Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vzSSfpf5ArZ12mvA5-KFZFW7tDI.roa
File: vzSSfpf5ArZ12mvA5-KFZFW7tDI.roa (raw, json)
Hash identifier: V4ROGZPl/egu92i1HjTaZweVuNv+zQ+ZNZnJGJ1q1Ds=
Subject key identifier: BF:34:92:7E:97:F9:02:B6:75:DA:6B:C0:E7:E2:85:64:55:BB:B4:32
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C39C89BFF285BF865C4D51BFD16C7713B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vzSSfpf5ArZ12mvA5-KFZFW7tDI.roa
Signing time: Sat 07 Feb 2026 20:26:14 +0000
ROA not before: Sat 07 Feb 2026 20:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214762
IP address blocks: 31.59.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:39:c8:9b:ff:28:5b:f8:65:c4:d5:1b:fd:16:c7:71:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 7 20:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf34927e97f902b675da6bc0e7e2856455bbb432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:89:a7:64:a9:33:80:b8:34:1d:91:80:89:
ad:28:4c:ce:b4:02:bf:a7:e4:08:48:e2:b6:ee:72:
7b:c4:21:25:c6:ee:95:f1:45:a5:a5:1a:d6:6e:e9:
82:ed:56:4a:77:1a:88:2e:a8:9b:2b:d2:a3:3d:00:
08:0a:f3:e0:e3:3a:5c:0e:5a:47:8c:35:0f:61:d0:
af:99:2b:aa:93:01:cb:be:04:46:24:75:89:a6:85:
e9:25:03:b8:b2:a6:10:2d:bc:cd:ea:3f:c5:77:54:
38:79:05:95:af:28:b9:04:f3:bd:22:b2:52:24:35:
aa:90:48:da:fc:26:aa:5f:d7:bf:a5:a1:83:8a:f6:
a5:8b:fc:ca:06:23:e4:33:8d:e8:9d:fe:6f:93:5e:
c7:50:d6:dd:8f:9d:17:30:ac:a4:95:d7:9e:0c:1d:
3f:df:13:8d:c2:4e:2f:e0:30:96:4b:7a:2c:62:e6:
7d:a3:fc:61:d1:6e:b3:2a:c6:1e:e1:e2:18:34:68:
c1:9d:8f:10:ad:d9:44:13:14:68:23:94:06:75:a4:
2f:d2:ea:1d:94:fb:dd:d0:1a:e2:fc:27:4b:24:6f:
fc:c8:ef:99:be:05:4a:1c:10:5c:d4:ef:65:c7:b2:
96:4b:83:0d:a1:4f:dd:0d:fe:13:7f:2e:eb:2c:b1:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:34:92:7E:97:F9:02:B6:75:DA:6B:C0:E7:E2:85:64:55:BB:B4:32
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vzSSfpf5ArZ12mvA5-KFZFW7tDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4a:2c:00:21:3f:ac:e5:0a:1c:09:63:82:41:c3:84:b8:fc:
ab:49:fd:3d:db:f2:8a:2d:e7:7c:7e:34:bb:d8:a6:ad:53:a4:
a8:60:2f:a4:eb:b7:31:d1:e2:e8:2a:ce:15:b8:d9:4a:d0:11:
6a:e1:a1:8b:62:d1:b5:0c:f4:73:92:15:78:aa:58:55:fd:db:
60:93:c2:83:eb:d0:06:99:09:3f:f1:5b:7a:43:e1:d7:c8:64:
7e:4f:ae:19:8d:e2:b9:d0:3a:9c:f9:96:4f:23:35:c6:76:da:
1c:dd:f3:ba:68:3d:bb:1f:8a:19:a7:0e:82:a0:2d:39:d7:5f:
3a:90:ef:61:56:a1:4c:a2:af:51:1a:0b:be:d5:11:4e:c5:71:
f2:8e:c1:6b:03:1e:e7:32:d2:e8:f0:13:49:be:76:cc:bd:35:
ce:fe:b4:d7:9a:4f:25:cc:d4:6c:77:d8:4f:27:32:62:ea:f7:
52:f0:50:ef:e7:cf:20:19:11:09:e2:28:cb:29:25:df:25:a1:
46:b7:0c:50:93:9d:ba:45:11:31:7c:83:f8:7f:67:98:03:a6:
ad:c7:c9:f0:2b:52:9e:62:f7:c3:e6:f5:82:32:ab:cb:80:53:
49:83:4f:55:6e:53:6b:02:47:d5:78:15:c2:8c:6e:20:55:db:
d6:7a:c7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:07:49 2026 by rpki-client