02:0e:cc:1e:f9:1e:a9:
05:88:36:09:88:0b:54:7b:e2:f5:d0:15:74:c1:a2:
30:04:15:df:4c:5b:ef:2a:09:7d:6d:15:36:07:e1:
68:40:fc:09:a0:3e:70:21:7e:3e:6e:60:46:50:94:
1a:b8:bd:bd:51:82:ce:4a:c5:9c:81:33:0b:49:95:
8c:f9:16:58:71:48:2d:9c:c1:6e:d9:9f:84:72:b8:
35:14:64:04:db:39:88:23:20:18:ef:16:05:ac:7c:
00:f8:07:92:d6:f9:42:f5:fa:a0:06:13:ae:15:96:
cc:33:25:13:08:1f:c1:ff:8f:fe:be:cb:f7:64:dc:
5f:b1:5d:a5:90:06:b7:cd:1b:67:96:a3:d0:fd:82:
9a:27:df:1c:6f:d2:78:50:0d:03:d9:04:fd:39:3b:
73:a2:8b:fe:12:39:07:39:e3:bf:d7:25:47:df:80:
ae:89:db:bf:bb:65:f4:fe:9c:bc:ba:0f:1d:9a:2a:
7f:38:5a:e4:a2:6a:40:3a:36:e1:d4:c5:f6:93:da:
20:a1:88:39:8f:c5:1a:24:0c:8b:d5:5c:18:00:2d:
89:8b:80:15:a5:3b:df:7a:15:29:ec:4e:8d:8f:38:
2d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:51:46:C7:80:21:D8:4B:99:78:2B:13:90:03:91:F5:C0:8B:C8:BD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/51FGx4Ah2EuZeCsTkAOR9cCLyL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.200.0/24
31.58.249.0/24
Signature Algorithm: sha256WithRSAEncryption
33:70:e8:de:e3:23:d0:be:ec:05:4c:cd:a8:09:89:db:8c:6a:
e6:af:59:82:fa:fa:c9:16:9f:4c:da:e2:a1:cd:c7:83:7e:0f:
8f:41:ab:0b:8a:cd:f8:9c:b7:18:87:b6:85:d0:d4:f3:a4:8c:
6f:c7:87:3d:fb:91:da:6b:81:ab:2a:49:3d:ad:de:e7:36:46:
a4:2f:63:88:c5:fb:8a:0e:bc:20:de:aa:20:8d:e6:c1:32:f5:
77:db:de:27:63:3d:bd:35:6a:1f:fe:54:03:76:7c:40:0c:bf:
58:c2:48:1b:47:9c:cf:3c:91:df:6e:20:a1:fb:8b:ef:4f:64:
00:1a:be:41:85:e3:ab:ac:55:25:a0:4a:c6:59:63:57:4f:94:
86:fb:d4:9c:1c:3f:5d:2f:bf:ce:04:b9:b4:9c:12:52:23:17:
ac:f7:6c:38:e7:5f:4f:73:0f:84:34:df:17:32:ea:f4:ad:72:
25:fc:2a:44:3f:4c:d5:a3:c9:ec:48:ed:56:88:94:b3:48:7d:
77:71:60:8a:1b:d7:29:fe:9b:cf:75:b3:62:0c:27:7b:d9:36:
0e:aa:bf:ed:06:ef:d6:f5:39:0c:f6:a1:a4:4d:c5:36:4c:55:
81:1f:83:24:a0:90:12:d4:c5:7f:86:2d:c9:d5:3e:dd:2d:49:
39:89:38:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaC6MyRRZzYqigacqXvJho7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTE5MTUwNTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzUxNDZjNzgwMjFkODRiOTk3ODJiMTM5MDAzOTFmNWMwOGJjOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhkOOS13GM0hTRYbENM4pvjieNAQ
UQIOzB75HqkFiDYJiAtUe+L10BV0waIwBBXfTFvvKgl9bRU2B+FoQPwJoD5wIX4+
bmBGUJQauL29UYLOSsWcgTMLSZWM+RZYcUgtnMFu2Z+Ecrg1FGQE2zmIIyAY7xYF
rHwA+AeS1vlC9fqgBhOuFZbMMyUTCB/B/4/+vsv3ZNxfsV2lkAa3zRtnlqPQ/YKa
J98cb9J4UA0D2QT9OTtzoov+EjkHOeO/1yVH34Cuidu/u2X0/py8ug8dmip/OFrk
ompAOjbh1MX2k9ogoYg5j8UaJAyL1VwYAC2Ji4AVpTvfehUp7E6Njzgt2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOdRRseAIdhLmXgrE5ADkfXAi8i9MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNTFGR3g0QWgyRXVaZUNzVGtBT1I5Y0NMeUwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHznIAwQA
Hzr5MA0GCSqGSIb3DQEBCwUAA4IBAQAzcOje4yPQvuwFTM2oCYnbjGrmr1mC+vrJ
Fp9M2uKhzceDfg+PQasLis34nLcYh7aF0NTzpIxvx4c9+5Haa4GrKkk9rd7nNkak
L2OIxfuKDrwg3qogjebBMvV3294nYz29NWof/lQDdnxADL9YwkgbR5zPPJHfbiCh
+4vvT2QAGr5BheOrrFUloErGWWNXT5SG+9ScHD9dL7/OBLm0nBJSIxes92w4519P
cw+ENN8XMur0rXIl/CpEP0zVo8nsSO1WiJSzSH13cWCKG9cp/pvPdbNiDCd72TYO
qr/tBu/W9TkM9qGkTcU2TFWBH4MkoJAS1MV/hi3J1T7dLUk5iTj2
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:54:13 2026 by rpki-client