Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lB5Gi2MuKjN8HhTTSvburQr2W94.roa
File: lB5Gi2MuKjN8HhTTSvburQr2W94.roa (raw, json)
Hash identifier: tGkynY4qA8J4MEC78dYa93ZYCR7KbACLDxTTUkTAqtM=
Subject key identifier: 94:1E:46:8B:63:2E:2A:33:7C:1E:14:D3:4A:F6:EE:AD:0A:F6:5B:DE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C3D65498278FBE396D35F94B747E7F7C3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lB5Gi2MuKjN8HhTTSvburQr2W94.roa
Signing time: Sun 08 Feb 2026 13:16:14 +0000
ROA not before: Sun 08 Feb 2026 13:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 31.57.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3d:65:49:82:78:fb:e3:96:d3:5f:94:b7:47:e7:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 8 13:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=941e468b632e2a337c1e14d34af6eead0af65bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:94:8e:cb:01:25:5a:de:89:66:71:32:38:
26:86:9d:15:c5:fb:34:a1:40:40:ba:d2:9d:1b:a6:
63:c8:c3:82:b7:d8:96:7f:42:47:d9:13:14:b0:da:
72:f8:d0:56:a7:c2:f8:9a:3d:3b:b8:c4:8a:82:2a:
dc:b1:25:41:7c:2f:9f:c1:eb:d7:64:a0:d7:25:12:
6d:ff:32:a4:f9:ee:a6:d8:5e:86:b8:bc:d3:1e:28:
ec:cb:b1:b7:98:12:0b:41:2a:52:ac:41:20:02:69:
5d:b3:fe:e0:c8:4f:41:42:f2:2a:9a:b2:ce:9b:18:
d3:85:5b:36:91:a5:a4:50:7e:62:59:40:c1:b7:4a:
f7:e0:d9:22:6d:d3:56:5c:68:b9:2b:b6:d1:42:a3:
c6:49:20:65:13:17:d9:c9:c2:0a:44:4b:6d:90:f2:
45:ac:bf:4b:a2:2b:33:c7:9d:8e:56:7d:e8:7d:67:
2f:e4:2c:00:47:ce:17:37:dc:b6:f3:f1:a2:05:91:
d8:b8:72:ee:7a:95:9e:63:da:fa:f0:38:ac:51:47:
ed:ba:23:e1:51:1e:09:ab:c7:66:57:33:bc:f0:52:
d4:b3:32:27:05:8c:a2:a2:76:03:dd:8e:33:41:f7:
57:da:e0:c0:9c:9c:ab:ac:0e:84:e0:62:ff:a9:5c:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:46:8B:63:2E:2A:33:7C:1E:14:D3:4A:F6:EE:AD:0A:F6:5B:DE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lB5Gi2MuKjN8HhTTSvburQr2W94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b1:11:bf:8f:33:99:2c:77:2d:a7:cb:f4:cf:94:65:87:67:
99:44:13:f1:ae:de:d3:cd:ab:b2:f4:f8:3b:a9:33:44:26:ea:
1b:31:17:e1:61:e1:1b:10:27:67:fa:2d:e1:80:fd:b9:15:b4:
60:d7:cb:1b:4c:00:e7:b7:b3:c7:57:bc:64:65:d5:0d:de:30:
3a:09:d4:ca:1e:b0:37:fd:d0:25:25:b5:21:e9:d5:1a:e1:d2:
96:77:48:b9:56:42:dc:4b:20:20:42:3b:8c:26:6b:3c:a0:1f:
52:ef:46:bd:65:44:83:b6:67:b5:73:fa:73:56:99:73:76:6a:
59:e0:4b:c3:87:a1:f3:64:5a:53:a5:2c:eb:06:f0:c0:7a:a3:
2f:8b:49:dc:cc:9d:88:82:a9:f1:a5:9d:e2:2c:dc:9e:fd:5b:
40:1d:16:83:8a:5e:47:21:39:1d:47:7f:e5:4f:f7:36:d1:1c:
b2:12:dc:bd:6c:fd:a5:71:0e:f7:51:48:08:e8:6d:7d:c2:72:
2e:ff:00:8e:ff:39:9b:86:14:fb:2a:34:38:d5:89:6d:95:80:
8e:75:d4:d9:13:99:72:11:97:3d:fa:80:22:d7:ff:e3:cb:24:
5c:d4:ea:f9:ae:94:b1:18:ff:b4:35:4f:9c:c0:66:3a:4a:85:
19:2c:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:22 2026 by rpki-client