Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YRp0CV6RVHQXbHJT136s81qJHHY.roa
File: YRp0CV6RVHQXbHJT136s81qJHHY.roa (raw, json)
Hash identifier: UuFrlsyWYHpUX3cJ0dD43P0Jr3RCuU6Q67cgNgzDzb4=
Subject key identifier: 61:1A:74:09:5E:91:54:74:17:6C:72:53:D7:7E:AC:F3:5A:89:1C:76
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C61BB0D21E4CCEC3C72CFC966C52A3575
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YRp0CV6RVHQXbHJT136s81qJHHY.roa
Signing time: Sun 15 Feb 2026 14:36:14 +0000
ROA not before: Sun 15 Feb 2026 14:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 31.56.125.0/24 maxlen: 24
31.58.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:61:bb:0d:21:e4:cc:ec:3c:72:cf:c9:66:c5:2a:35:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 15 14:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=611a74095e915474176c7253d77eacf35a891c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:36:8d:9d:1e:73:4b:39:21:c7:02:fd:17:
81:2d:3f:82:72:06:c6:6c:34:d4:30:27:48:e0:29:
2d:42:1e:a6:0f:6d:11:ee:df:fe:dd:60:a7:01:f8:
33:3c:6f:0c:84:5a:58:46:d8:68:dd:d7:61:1e:b5:
27:cb:55:f4:67:dc:84:b7:cd:34:2a:d2:e4:7f:1e:
13:6d:78:51:bc:09:64:ad:8c:8b:83:40:16:26:b6:
70:46:63:e4:52:0f:9a:b6:7b:7e:83:37:04:bd:d7:
4e:ec:46:0a:fd:c6:1e:20:95:f3:86:52:11:d2:a4:
93:83:05:b9:7a:48:86:85:d7:fe:62:df:4c:f9:26:
f5:6a:ce:c4:cf:56:d5:36:cd:99:87:19:51:02:68:
3b:2c:81:bf:1e:dc:21:b4:81:af:03:b3:7f:2f:0d:
bb:24:4b:c7:b4:12:f8:6e:3e:86:36:b9:40:18:91:
6a:30:f6:ed:77:7f:6a:a4:cf:24:1d:29:e8:03:d7:
b8:1b:24:d5:b6:da:3d:31:3f:b0:f3:a1:e1:da:37:
19:bf:4f:24:78:a3:9d:e2:dd:b2:0b:55:5a:15:1a:
f2:81:4e:53:58:0e:ee:cf:0e:e3:2d:01:a0:2c:00:
c7:e3:1f:9d:37:d9:71:ac:99:42:c3:8b:07:34:9b:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1A:74:09:5E:91:54:74:17:6C:72:53:D7:7E:AC:F3:5A:89:1C:76
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/YRp0CV6RVHQXbHJT136s81qJHHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.125.0/24
31.58.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:3e:6a:41:61:8f:94:f3:8c:2e:99:40:59:4d:d6:9b:c0:65:
2f:30:37:cf:14:dc:c8:9f:c1:a1:64:82:d1:95:f2:11:12:16:
ba:57:1e:49:54:ac:e8:10:34:ae:8b:cc:db:08:4b:4c:9e:2a:
09:e7:59:55:5f:0c:cd:e3:15:98:2c:4b:59:c2:c3:1e:8c:ea:
8a:e8:c6:a6:0d:01:2a:ea:dc:f8:6c:2d:8f:1f:8b:ba:32:b9:
5f:78:36:7c:95:72:39:53:e1:55:56:08:57:e5:a0:4a:62:40:
b1:51:13:dc:69:77:5f:31:3b:d1:1f:8f:47:b5:2e:a2:17:b0:
39:8c:b9:d2:72:7b:de:2c:bd:76:80:cd:4d:a6:24:2d:46:a5:
a6:17:59:2b:58:02:0c:96:a3:b2:a5:43:2f:36:1e:94:f2:0d:
9d:27:26:2f:97:90:e5:2d:2e:a3:e4:eb:8a:72:60:28:56:34:
81:00:da:a2:72:83:0a:c3:d2:87:17:7a:c2:18:49:ac:5a:87:
c7:01:46:cd:f4:19:43:3a:59:e9:d6:49:c3:f3:ad:fc:71:1d:
51:f0:ff:16:08:fe:3c:39:6d:58:47:bf:8b:0b:77:2b:84:43:
1f:7e:78:58:06:dc:c5:45:fd:c1:37:6a:dd:18:d9:63:86:34:
e6:e7:00:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxhuw0h5MzsPHLPyWbFKjV1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjE1MTQzNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTFhNzQwOTVlOTE1NDc0MTc2YzcyNTNkNzdlYWNmMzVhODkxYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Q2jZ0ec0s5IccC/ReBLT+CcgbG
bDTUMCdI4CktQh6mD20R7t/+3WCnAfgzPG8MhFpYRtho3ddhHrUny1X0Z9yEt800
KtLkfx4TbXhRvAlkrYyLg0AWJrZwRmPkUg+atnt+gzcEvddO7EYK/cYeIJXzhlIR
0qSTgwW5ekiGhdf+Yt9M+Sb1as7Ez1bVNs2ZhxlRAmg7LIG/HtwhtIGvA7N/Lw27
JEvHtBL4bj6GNrlAGJFqMPbtd39qpM8kHSnoA9e4GyTVtto9MT+w86Hh2jcZv08k
eKOd4t2yC1VaFRrygU5TWA7uzw7jLQGgLADH4x+dN9lxrJlCw4sHNJv48QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGEadAlekVR0F2xyU9d+rPNaiRx2MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWVJwMENWNlJWSFFYYkhKVDEzNnM4MXFKSEhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzh9AwQA
HzqLMA0GCSqGSIb3DQEBCwUAA4IBAQBsPmpBYY+U84wumUBZTdabwGUvMDfPFNzI
n8GhZILRlfIREha6Vx5JVKzoEDSui8zbCEtMnioJ51lVXwzN4xWYLEtZwsMejOqK
6MamDQEq6tz4bC2PH4u6MrlfeDZ8lXI5U+FVVghX5aBKYkCxURPcaXdfMTvRH49H
tS6iF7A5jLnScnveLL12gM1NpiQtRqWmF1krWAIMlqOypUMvNh6U8g2dJyYvl5Dl
LS6j5OuKcmAoVjSBANqicoMKw9KHF3rCGEmsWofHAUbN9BlDOlnp1knD8638cR1R
8P8WCP48OW1YR7+LC3crhEMffnhYBtzFRf3BN2rdGNljhjTm5wDM
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:28:49 2026 by rpki-client