Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KxPaKn8RIBJNTWGqoEd8CowKGFE.roa
File: KxPaKn8RIBJNTWGqoEd8CowKGFE.roa (raw, json)
Hash identifier: vxAhYOo9+UJIO9sVXr03xQQP1puAx/pSIOtdMt3e6Oc=
Subject key identifier: 2B:13:DA:2A:7F:11:20:12:4D:4D:61:AA:A0:47:7C:0A:8C:0A:18:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C37930AC87D0B21A701BE80F0CB324356
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KxPaKn8RIBJNTWGqoEd8CowKGFE.roa
Signing time: Sat 07 Feb 2026 10:08:29 +0000
ROA not before: Sat 07 Feb 2026 10:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 31.58.231.0/24 maxlen: 24
94.183.158.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:37:93:0a:c8:7d:0b:21:a7:01:be:80:f0:cb:32:43:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 7 10:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b13da2a7f1120124d4d61aaa0477c0a8c0a1851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8e:e0:eb:02:8d:e2:fd:05:60:e6:26:90:a6:
6e:6f:f5:84:06:f4:38:44:30:01:d8:9c:79:60:e2:
49:b4:07:5b:94:94:4c:e0:c1:d3:c7:bd:d9:07:70:
48:10:0a:ec:99:9d:d0:a3:fd:e2:0d:85:f4:91:12:
4b:87:aa:d1:d4:10:a3:bc:82:1e:c9:50:9e:28:2a:
22:81:b4:3e:de:37:fb:66:36:d7:bc:3a:27:31:79:
f2:1d:ab:8c:ab:9d:37:1b:fa:c5:00:8d:77:a2:1b:
1e:78:55:81:42:49:8b:b1:74:86:31:41:d3:70:47:
22:53:bf:b6:9d:df:f1:f8:a5:6e:68:05:c7:bb:a4:
1d:48:8b:29:e1:96:74:7a:0d:ae:d3:6b:6e:c1:7b:
ff:a7:4c:9b:28:e4:9b:af:59:dc:ce:aa:16:93:0f:
ad:14:8c:61:e0:dc:67:7f:20:e0:83:d8:e4:e0:a4:
c9:e3:4d:99:52:3a:73:df:51:79:ae:39:87:c3:8f:
eb:8f:59:af:e4:cf:1f:03:93:96:94:e2:f5:a7:8a:
49:d0:45:3c:1d:50:ac:51:ac:af:4f:65:7c:21:65:
10:bd:a6:75:6c:5b:73:46:51:8d:1c:86:c0:5b:40:
40:05:aa:53:56:90:f0:9c:fd:7d:7b:4c:43:ce:80:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:13:DA:2A:7F:11:20:12:4D:4D:61:AA:A0:47:7C:0A:8C:0A:18:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KxPaKn8RIBJNTWGqoEd8CowKGFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.231.0/24
94.183.158.0/24
217.60.27.0/24
Signature Algorithm: sha256WithRSAEncryption
05:16:35:c5:a1:7b:a4:34:f1:37:09:f2:a6:a9:60:39:89:93:
75:20:80:f5:94:15:58:56:d9:3a:05:19:94:7f:f4:e3:25:49:
d4:2b:e9:7e:e6:f2:ef:91:18:fe:cd:5e:d6:da:f9:7f:66:2e:
f3:3b:24:ab:b6:98:a7:bc:aa:96:3a:f4:95:8c:f9:54:74:1c:
46:37:e1:c3:8d:04:fb:ba:56:d1:b2:36:17:d5:88:22:fc:79:
fa:7c:f4:1d:30:e7:db:2a:23:68:cc:bb:c4:07:f4:3a:92:a4:
f7:dd:86:f9:dc:8b:ac:a3:7b:6e:1b:5a:57:87:49:80:d8:74:
cb:ed:ff:21:b6:63:45:9a:47:fc:cb:1d:6d:17:9d:b0:80:a3:
09:db:12:ce:3c:c2:99:9a:8a:7b:f0:d8:a1:84:9a:4b:7d:50:
b3:19:13:99:b4:93:a8:9f:b0:e5:25:78:ad:d3:36:19:38:10:
91:26:c7:46:c8:18:3e:5f:35:66:71:b7:34:f7:21:32:ff:7d:
68:88:f5:6a:6a:31:dc:da:5b:63:a0:1a:48:93:b6:05:5e:b2:
77:43:a9:4a:22:3d:bb:db:f8:12:a3:d3:34:6d:47:ef:b8:14:
82:20:fa:f9:88:80:d2:6c:3d:e8:3a:53:8f:8b:86:91:63:f2:
a9:0c:5b:b7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZw3kwrIfQshpwG+gPDLMkNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjA3MTAwODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjEzZGEyYTdmMTEyMDEyNGQ0ZDYxYWFhMDQ3N2MwYThjMGExODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu47g6wKN4v0FYOYmkKZub/WEBvQ4
RDAB2Jx5YOJJtAdblJRM4MHTx73ZB3BIEArsmZ3Qo/3iDYX0kRJLh6rR1BCjvIIe
yVCeKCoigbQ+3jf7ZjbXvDonMXnyHauMq503G/rFAI13ohseeFWBQkmLsXSGMUHT
cEciU7+2nd/x+KVuaAXHu6QdSIsp4ZZ0eg2u02tuwXv/p0ybKOSbr1nczqoWkw+t
FIxh4NxnfyDgg9jk4KTJ402ZUjpz31F5rjmHw4/rj1mv5M8fA5OWlOL1p4pJ0EU8
HVCsUayvT2V8IWUQvaZ1bFtzRlGNHIbAW0BABapTVpDwnP19e0xDzoAZbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCsT2ip/ESASTU1hqqBHfAqMChhRMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvS3hQYUtuOFJJQkpOVFdHcW9FZDhDb3dLR0ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzrnAwQA
XreeAwQA2TwbMA0GCSqGSIb3DQEBCwUAA4IBAQAFFjXFoXukNPE3CfKmqWA5iZN1
IID1lBVYVtk6BRmUf/TjJUnUK+l+5vLvkRj+zV7W2vl/Zi7zOySrtpinvKqWOvSV
jPlUdBxGN+HDjQT7ulbRsjYX1Ygi/Hn6fPQdMOfbKiNozLvEB/Q6kqT33Yb53Ius
o3tuG1pXh0mA2HTL7f8htmNFmkf8yx1tF52wgKMJ2xLOPMKZmop78NihhJpLfVCz
GROZtJOon7DlJXit0zYZOBCRJsdGyBg+XzVmcbc09yEy/31oiPVqajHc2ltjoBpI
k7YFXrJ3Q6lKIj272/gSo9M0bUfvuBSCIPr5iIDSbD3oOlOPi4aRY/KpDFu3
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:46:52 2026 by rpki-client