Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TyvLFHuIcN3ELgPQcJ9RWtt-1nA.roa
File: TyvLFHuIcN3ELgPQcJ9RWtt-1nA.roa (raw, json)
Hash identifier: /BjmNQL9YN27Vo63XkevNkzdah4weS6TD/fiCVsP7og=
Subject key identifier: 4F:2B:CB:14:7B:88:70:DD:C4:2E:03:D0:70:9F:51:5A:DB:7E:D6:70
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C8B95AEDD500EA0AF150DCF6A67EC09A4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TyvLFHuIcN3ELgPQcJ9RWtt-1nA.roa
Signing time: Mon 23 Feb 2026 17:39:28 +0000
ROA not before: Mon 23 Feb 2026 17:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213791
IP address blocks: 31.57.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:95:ae:dd:50:0e:a0:af:15:0d:cf:6a:67:ec:09:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 23 17:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f2bcb147b8870ddc42e03d0709f515adb7ed670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:95:63:87:ee:1e:a0:ae:a1:e5:3d:24:89:
02:00:3d:b8:75:11:22:15:62:bc:1e:d3:5a:cf:14:
13:ab:cf:1b:4d:ef:a3:a3:a6:e0:41:b3:65:83:83:
9e:f7:84:81:19:f7:68:ee:7a:8d:b4:7a:b8:30:5e:
7d:dd:cd:f0:f7:0f:50:70:ed:3c:5f:f0:25:ef:c1:
02:0a:e3:ed:6c:05:58:41:2d:1b:2d:38:8c:9f:38:
31:e1:f0:35:c1:93:30:9c:ae:27:e2:aa:5c:32:f6:
82:45:81:49:4c:10:98:b7:c6:6c:20:80:d8:fe:e5:
45:17:ca:a6:62:16:70:0f:78:00:8a:7e:67:64:77:
8d:1f:e7:37:5e:0c:41:3d:28:85:b4:12:33:4a:48:
b6:10:57:8f:d6:63:b8:72:62:8c:1c:f7:0a:28:df:
0d:92:82:b0:81:40:b7:7a:31:bc:87:ed:c2:2b:f0:
f3:b7:38:4d:fc:c1:8d:2c:a1:2e:5d:05:61:9a:32:
54:80:65:57:0a:b8:16:97:89:4e:be:ef:39:ee:f4:
82:91:fb:26:07:c1:b5:99:c8:71:2c:12:19:0b:33:
1d:b2:53:89:73:a9:cd:d8:ef:56:2a:b6:ee:9c:c2:
33:b3:3f:11:1e:da:41:2a:6f:a9:9e:37:e9:d3:3a:
30:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2B:CB:14:7B:88:70:DD:C4:2E:03:D0:70:9F:51:5A:DB:7E:D6:70
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TyvLFHuIcN3ELgPQcJ9RWtt-1nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.202.0/24
Signature Algorithm: sha256WithRSAEncryption
85:96:b6:73:fb:4c:a3:43:b3:e6:07:90:b7:cc:c9:67:40:48:
52:09:e3:a2:84:6d:44:55:41:c3:de:d3:78:16:79:e1:db:10:
90:9b:e7:bd:cc:43:ca:78:2d:c2:ff:16:28:05:ac:6c:48:30:
9b:17:db:b1:68:32:33:04:c7:83:1f:e2:13:01:63:42:ec:4d:
c5:3a:ff:b9:5e:00:15:a1:1b:01:20:9a:b6:11:2c:20:10:26:
f4:7b:4a:7b:1d:e7:af:6c:45:69:a9:f0:2d:d1:e0:d4:ab:07:
d2:22:c3:30:fe:de:76:a7:1b:de:9d:38:6f:2e:8c:88:01:a5:
e0:98:5a:be:a3:7f:f9:7b:39:12:e9:14:dc:f9:11:72:2a:21:
c8:d2:54:bb:27:d1:2b:72:ee:30:4c:35:40:1c:09:dc:e4:cf:
27:64:0f:74:e6:e7:5b:16:11:82:41:7b:e4:21:8d:97:d7:0f:
06:97:3f:df:05:b8:c8:ef:a9:cb:a9:e1:d8:ed:c3:b2:bc:70:
93:29:77:c8:24:63:75:94:5a:d9:70:1d:53:c4:e3:7a:0b:d9:
99:45:34:a9:85:38:76:b9:c7:c5:31:c1:a0:30:a5:c9:44:38:
e2:50:41:b4:31:06:e9:08:2b:93:eb:36:ed:5d:13:0d:3a:bf:
9c:e8:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:40 2026 by rpki-client