Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/csfM9R9h835xFpvgmrpz4s0wpGo.roa
File: csfM9R9h835xFpvgmrpz4s0wpGo.roa (raw, json)
Hash identifier: lHjT48JWMFmd8MKvSSnO9oPA9vPN4pi3+fiJYCTLT3o=
Subject key identifier: 72:C7:CC:F5:1F:61:F3:7E:71:16:9B:E0:9A:BA:73:E2:CD:30:A4:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C55BD49F0F90AEDC5ACF21ACDFA7FBCD4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/csfM9R9h835xFpvgmrpz4s0wpGo.roa
Signing time: Fri 13 Feb 2026 06:43:14 +0000
ROA not before: Fri 13 Feb 2026 06:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 31.56.97.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:bd:49:f0:f9:0a:ed:c5:ac:f2:1a:cd:fa:7f:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 13 06:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72c7ccf51f61f37e71169be09aba73e2cd30a46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:65:f1:64:b0:7f:65:ed:53:27:7b:ae:bb:
a2:64:5d:d9:d5:2d:8a:b9:24:16:8b:46:d9:28:43:
69:7a:f5:12:cd:00:25:f3:9a:71:dd:ac:2c:5c:f9:
08:b0:e1:09:96:03:fe:42:24:54:5d:f1:b7:4d:3e:
07:55:06:f0:5c:9e:e0:b6:23:2b:9f:aa:42:d4:24:
e8:c4:b8:1c:02:70:5c:01:0e:7a:d7:43:b3:8c:b3:
3f:bf:29:9e:fc:0d:35:a9:d7:1d:3f:1b:bc:8e:e9:
87:84:2c:ba:4f:e4:4e:62:20:ac:d9:a1:2c:d3:7b:
5d:34:42:cc:45:95:77:a0:e0:42:10:11:4f:0c:58:
e1:fa:8c:fc:92:17:ad:de:97:3c:d0:01:d7:d5:4c:
4b:83:c2:a7:9b:07:99:c6:ca:75:e9:76:f5:9c:5f:
6b:8f:f8:b0:b0:1f:a1:cb:5b:2a:5b:dc:f6:98:51:
ab:f7:d3:d2:37:d4:79:cd:ac:e2:32:cc:94:c3:55:
19:3f:26:40:51:31:5e:4f:65:b5:da:09:b1:f8:30:
44:8a:a8:fa:f5:34:0f:6a:d0:b1:87:6f:17:84:1f:
95:06:b8:1c:e5:a7:e0:f1:d3:a9:9d:5f:ad:bf:60:
15:63:90:03:9a:9d:9a:32:41:ff:af:70:49:04:8e:
b3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C7:CC:F5:1F:61:F3:7E:71:16:9B:E0:9A:BA:73:E2:CD:30:A4:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/csfM9R9h835xFpvgmrpz4s0wpGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.97.0/24
31.58.141.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3f:d0:ba:a1:ec:e4:b8:77:de:60:d1:84:01:36:22:b5:d3:
f9:d9:ae:c5:7f:24:f9:76:95:22:e9:0b:f2:80:c9:88:af:bd:
68:e4:b8:79:79:de:a0:de:c8:86:41:a5:a6:41:31:1d:04:de:
76:cc:d1:90:fe:d9:a5:6b:7d:78:e6:0e:c9:5c:89:8b:d5:a6:
12:ad:58:1c:d3:6a:06:10:3b:35:cd:b4:a1:61:2b:62:9f:35:
f4:2e:18:1a:56:6f:77:e7:ed:51:b3:80:f4:31:67:77:1a:ad:
0e:13:69:c9:2d:da:8b:1b:16:f1:17:0a:72:0f:7a:00:29:62:
cf:bf:48:72:3f:49:03:fe:e1:a4:19:42:28:66:80:93:2d:69:
81:31:ee:0a:ba:80:be:64:42:a9:71:ca:36:6c:a3:68:c1:6a:
51:7b:e7:1c:36:c3:59:77:e5:0e:d4:bc:17:dc:ac:3f:34:90:
0b:50:4f:1a:56:52:aa:d9:5e:5c:57:08:aa:ef:c4:76:a1:9f:
75:32:1d:8f:c9:01:a5:8e:fa:f3:21:e0:e6:ef:78:8d:22:44:
56:9b:99:4d:9a:d1:2c:7d:44:8b:bb:b3:6c:f5:5b:5d:3a:32:
fb:4b:11:7b:a1:e3:97:d5:96:f6:14:83:2f:bd:a3:f2:3c:04:
b7:89:df:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZxVvUnw+QrtxazyGs36f7zUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjEzMDY0MzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmM3Y2NmNTFmNjFmMzdlNzExNjliZTA5YWJhNzNlMmNkMzBhNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yRl8WSwf2XtUyd7rruiZF3Z1S2K
uSQWi0bZKENpevUSzQAl85px3awsXPkIsOEJlgP+QiRUXfG3TT4HVQbwXJ7gtiMr
n6pC1CToxLgcAnBcAQ5610OzjLM/vyme/A01qdcdPxu8jumHhCy6T+ROYiCs2aEs
03tdNELMRZV3oOBCEBFPDFjh+oz8khet3pc80AHX1UxLg8KnmweZxsp16Xb1nF9r
j/iwsB+hy1sqW9z2mFGr99PSN9R5zaziMsyUw1UZPyZAUTFeT2W12gmx+DBEiqj6
9TQPatCxh28XhB+VBrgc5afg8dOpnV+tv2AVY5ADmp2aMkH/r3BJBI6zbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHLHzPUfYfN+cRab4Jq6c+LNMKRqMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvY3NmTTlSOWg4MzV4RnB2Z21ycHo0czB3cEdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhhAwQA
HzqNMA0GCSqGSIb3DQEBCwUAA4IBAQBpP9C6oezkuHfeYNGEATYitdP52a7FfyT5
dpUi6QvygMmIr71o5Lh5ed6g3siGQaWmQTEdBN52zNGQ/tmla3145g7JXImL1aYS
rVgc02oGEDs1zbShYStinzX0LhgaVm935+1Rs4D0MWd3Gq0OE2nJLdqLGxbxFwpy
D3oAKWLPv0hyP0kD/uGkGUIoZoCTLWmBMe4KuoC+ZEKpcco2bKNowWpRe+ccNsNZ
d+UO1LwX3Kw/NJALUE8aVlKq2V5cVwiq78R2oZ91Mh2PyQGljvrzIeDm73iNIkRW
m5lNmtEsfUSLu7Ns9VtdOjL7SxF7oeOX1Zb2FIMvvaPyPAS3id/Y
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:31 2026 by rpki-client