Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bgGXPLr_KmT7h7XWuflpvym_GaI.roa
File: bgGXPLr_KmT7h7XWuflpvym_GaI.roa (raw, json)
Hash identifier: E1xbyTsLw41ddWzJr2gbqTzRbQmsNZ1sLLDqagTs33A=
Subject key identifier: 6E:01:97:3C:BA:FF:2A:64:FB:87:B5:D6:B9:F9:69:BF:29:BF:19:A2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0628951D0F6767A792059C1A8DAF5656D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bgGXPLr_KmT7h7XWuflpvym_GaI.roa
Signing time: Wed 02 Sep 2026 14:32:41 +0000
ROA not before: Wed 02 Sep 2026 14:32:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402931
IP address blocks: 31.59.64.0/22 maxlen: 24
31.59.64.0/24 maxlen: 24
31.59.65.0/24 maxlen: 24
31.59.66.0/24 maxlen: 24
31.59.67.0/24 maxlen: 24
31.59.204.0/24 maxlen: 24
31.59.205.0/24 maxlen: 24
31.59.206.0/24 maxlen: 24
31.59.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:89:51:d0:f6:76:7a:79:20:59:c1:a8:da:f5:65:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 14:32:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e01973cbaff2a64fb87b5d6b9f969bf29bf19a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:b5:0f:a5:04:79:6c:c8:f8:1d:5e:b7:91:
a7:d1:57:9b:08:d6:3f:e0:5b:03:30:14:62:1d:6c:
84:9b:1f:f1:12:e7:91:85:06:a7:03:38:96:67:80:
15:4a:34:6b:37:13:0d:a0:00:eb:24:ff:a9:7b:5d:
db:c7:35:ff:9e:3d:61:42:47:4b:73:5a:ef:49:dc:
ba:37:8a:c2:3e:64:eb:55:b8:72:f5:75:bc:a9:99:
ee:1e:0a:3f:f2:c3:4f:17:01:c1:bb:6a:07:9d:00:
37:ec:9a:ab:01:46:62:54:2c:05:28:62:af:da:ab:
f7:27:8b:16:bc:d3:7a:e3:b1:da:7f:cf:42:79:46:
da:25:40:47:87:e1:de:84:ab:59:2a:e3:47:75:6c:
19:1b:b9:ef:6e:7a:c3:a8:3b:9d:85:51:f0:d3:c9:
7d:76:92:2c:da:53:66:c6:84:72:91:ec:85:03:72:
c5:ec:76:51:2d:80:a9:e7:71:f7:36:e6:de:30:5a:
6e:c3:d8:f5:8b:df:42:18:07:65:3a:ba:b2:2f:78:
7c:32:b8:26:7c:02:ee:3d:c8:5f:3f:c6:7b:db:9a:
19:39:0c:64:0b:2c:2a:39:aa:5c:33:b0:42:68:41:
58:99:43:99:7d:7b:e6:3a:fa:42:27:2b:d7:00:5a:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:01:97:3C:BA:FF:2A:64:FB:87:B5:D6:B9:F9:69:BF:29:BF:19:A2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bgGXPLr_KmT7h7XWuflpvym_GaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.64.0/22
31.59.204.0/22
Signature Algorithm: sha256WithRSAEncryption
07:82:89:ff:1b:44:d3:d8:37:8d:6b:72:93:24:d2:39:59:bd:
47:73:fb:95:37:9a:40:2d:5b:15:31:c4:99:e7:52:a2:53:25:
e9:d0:6c:a0:72:b7:e5:f8:72:c7:d7:b5:88:08:e0:29:8f:71:
7a:c9:f5:71:0c:55:0f:89:37:6f:4a:8c:5b:e6:66:28:38:95:
32:bc:bd:3d:4c:9c:c8:b3:6e:16:24:18:57:d6:f9:98:cf:63:
65:b8:31:c3:5e:8b:ab:02:86:8c:13:71:50:ea:6d:e1:ae:37:
82:4d:90:f4:62:16:64:3d:29:d9:b0:c5:41:7a:8f:48:9c:52:
0a:d2:b7:16:6a:df:5a:6e:6e:4e:05:30:a9:61:9d:47:a4:07:
00:a4:dd:92:58:2d:d9:87:b7:74:65:f0:4a:5e:41:65:b7:fd:
39:de:70:07:6a:36:69:52:9d:2b:93:4f:08:e2:e6:29:78:19:
57:f6:e4:6d:69:59:ef:77:f8:7d:f5:4d:0f:6b:44:e8:8a:77:
c8:98:fb:45:56:ac:d4:27:48:09:2a:f2:7b:93:d1:e3:32:93:
08:e3:56:ef:84:4c:18:cf:32:c2:96:13:b7:92:c6:55:58:84:
9f:7a:c1:7f:33:c6:6f:0d:d1:eb:79:d6:da:42:1c:9a:89:40:
1b:c9:ff:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaBiiVHQ9nZ6eSBZwaja9WVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTAyMTQzMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTAxOTczY2JhZmYyYTY0ZmI4N2I1ZDZiOWY5NjliZjI5YmYxOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI61D6UEeWzI+B1et5Gn0VebCNY/
4FsDMBRiHWyEmx/xEueRhQanAziWZ4AVSjRrNxMNoADrJP+pe13bxzX/nj1hQkdL
c1rvSdy6N4rCPmTrVbhy9XW8qZnuHgo/8sNPFwHBu2oHnQA37JqrAUZiVCwFKGKv
2qv3J4sWvNN647Haf89CeUbaJUBHh+HehKtZKuNHdWwZG7nvbnrDqDudhVHw08l9
dpIs2lNmxoRykeyFA3LF7HZRLYCp53H3NubeMFpuw9j1i99CGAdlOrqyL3h8Mrgm
fALuPchfP8Z725oZOQxkCywqOapcM7BCaEFYmUOZfXvmOvpCJyvXAFrC2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG4Blzy6/ypk+4e11rn5ab8pvxmiMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYmdHWFBMcl9LbVQ3aDdYV3VmbHB2eW1fR2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCHztAAwQC
HzvMMA0GCSqGSIb3DQEBCwUAA4IBAQAHgon/G0TT2DeNa3KTJNI5Wb1Hc/uVN5pA
LVsVMcSZ51KiUyXp0Gygcrfl+HLH17WICOApj3F6yfVxDFUPiTdvSoxb5mYoOJUy
vL09TJzIs24WJBhX1vmYz2NluDHDXourAoaME3FQ6m3hrjeCTZD0YhZkPSnZsMVB
eo9InFIK0rcWat9abm5OBTCpYZ1HpAcApN2SWC3Zh7d0ZfBKXkFlt/053nAHajZp
Up0rk08I4uYpeBlX9uRtaVnvd/h99U0Pa0ToinfImPtFVqzUJ0gJKvJ7k9HjMpMI
41bvhEwYzzLClhO3ksZVWISfesF/M8ZvDdHredbaQhyaiUAbyf98
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:03 2026 by rpki-client