Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XKYlqWJHphnQtycj4gfH7wQNg58.roa
File: XKYlqWJHphnQtycj4gfH7wQNg58.roa (raw, json)
Hash identifier: gwotRSJ65GHzaAgickzT+14Eu+d4J6OxwBiElpbM2vw=
Subject key identifier: 5C:A6:25:A9:62:47:A6:19:D0:B7:27:23:E2:07:C7:EF:04:0D:83:9F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EA5CACC84E16E0A6C12C042F120A3CAEF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XKYlqWJHphnQtycj4gfH7wQNg58.roa
Signing time: Mon 08 Jun 2026 05:53:11 +0000
ROA not before: Mon 08 Jun 2026 05:53:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150249
IP address blocks: 31.56.30.0/24 maxlen: 24
31.56.43.0/24 maxlen: 24
31.56.192.0/24 maxlen: 24
31.58.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:ca:cc:84:e1:6e:0a:6c:12:c0:42:f1:20:a3:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 8 05:53:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ca625a96247a619d0b72723e207c7ef040d839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:81:1b:34:03:32:a4:87:99:b7:fa:44:32:
07:ad:10:9d:be:be:a0:03:eb:50:8a:8f:f4:7e:cf:
5c:be:e4:c0:5d:f8:34:e7:95:f7:03:7b:65:26:db:
bb:96:c4:53:d9:fc:32:db:4e:0b:9b:b7:7b:a5:bb:
c9:b9:70:9f:d0:17:59:6d:e2:86:ef:e1:74:41:3e:
f5:85:11:c0:6c:9b:72:1e:d8:a3:e8:4a:d0:05:00:
df:1f:87:ff:69:76:79:26:28:6b:48:59:4e:7a:94:
05:dc:2f:72:a0:3a:c3:bd:6f:78:cb:0c:9a:0c:78:
14:01:4a:4b:7f:98:e6:b8:dc:de:96:c9:30:a9:74:
32:9b:06:ca:0d:33:cf:42:4f:b8:58:3e:a3:72:4a:
04:ab:a5:57:29:f3:f6:f5:2d:b4:5e:ab:80:50:27:
4c:44:15:4d:47:29:ac:81:e7:b9:7c:ae:ec:72:3b:
58:2a:4b:de:fc:b5:82:2d:5d:11:a8:cb:43:44:2f:
1a:b0:79:e5:eb:ad:6c:34:7b:d8:b0:a9:74:b9:0d:
47:18:3e:08:d9:c8:3c:e6:95:73:df:ac:89:dd:1a:
0b:53:5f:bc:a6:ff:2d:7d:5a:74:09:51:25:94:db:
5b:a9:0e:f0:4c:6f:e9:5f:1b:62:cf:51:51:99:a1:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:25:A9:62:47:A6:19:D0:B7:27:23:E2:07:C7:EF:04:0D:83:9F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XKYlqWJHphnQtycj4gfH7wQNg58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.30.0/24
31.56.43.0/24
31.56.192.0/24
31.58.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b8:d6:d1:32:7f:0f:90:ff:01:5c:fd:23:53:96:31:ee:b6:
d7:62:8c:fa:a2:ea:ef:c2:49:7f:17:5c:8b:6e:56:9f:40:b6:
a3:0a:23:ea:ba:00:a6:52:57:ac:cb:b7:df:a0:59:ea:9f:28:
90:55:e6:c8:9a:e6:84:c5:ec:e5:54:bf:d7:43:b9:bf:2d:57:
7d:f7:3a:c3:78:02:dc:7c:83:32:93:06:59:40:b9:ac:fb:69:
64:65:68:52:8c:fb:a3:3d:c4:4d:85:ec:03:93:eb:21:9c:d5:
15:2a:f0:fc:bb:d8:67:16:32:92:ee:b2:e7:5b:73:2e:12:8e:
dd:db:7b:3c:ce:cf:c9:73:8e:8a:c7:31:ba:2c:bd:d8:8e:6a:
de:24:c3:35:c6:d5:04:22:73:cf:5e:18:7c:2c:2f:e1:69:1b:
f5:fd:d8:9e:ca:29:28:ad:91:47:35:77:ec:30:c8:79:37:d9:
07:be:32:d2:30:99:62:6b:fe:36:75:11:b4:65:19:33:a3:3b:
59:9d:5f:a0:ef:63:27:49:47:13:6b:6e:30:69:4e:e8:88:e4:
f4:3a:e0:88:1a:4d:9c:9d:85:16:ef:ac:19:32:bb:97:07:4b:
3d:f0:d3:b0:69:64:6f:8a:7a:ca:b1:3c:07:4c:96:a9:8e:80:
a3:02:1e:6c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6lysyE4W4KbBLAQvEgo8rvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjA4MDU1MzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2E2MjVhOTYyNDdhNjE5ZDBiNzI3MjNlMjA3YzdlZjA0MGQ4MzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GOBGzQDMqSHmbf6RDIHrRCdvr6g
A+tQio/0fs9cvuTAXfg055X3A3tlJtu7lsRT2fwy204Lm7d7pbvJuXCf0BdZbeKG
7+F0QT71hRHAbJtyHtij6ErQBQDfH4f/aXZ5JihrSFlOepQF3C9yoDrDvW94ywya
DHgUAUpLf5jmuNzelskwqXQymwbKDTPPQk+4WD6jckoEq6VXKfP29S20XquAUCdM
RBVNRymsgee5fK7scjtYKkve/LWCLV0RqMtDRC8asHnl661sNHvYsKl0uQ1HGD4I
2cg85pVz36yJ3RoLU1+8pv8tfVp0CVEllNtbqQ7wTG/pXxtiz1FRmaEwqwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFymJaliR6YZ0LcnI+IHx+8EDYOfMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWEtZbHFXSkhwaG5RdHljajRnZkg3d1FOZzU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzgeAwQA
HzgrAwQAHzjAAwQAHzo5MA0GCSqGSIb3DQEBCwUAA4IBAQC1uNbRMn8PkP8BXP0j
U5Yx7rbXYoz6ourvwkl/F1yLblafQLajCiPqugCmUlesy7ffoFnqnyiQVebImuaE
xezlVL/XQ7m/LVd99zrDeALcfIMykwZZQLms+2lkZWhSjPujPcRNhewDk+shnNUV
KvD8u9hnFjKS7rLnW3MuEo7d23s8zs/Jc46KxzG6LL3YjmreJMM1xtUEInPPXhh8
LC/haRv1/dieyikorZFHNXfsMMh5N9kHvjLSMJlia/42dRG0ZRkzoztZnV+g72Mn
SUcTa24waU7oiOT0OuCIGk2cnYUW76wZMruXB0s98NOwaWRvinrKsTwHTJapjoCj
Ah5s
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:41:20 2026 by rpki-client