Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mV75JAJvucDncEJJ19DP37hGKyo.roa
File: mV75JAJvucDncEJJ19DP37hGKyo.roa (raw, json)
Hash identifier: 8TlDw7aKAuQykFXxLuOHDZ3RRkqENhc/5gnqBpCzmtI=
Subject key identifier: 99:5E:F9:24:02:6F:B9:C0:E7:70:42:49:D7:D0:CF:DF:B8:46:2B:2A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CA04A9631BDB6D7F1133F1F80827855E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mV75JAJvucDncEJJ19DP37hGKyo.roa
Signing time: Fri 27 Feb 2026 18:09:28 +0000
ROA not before: Fri 27 Feb 2026 18:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 31.57.129.0/24 maxlen: 24
31.58.36.0/24 maxlen: 24
31.58.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:4a:96:31:bd:b6:d7:f1:13:3f:1f:80:82:78:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 27 18:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=995ef924026fb9c0e7704249d7d0cfdfb8462b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a0:8a:08:17:e0:94:d3:92:60:c0:51:ab:5a:
ca:27:82:e2:5c:7b:fe:a9:ac:bd:dd:fb:4e:c7:09:
de:43:9d:41:47:bb:26:e0:d0:d1:af:7a:25:fa:9a:
8f:4c:b6:e6:bc:08:d1:0d:e5:e5:00:03:7c:75:98:
0d:05:14:04:7c:3f:94:0e:e3:d1:e3:41:c3:f3:c7:
50:0e:75:43:12:6d:c4:7b:1e:49:94:6a:ee:05:b7:
a0:89:b2:6d:f0:6e:e5:97:a4:cf:42:21:4b:4a:4c:
b2:94:44:a8:89:da:e3:51:d6:0f:53:37:84:df:ad:
4c:87:f5:14:d1:5c:a6:ff:ba:fc:e5:38:bc:73:10:
ac:b7:db:ee:67:6f:a7:ca:2f:e5:29:25:37:97:7b:
28:2f:af:cf:07:2c:6a:94:30:45:01:01:d4:8b:76:
30:cb:32:ad:f9:59:87:37:b0:0a:67:d8:fc:18:43:
7b:a1:5e:4c:14:ee:6b:ca:e5:01:22:bd:f0:ea:20:
48:72:c0:73:6a:73:11:2b:69:1e:64:dc:00:a5:c3:
63:60:c9:e8:85:e0:01:a1:64:11:88:7e:a8:ef:a9:
36:8e:76:2b:80:52:41:a3:b4:e6:07:77:e0:32:36:
b1:cb:1a:83:37:85:02:a7:74:14:1c:a5:9d:58:e1:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:F9:24:02:6F:B9:C0:E7:70:42:49:D7:D0:CF:DF:B8:46:2B:2A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mV75JAJvucDncEJJ19DP37hGKyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.129.0/24
31.58.36.0/24
31.58.139.0/24
Signature Algorithm: sha256WithRSAEncryption
55:13:55:86:af:40:84:a7:cd:db:d6:92:69:04:87:bd:17:6b:
30:75:0f:cc:cb:cc:d4:02:16:7f:45:5b:cd:13:20:e9:c7:d9:
22:07:fd:00:b3:2b:94:37:6d:ae:75:a5:01:46:0a:bf:5a:cd:
3d:c6:e3:8b:66:bd:c8:7e:a6:05:ef:71:24:42:f1:33:f3:89:
45:df:b3:be:70:6f:dc:75:f9:33:a7:34:e6:13:f0:69:33:c1:
71:88:86:b2:09:76:43:f6:fa:cb:03:fd:36:30:dc:1d:28:dc:
03:82:f4:72:90:1c:70:c4:5d:58:eb:a9:7b:1d:44:4b:8b:29:
aa:01:c4:b0:cd:3f:a6:d0:d6:a7:1c:6b:7c:1e:3a:1f:c5:bd:
e3:d0:4f:17:9a:f6:24:78:a0:37:23:52:96:56:b7:cf:72:e3:
e7:7a:61:d1:d3:b0:be:2a:58:84:24:74:f7:6c:3c:ab:f3:c8:
5b:6f:bd:15:49:86:32:1a:56:71:a9:ad:97:fd:15:b8:9d:af:
0a:5f:cf:ca:86:76:a8:20:85:2b:f6:4c:79:80:5a:18:7a:60:
b9:ea:d3:98:2a:ee:50:f0:a1:bb:5b:79:e4:48:af:37:dc:a9:
fc:d8:58:ce:09:66:05:50:1a:de:3f:92:2e:18:ab:7b:02:8f:
0d:11:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:20 2026 by rpki-client