Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tYwnL3LOyFOWoL7IutELgMimSYs.roa
File: tYwnL3LOyFOWoL7IutELgMimSYs.roa (raw, json)
Hash identifier: ZM3TJ8+0t/aPyxoVCQ7XaQOajFudxJKiUTRtqYFLgXM=
Subject key identifier: B5:8C:27:2F:72:CE:C8:53:96:A0:BE:C8:BA:D1:0B:80:C8:A6:49:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C054D84D6599FB51ECDD088AF5AE9DC20
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tYwnL3LOyFOWoL7IutELgMimSYs.roa
Signing time: Wed 28 Jan 2026 15:51:32 +0000
ROA not before: Wed 28 Jan 2026 15:51:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 31.59.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:05:4d:84:d6:59:9f:b5:1e:cd:d0:88:af:5a:e9:dc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 28 15:51:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b58c272f72cec85396a0bec8bad10b80c8a6498b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:aa:1b:5b:9e:33:91:50:6c:ce:51:8d:f9:
4b:26:4d:ad:b0:09:bb:37:7c:1d:e2:ce:cb:47:7b:
ec:7b:bb:80:14:71:fd:ea:b0:69:30:ab:2e:ce:d6:
0b:c1:89:95:1d:a0:28:68:64:ef:a8:14:df:d7:ca:
be:19:8f:fc:5e:29:9b:32:a5:05:bf:40:a9:f8:42:
e5:2d:df:b6:90:29:9d:a4:7c:ca:c3:c9:f9:d3:32:
cd:f7:c7:d7:2b:45:c0:67:9d:62:28:69:a0:bc:92:
44:04:1e:60:ef:93:2c:e7:6a:a8:16:83:17:5f:85:
26:14:d0:5b:7b:cd:6f:3b:9c:46:10:24:a0:ea:f3:
36:2e:2b:7f:30:fc:4c:65:ce:13:86:15:b5:c8:62:
48:22:f3:6e:f0:b9:6e:82:50:57:d8:0e:41:ac:50:
6c:27:f5:01:aa:b8:3f:06:7c:d7:db:83:9c:13:46:
9f:64:32:64:11:11:12:77:9c:02:12:03:10:ab:1c:
3c:13:76:7e:25:a4:4b:4e:fb:81:5e:f7:8a:4a:a4:
03:3b:21:46:28:60:8f:3e:c5:d0:28:cd:5e:d9:d0:
33:7f:01:c2:31:26:aa:d8:36:6d:90:29:95:74:11:
53:be:98:dc:fb:69:0e:74:26:a9:f1:e1:1f:f6:6e:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:27:2F:72:CE:C8:53:96:A0:BE:C8:BA:D1:0B:80:C8:A6:49:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tYwnL3LOyFOWoL7IutELgMimSYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.57.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ff:79:33:11:5b:55:bf:9b:c7:5f:80:6f:95:4d:f9:87:fc:
18:88:36:6d:c6:50:7c:91:bc:f6:95:de:f9:27:17:e2:2b:ff:
5b:73:8b:24:ce:c1:b2:1a:a8:af:ea:3f:a4:da:46:28:21:a2:
c4:1c:92:97:0a:49:aa:d5:e4:0c:02:b0:db:28:10:90:e5:aa:
7f:ba:2e:d4:36:ab:43:d4:ac:17:7d:05:4d:36:6b:13:d9:e9:
0c:75:33:af:6b:0d:3f:46:7a:24:ef:0e:7e:2d:ed:5f:ef:98:
23:d3:2d:25:7f:38:42:a3:6c:4b:c5:d2:9e:66:70:2b:e7:5c:
5b:b7:50:ac:15:0f:c1:1b:04:77:59:8c:3c:8e:25:45:4f:70:
fd:00:fd:04:e7:6d:e1:31:c6:42:45:98:08:11:6c:0f:6d:6d:
fe:3e:69:31:83:92:58:ff:5c:ed:a2:ae:b8:4d:29:e2:e1:ff:
b5:db:d3:40:5f:6d:51:84:98:df:8a:46:8c:d2:2d:d6:48:2e:
b8:f4:73:ff:6f:d4:f8:a0:1c:5c:6c:8e:11:4b:01:6e:30:f8:
10:92:e2:8b:16:81:ba:ed:c6:a7:68:04:b1:4d:10:7b:ad:e2:
9b:d0:f6:3b:6a:3c:c9:2d:af:15:7d:5d:ea:50:0c:cf:2b:c9:
fd:00:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:46 2026 by rpki-client