Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TYf03rDMm3tyABKLtmNy0anII0g.roa
File: TYf03rDMm3tyABKLtmNy0anII0g.roa (raw, json)
Hash identifier: 3+Pgy58mMabncqwv6bgVEPb4rvXR7wKdndxAZgR1OAs=
Subject key identifier: 4D:87:F4:DE:B0:CC:9B:7B:72:00:12:8B:B6:63:72:D1:A9:C8:23:48
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0471989EF218CD7A3DFB6882627854ADB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TYf03rDMm3tyABKLtmNy0anII0g.roa
Signing time: Fri 28 Aug 2026 06:40:50 +0000
ROA not before: Fri 28 Aug 2026 06:40:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207994
IP address blocks: 31.56.68.0/24 maxlen: 24
31.57.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:19:89:ef:21:8c:d7:a3:df:b6:88:26:27:85:4a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 06:40:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d87f4deb0cc9b7b7200128bb66372d1a9c82348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:01:db:e0:b1:45:cb:83:51:88:b9:33:66:
c3:ff:7d:06:d2:26:6f:2d:0f:8f:c4:ee:67:ce:3c:
0c:67:34:3b:65:54:43:c7:f4:4c:41:c5:e1:6a:72:
26:c1:d2:ce:c4:9e:04:fd:16:6d:0a:e1:04:d0:31:
3e:64:0a:f2:52:af:fc:70:5e:c0:b9:b3:e7:66:8c:
3c:de:2b:2f:4c:e0:ba:31:7a:e8:1c:30:8c:62:19:
ae:94:58:51:51:5e:ed:59:38:cf:a3:28:b8:69:02:
76:84:57:e4:b1:05:7a:20:5c:a7:57:ba:af:ee:05:
77:ac:26:04:ab:4c:84:04:e5:a4:e0:c1:53:72:9f:
60:e3:4a:cc:bc:7d:79:4a:0e:d7:12:09:9d:52:2c:
e6:b3:d3:ce:45:6a:91:9a:d3:88:d2:71:eb:45:30:
86:d4:b2:6f:af:21:2a:80:3b:e5:1d:39:f5:82:2e:
8d:f0:e0:f3:5a:e5:8e:7f:ba:53:6e:55:44:a0:e5:
a5:78:87:38:97:60:1b:8d:ae:36:de:ff:11:1d:80:
c4:55:c4:61:f0:71:06:49:45:80:5d:44:b2:1d:b9:
82:ca:dd:c2:ff:1d:39:67:1a:72:51:90:fd:b9:2e:
b1:a9:7f:d2:7a:82:cd:c3:bb:38:da:9e:b3:da:bf:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:F4:DE:B0:CC:9B:7B:72:00:12:8B:B6:63:72:D1:A9:C8:23:48
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TYf03rDMm3tyABKLtmNy0anII0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.68.0/24
31.57.34.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:34:1f:57:7c:0b:98:f8:c4:9e:c1:3a:25:13:8b:09:c2:0c:
42:5d:e9:fd:e1:cf:78:34:4f:5c:e3:4c:07:66:f1:4c:21:ec:
13:0e:ca:4e:20:f3:19:37:80:d8:fd:dc:7c:f3:56:0c:dc:d4:
bc:f8:db:ac:85:b8:6f:06:e0:41:b1:2a:8f:ee:55:59:35:b0:
3b:8f:3c:37:df:b7:c3:db:3c:07:ac:33:0e:a3:a4:e6:e9:cf:
d2:19:5c:b0:17:95:5f:0f:0c:79:b9:d5:93:dc:7d:19:2e:39:
87:a1:81:d9:e8:ef:87:f2:52:e8:08:88:71:74:dc:fe:ce:2e:
3f:06:8b:e4:2f:9f:a5:41:4f:15:8e:ef:10:17:48:42:92:ca:
44:10:cc:09:d0:42:40:9d:bb:64:99:1d:f6:ec:b1:45:02:ba:
8e:e1:ee:37:78:d4:b0:b6:d3:3e:9b:e3:d9:50:5f:38:c1:9d:
61:63:08:e4:3c:dc:5a:e6:28:64:b9:43:7e:ca:fe:c7:2d:85:
aa:38:87:a2:9e:b8:cc:49:f5:0b:1f:01:a2:3e:c8:71:80:8c:
84:60:e3:ef:97:64:3f:48:b1:db:9a:60:21:92:99:c4:a5:20:
4f:b8:97:dd:ef:e4:0d:68:8f:1f:ca:b6:de:b5:c3:ef:46:03:
e4:22:22:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBHGYnvIYzXo9+2iCYnhUrbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODI4MDY0MDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDg3ZjRkZWIwY2M5YjdiNzIwMDEyOGJiNjYzNzJkMWE5YzgyMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n0B2+CxRcuDUYi5M2bD/30G0iZv
LQ+PxO5nzjwMZzQ7ZVRDx/RMQcXhanImwdLOxJ4E/RZtCuEE0DE+ZAryUq/8cF7A
ubPnZow83isvTOC6MXroHDCMYhmulFhRUV7tWTjPoyi4aQJ2hFfksQV6IFynV7qv
7gV3rCYEq0yEBOWk4MFTcp9g40rMvH15Sg7XEgmdUizms9PORWqRmtOI0nHrRTCG
1LJvryEqgDvlHTn1gi6N8ODzWuWOf7pTblVEoOWleIc4l2Abja423v8RHYDEVcRh
8HEGSUWAXUSyHbmCyt3C/x05ZxpyUZD9uS6xqX/SeoLNw7s42p6z2r++ZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE2H9N6wzJt7cgASi7ZjctGpyCNIMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVFlmMDNyRE1tM3R5QUJLTHRtTnkwYW5JSTBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhEAwQA
HzkiMA0GCSqGSIb3DQEBCwUAA4IBAQCqNB9XfAuY+MSewTolE4sJwgxCXen94c94
NE9c40wHZvFMIewTDspOIPMZN4DY/dx881YM3NS8+NushbhvBuBBsSqP7lVZNbA7
jzw337fD2zwHrDMOo6Tm6c/SGVywF5VfDwx5udWT3H0ZLjmHoYHZ6O+H8lLoCIhx
dNz+zi4/BovkL5+lQU8Vju8QF0hCkspEEMwJ0EJAnbtkmR327LFFArqO4e43eNSw
ttM+m+PZUF84wZ1hYwjkPNxa5ihkuUN+yv7HLYWqOIeinrjMSfULHwGiPshxgIyE
YOPvl2Q/SLHbmmAhkpnEpSBPuJfd7+QNaI8fyrbetcPvRgPkIiJI
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:21 2026 by rpki-client