Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G7FQ9_aQiJ4idCw39R9qR9mk6vA.roa
File: G7FQ9_aQiJ4idCw39R9qR9mk6vA.roa (raw, json)
Hash identifier: fsrTVhtXqbnLoK/1Oha9Q/4aO9r45vYnZErDeapCJ0A=
Subject key identifier: 1B:B1:50:F7:F6:90:88:9E:22:74:2C:37:F5:1F:6A:47:D9:A4:EA:F0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A08CA3A163A6ADCE7792D3508AE135070A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G7FQ9_aQiJ4idCw39R9qR9mk6vA.roa
Signing time: Thu 10 Sep 2026 18:45:28 +0000
ROA not before: Thu 10 Sep 2026 18:45:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 31.58.52.0/24 maxlen: 24
31.58.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:a3:a1:63:a6:ad:ce:77:92:d3:50:8a:e1:35:07:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 18:45:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bb150f7f690889e22742c37f51f6a47d9a4eaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:e0:be:46:10:0d:5a:82:9a:3c:2c:3d:83:
70:71:94:a9:03:0a:67:b3:ec:e4:af:3e:ab:33:5f:
be:95:1a:56:10:e4:42:09:bf:91:28:58:c4:ca:b8:
8f:7c:f0:2f:b5:e6:9a:14:5b:cd:9e:58:ee:07:e2:
3b:76:f4:2e:a8:87:a6:2e:11:19:2c:cc:5b:3b:ea:
59:c9:ad:7c:69:a0:c3:12:56:92:37:5f:3a:6e:df:
95:6d:87:2e:a9:73:97:59:ce:1b:57:a3:c7:44:2a:
e3:cb:44:95:93:3f:e9:5b:29:75:44:61:9a:68:55:
26:25:96:9b:df:9a:93:4e:27:1b:29:5b:19:76:45:
0d:e5:c1:89:be:a9:4e:ed:b6:3c:c3:b4:49:65:d2:
90:24:f2:8d:7d:1d:fa:58:35:32:ef:88:44:a5:6a:
9b:5c:02:66:2e:78:86:b0:c5:a5:24:af:b9:d7:5f:
de:a3:a9:d5:1b:c3:e3:a0:1a:30:94:b7:69:56:5f:
47:31:23:1e:f6:85:b0:8f:b3:4e:0f:1a:d9:9b:6c:
eb:f2:37:71:14:ff:80:15:90:c2:0c:ea:f5:b8:18:
d9:af:d0:72:ca:67:a0:3a:4a:93:a3:e9:a6:d6:a3:
12:e3:6a:cf:55:ae:92:b0:b3:da:0c:29:05:96:74:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:50:F7:F6:90:88:9E:22:74:2C:37:F5:1F:6A:47:D9:A4:EA:F0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G7FQ9_aQiJ4idCw39R9qR9mk6vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.52.0/24
31.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
95:79:f8:28:e6:80:44:54:4b:65:29:1d:d3:08:52:fc:ba:46:
af:4a:85:cd:f2:5e:f1:ff:e7:1a:2e:cf:c7:0f:a8:c9:ff:75:
3b:37:4a:9c:b0:71:64:d9:e9:fc:c6:1b:f1:27:3b:28:72:9a:
97:e2:f2:da:13:f0:c2:e5:d0:7a:5e:6c:f5:c7:97:21:eb:85:
94:b2:87:eb:87:f4:5a:86:cc:b0:83:2c:ed:f9:79:06:72:b2:
41:a7:90:cc:e2:6b:45:21:b2:b4:05:c8:46:92:9e:4a:37:81:
df:dd:7a:ac:8b:4b:d1:91:c9:22:a0:6a:1c:7a:b2:21:14:e1:
aa:86:4d:16:7d:db:67:40:19:6b:ce:1d:4c:c8:d3:11:1b:53:
62:f6:02:56:5b:de:6a:f5:b7:37:43:dc:72:88:74:46:ac:0a:
a8:97:fa:90:b4:df:83:7e:8e:8d:b7:02:bd:dd:ae:5a:be:e4:
30:d7:1e:3c:91:47:27:80:20:a3:7e:87:96:e0:3a:66:27:37:
fa:e6:fe:a8:2a:d2:20:86:bb:6e:f2:bf:7c:e6:24:b9:49:8b:
dc:ed:9a:15:8b:7b:c9:1b:1c:64:9c:26:aa:96:95:4b:a5:11:
53:21:56:99:6f:43:b7:61:91:87:b9:52:63:70:78:34:56:0c:
7a:4b:31:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCMo6Fjpq3Od5LTUIrhNQcKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTEwMTg0NTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmIxNTBmN2Y2OTA4ODllMjI3NDJjMzdmNTFmNmE0N2Q5YTRlYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslvgvkYQDVqCmjwsPYNwcZSpAwpn
s+zkrz6rM1++lRpWEORCCb+RKFjEyriPfPAvteaaFFvNnljuB+I7dvQuqIemLhEZ
LMxbO+pZya18aaDDElaSN186bt+VbYcuqXOXWc4bV6PHRCrjy0SVkz/pWyl1RGGa
aFUmJZab35qTTicbKVsZdkUN5cGJvqlO7bY8w7RJZdKQJPKNfR36WDUy74hEpWqb
XAJmLniGsMWlJK+511/eo6nVG8PjoBowlLdpVl9HMSMe9oWwj7NODxrZm2zr8jdx
FP+AFZDCDOr1uBjZr9ByymegOkqTo+mm1qMS42rPVa6SsLPaDCkFlnS8SQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBuxUPf2kIieInQsN/UfakfZpOrwMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRzdGUTlfYVFpSjRpZEN3MzlSOXFSOW1rNnZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzo0AwQA
HzqTMA0GCSqGSIb3DQEBCwUAA4IBAQCVefgo5oBEVEtlKR3TCFL8ukavSoXN8l7x
/+caLs/HD6jJ/3U7N0qcsHFk2en8xhvxJzsocpqX4vLaE/DC5dB6Xmz1x5ch64WU
sofrh/Rahsywgyzt+XkGcrJBp5DM4mtFIbK0BchGkp5KN4Hf3Xqsi0vRkckioGoc
erIhFOGqhk0WfdtnQBlrzh1MyNMRG1Ni9gJWW95q9bc3Q9xyiHRGrAqol/qQtN+D
fo6NtwK93a5avuQw1x48kUcngCCjfoeW4DpmJzf65v6oKtIghrtu8r985iS5SYvc
7ZoVi3vJGxxknCaqlpVLpRFTIVaZb0O3YZGHuVJjcHg0Vgx6SzFV
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:28 2026 by rpki-client