Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QBJHFUttrAzWXMhiYA3f64nhdoY.roa
File: QBJHFUttrAzWXMhiYA3f64nhdoY.roa (raw, json)
Hash identifier: MuL0VS6XSSvwzEiTsHsRuYvn1IIzMV6PZDx044UYbSc=
Subject key identifier: 40:12:47:15:4B:6D:AC:0C:D6:5C:C8:62:60:0D:DF:EB:89:E1:76:86
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A193769C8402F22EDCD6ADFC32035514E1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QBJHFUttrAzWXMhiYA3f64nhdoY.roa
Signing time: Sat 31 Oct 2026 19:36:26 +0000
ROA not before: Sat 31 Oct 2026 19:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 31.57.146.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:76:9c:84:02:f2:2e:dc:d6:ad:fc:32:03:55:14:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 19:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=401247154b6dac0cd65cc862600ddfeb89e17686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:94:7c:ac:ee:77:d1:89:d0:42:63:12:85:
0c:14:c0:dd:e6:af:da:0f:0c:36:9e:86:9d:68:56:
21:29:45:a1:fb:45:79:e2:74:15:a4:d0:10:f3:1e:
a3:88:c1:40:f3:2c:6c:10:6d:5f:65:4e:1d:4e:fc:
2d:d5:62:2e:66:50:0b:36:62:ee:96:56:c1:d2:17:
ff:25:06:a9:00:84:89:dc:8c:a4:27:27:21:0b:43:
a9:8b:05:e6:5a:fa:5a:d2:3c:e7:3c:b3:c2:38:28:
57:cc:c9:3b:f2:34:d5:04:70:a5:6e:d1:17:9b:8a:
5c:03:ad:56:21:96:89:05:75:b2:2e:91:8a:cd:91:
06:7a:f5:7d:ff:32:a7:7b:d8:92:6d:d4:ba:b1:18:
29:bb:58:c8:7e:f9:f3:3d:e0:02:9a:e8:77:f2:84:
64:5d:2e:d1:12:7d:c9:d3:47:0b:63:61:92:30:e0:
41:b9:9a:04:8e:9f:b2:da:b1:88:0a:73:84:f7:8f:
d7:80:2b:ec:15:f5:79:57:b7:37:69:cd:6d:e0:28:
10:a7:bd:a6:9d:16:dd:de:a2:2e:c5:4a:dc:bb:ec:
73:29:9b:64:89:8d:34:b9:24:bc:66:26:5c:40:d0:
0b:23:b8:8c:cb:ec:4d:e7:8b:b8:b0:97:37:b7:65:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:47:15:4B:6D:AC:0C:D6:5C:C8:62:60:0D:DF:EB:89:E1:76:86
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QBJHFUttrAzWXMhiYA3f64nhdoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.146.0/24
31.59.108.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4c:e6:e6:e2:ba:e9:74:ea:ed:c8:0e:de:c9:79:22:62:2e:
0c:91:bf:00:a5:9d:76:a3:f5:76:41:d6:e6:7b:f8:1c:60:3e:
14:36:23:1d:44:84:49:1b:4c:63:55:9b:62:59:ee:59:11:c8:
9e:38:ab:f5:88:ee:68:ed:38:86:b1:ec:e0:42:40:36:7f:86:
d1:c1:b8:4d:e0:97:25:d1:1b:48:45:e0:2a:34:55:6a:ac:7c:
8a:19:6b:07:7b:a0:c3:f4:9b:10:83:ee:38:35:ed:c4:b3:28:
ab:7a:84:87:b2:02:19:d9:89:79:dc:6e:88:05:4d:af:21:33:
82:04:f2:44:b6:0a:e6:bc:ec:2f:55:b0:d5:17:37:de:a8:bc:
81:92:3d:b8:a7:92:57:ea:71:be:3a:98:e2:31:78:33:3d:50:
38:ac:e8:9c:7f:52:8b:e3:5f:a6:47:14:56:62:35:39:cf:1a:
38:e7:92:f6:6e:ef:e4:d7:b6:5c:f4:34:f1:35:fe:e6:f1:5f:
db:81:aa:af:f1:59:97:57:45:4a:00:19:da:6c:7e:e3:c2:5c:
31:bd:b5:e3:de:fe:9f:32:ac:78:8e:5d:78:a5:0a:7e:38:cd:
c1:9f:04:72:f2:8d:94:d1:5f:39:d1:58:a5:06:ea:c9:a3:48:
bc:9f:c1:94
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGTdpyEAvIu3Nat/DIDVRThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDMxMTkzNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDEyNDcxNTRiNmRhYzBjZDY1Y2M4NjI2MDBkZGZlYjg5ZTE3Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h2UfKzud9GJ0EJjEoUMFMDd5q/a
Dww2noadaFYhKUWh+0V54nQVpNAQ8x6jiMFA8yxsEG1fZU4dTvwt1WIuZlALNmLu
llbB0hf/JQapAISJ3IykJychC0OpiwXmWvpa0jznPLPCOChXzMk78jTVBHClbtEX
m4pcA61WIZaJBXWyLpGKzZEGevV9/zKne9iSbdS6sRgpu1jIfvnzPeACmuh38oRk
XS7REn3J00cLY2GSMOBBuZoEjp+y2rGICnOE94/XgCvsFfV5V7c3ac1t4CgQp72m
nRbd3qIuxUrcu+xzKZtkiY00uSS8ZiZcQNALI7iMy+xN54u4sJc3t2UOMQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEASRxVLbawM1lzIYmAN3+uJ4XaGMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUUJKSEZVdHRyQXpXWE1oaVlBM2Y2NG5oZG9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzmSAwQA
HztsMA0GCSqGSIb3DQEBCwUAA4IBAQA6TObm4rrpdOrtyA7eyXkiYi4Mkb8ApZ12
o/V2Qdbme/gcYD4UNiMdRIRJG0xjVZtiWe5ZEcieOKv1iO5o7TiGsezgQkA2f4bR
wbhN4Jcl0RtIReAqNFVqrHyKGWsHe6DD9JsQg+44Ne3EsyireoSHsgIZ2Yl53G6I
BU2vITOCBPJEtgrmvOwvVbDVFzfeqLyBkj24p5JX6nG+OpjiMXgzPVA4rOicf1KL
41+mRxRWYjU5zxo455L2bu/k17Zc9DTxNf7m8V/bgaqv8VmXV0VKABnabH7jwlwx
vbXj3v6fMqx4jl14pQp+OM3BnwRy8o2U0V850VilBurJo0i8n8GU
-----END CERTIFICATE-----
Generated at Sat Nov 7 13:20:06 2026 by rpki-client