Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R0iz1TJALtYCgrF4IBr7XmudoXU.roa
File: R0iz1TJALtYCgrF4IBr7XmudoXU.roa (raw, json)
Hash identifier: f1h3+bAdvdIhRN8amtdgSaOWIE7Rfw+tVrHVMAHetEo=
Subject key identifier: 47:48:B3:D5:32:40:2E:D6:02:82:B1:78:20:1A:FB:5E:6B:9D:A1:75
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C56A980C387B66CFFE5B504B8B8044831
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R0iz1TJALtYCgrF4IBr7XmudoXU.roa
Signing time: Fri 13 Feb 2026 11:01:14 +0000
ROA not before: Fri 13 Feb 2026 11:01:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207155
IP address blocks: 31.59.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:a9:80:c3:87:b6:6c:ff:e5:b5:04:b8:b8:04:48:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 13 11:01:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4748b3d532402ed60282b178201afb5e6b9da175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:20:53:cf:c5:1d:40:b4:85:c5:54:e9:f9:c5:
66:ca:12:f2:92:8e:98:9d:31:89:81:67:f2:f1:fe:
cd:cc:d1:4b:72:e1:5f:8e:41:9d:7f:58:c7:14:88:
dc:75:af:ee:75:99:a2:64:fb:c0:da:bd:05:41:48:
f4:b7:c5:1d:cd:d0:c6:91:3f:06:0b:fd:05:83:74:
ce:83:a7:1a:6b:c0:15:59:2f:85:78:b2:3a:47:18:
62:51:fa:44:e4:cd:e0:4e:44:e3:08:5d:e0:82:5b:
7c:76:7e:e7:13:e8:b9:90:05:59:65:9e:93:90:3e:
2f:46:ab:e7:9f:e3:d2:ab:33:2a:d1:2a:79:5c:46:
8d:01:18:c9:4e:35:9d:42:cc:96:4e:08:0d:c9:19:
9d:cd:89:28:d7:d5:07:b3:3f:d1:5b:61:67:bf:0f:
66:2f:e0:1b:f3:1f:9c:c0:b9:8f:d8:96:7d:66:2c:
5e:8b:d2:36:6e:73:f5:fa:f4:4f:3a:bd:ed:97:4a:
08:b9:54:f9:eb:55:23:34:f7:85:03:72:8a:f9:bd:
df:eb:b7:de:d9:46:35:95:c9:c6:3c:25:e9:c7:c3:
98:74:af:4c:8e:6e:18:a9:d4:e1:16:70:98:83:dd:
9a:24:9d:8c:2c:85:45:9e:4b:4f:26:66:5f:07:22:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:B3:D5:32:40:2E:D6:02:82:B1:78:20:1A:FB:5E:6B:9D:A1:75
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/R0iz1TJALtYCgrF4IBr7XmudoXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:43:20:a5:e7:d7:7f:07:46:1b:f1:a4:df:89:48:9c:47:04:
99:4e:34:00:b5:ae:1f:1c:e3:9d:0e:3f:a3:03:18:b4:9d:1b:
f1:a3:7a:98:d0:d4:1c:ef:52:e1:72:9a:21:7f:d1:2a:25:95:
87:06:06:1f:e3:db:22:8e:0c:aa:7b:f7:9e:c7:ad:84:24:69:
3e:0f:91:a0:41:79:a2:74:64:f8:a4:e4:8f:d3:c5:3d:8a:28:
50:48:91:a8:77:bc:a2:4f:1f:06:c1:5f:78:74:84:32:62:30:
df:32:5e:71:c9:ba:2e:f4:37:81:03:c8:52:b1:64:c9:ab:0f:
b3:30:42:ea:26:a5:e2:af:46:70:72:56:0a:4d:f4:93:df:f3:
ea:6b:76:9e:80:84:ca:a0:39:02:09:8f:20:06:7b:e9:ff:74:
ea:19:94:6a:c7:5d:b7:5b:fe:99:84:19:30:dd:95:6e:f1:ec:
fc:19:16:0f:d4:b8:fa:0b:83:65:b7:f7:c9:a0:9a:9c:1c:ab:
42:49:df:2c:9a:b6:c7:dd:dc:74:c0:a8:ec:45:bf:7a:a4:16:
eb:3d:92:01:2a:74:45:da:8a:91:d0:10:14:e4:c2:48:45:36:
02:ed:45:24:85:59:a5:ef:63:24:a9:4e:eb:aa:e2:10:76:2a:
19:cb:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:18 2026 by rpki-client