Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5mryxsdyo27Sw_lMGtl0ohUuXiI.roa
File: 5mryxsdyo27Sw_lMGtl0ohUuXiI.roa (raw, json)
Hash identifier: 2h2vrSF2VCmcjEwZ5+MjuHoeemkAJz+sVXLl1xdq5i4=
Subject key identifier: E6:6A:F2:C6:C7:72:A3:6E:D2:C3:F9:4C:1A:D9:74:A2:15:2E:5E:22
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A01999DC81C4012193DCE7902ED2F3058A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5mryxsdyo27Sw_lMGtl0ohUuXiI.roa
Signing time: Wed 19 Aug 2026 10:38:28 +0000
ROA not before: Wed 19 Aug 2026 10:38:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200579
IP address blocks: 31.58.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:99:dc:81:c4:01:21:93:dc:e7:90:2e:d2:f3:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 19 10:38:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e66af2c6c772a36ed2c3f94c1ad974a2152e5e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:fa:4c:37:4e:fa:f3:5a:2f:03:da:c5:c6:
16:9f:f1:6e:f1:f5:60:ec:25:c7:a4:02:c3:89:9a:
d2:4d:96:ca:9b:27:e0:70:16:cc:cb:e3:79:4d:d6:
9d:5b:63:56:cd:1f:aa:ca:5d:c7:03:03:3d:2a:a8:
05:6b:20:4f:b8:1f:70:95:dd:39:a4:14:68:8c:e7:
0e:7f:c2:3b:60:86:48:67:0b:e5:e3:9a:cd:89:ac:
ab:a8:df:c0:84:db:2e:e2:61:a6:d3:98:4d:a4:a4:
b7:d9:3c:ac:cc:8d:79:60:74:9d:f9:0f:a0:5e:0e:
22:c0:70:a3:67:29:25:e7:dd:f4:06:0f:e7:86:95:
65:95:91:ac:76:81:85:29:87:f2:fc:9c:30:ef:ee:
25:0c:18:04:0b:2b:db:4f:9b:57:2a:75:ed:e5:db:
36:a6:88:bc:5a:00:42:fb:7c:ba:44:8f:a1:d4:58:
ae:11:d9:17:a4:8d:8b:ea:b6:23:81:f8:e5:54:ac:
a9:40:89:7c:54:ab:e7:c0:e5:88:d1:16:06:e6:46:
72:15:13:ef:66:9b:ab:67:eb:7d:cf:ae:a9:9c:eb:
e6:ed:12:33:88:ac:d3:60:f8:f9:ac:64:85:45:62:
b9:28:90:e5:8a:bd:d6:23:e7:f3:34:e8:c6:c2:b8:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6A:F2:C6:C7:72:A3:6E:D2:C3:F9:4C:1A:D9:74:A2:15:2E:5E:22
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5mryxsdyo27Sw_lMGtl0ohUuXiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.217.0/24
Signature Algorithm: sha256WithRSAEncryption
16:d5:b2:f3:76:2f:a4:9d:4a:0a:a6:7a:35:f8:f3:8c:e5:63:
7a:e3:df:3c:c1:4c:dc:3d:93:03:37:55:c9:6a:c4:7b:69:3b:
ab:b8:f3:09:6c:52:04:89:fd:66:7b:8a:b7:51:26:9f:a2:d5:
29:ac:82:43:d2:47:bf:a9:e4:67:b4:1f:27:8c:b1:da:a4:12:
ad:58:ce:19:69:0f:3f:97:de:e5:11:95:1c:1b:6a:2b:1b:f6:
c9:2f:74:78:94:bc:4d:76:ba:c0:01:8e:55:01:dd:0e:2f:57:
f8:2b:fe:5c:37:62:e4:43:2c:ee:c3:f2:fb:aa:27:b6:db:93:
74:ef:8c:b1:4c:15:d2:eb:da:5b:28:a0:83:43:50:25:4c:d7:
f0:d1:81:be:0d:c6:72:14:18:1d:df:ca:81:f5:bf:38:34:b7:
1a:cf:ea:40:11:ac:8e:d0:c2:20:0f:18:f3:37:12:d6:38:87:
a5:36:10:73:c0:a7:45:8b:0f:c4:98:4f:62:07:f8:8e:60:d5:
c1:1b:43:97:7c:48:9e:f5:ca:d4:6d:f7:02:c8:92:37:5a:ae:
90:ea:32:be:0e:76:bf:80:8b:51:af:19:fc:7e:1b:53:de:68:
ec:1a:e8:f4:91:dc:19:02:c4:60:46:12:b0:3f:2c:b6:5f:c8:
33:85:3d:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAZmdyBxAEhk9znkC7S8wWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODE5MTAzODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjZhZjJjNmM3NzJhMzZlZDJjM2Y5NGMxYWQ5NzRhMjE1MmU1ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW/6TDdO+vNaLwPaxcYWn/Fu8fVg
7CXHpALDiZrSTZbKmyfgcBbMy+N5TdadW2NWzR+qyl3HAwM9KqgFayBPuB9wld05
pBRojOcOf8I7YIZIZwvl45rNiayrqN/AhNsu4mGm05hNpKS32TyszI15YHSd+Q+g
Xg4iwHCjZykl5930Bg/nhpVllZGsdoGFKYfy/Jww7+4lDBgECyvbT5tXKnXt5ds2
poi8WgBC+3y6RI+h1FiuEdkXpI2L6rYjgfjlVKypQIl8VKvnwOWI0RYG5kZyFRPv
ZpurZ+t9z66pnOvm7RIziKzTYPj5rGSFRWK5KJDlir3WI+fzNOjGwrg4qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOZq8sbHcqNu0sP5TBrZdKIVLl4iMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNW1yeXhzZHlvMjdTd19sTUd0bDBvaFV1WGlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrZMA0G
CSqGSIb3DQEBCwUAA4IBAQAW1bLzdi+knUoKpno1+POM5WN64988wUzcPZMDN1XJ
asR7aTuruPMJbFIEif1me4q3USafotUprIJD0ke/qeRntB8njLHapBKtWM4ZaQ8/
l97lEZUcG2orG/bJL3R4lLxNdrrAAY5VAd0OL1f4K/5cN2LkQyzuw/L7qie225N0
74yxTBXS69pbKKCDQ1AlTNfw0YG+DcZyFBgd38qB9b84NLcaz+pAEayO0MIgDxjz
NxLWOIelNhBzwKdFiw/EmE9iB/iOYNXBG0OXfEie9crUbfcCyJI3Wq6Q6jK+Dna/
gItRrxn8fhtT3mjsGuj0kdwZAsRgRhKwPyy2X8gzhT2q
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:37 2026 by rpki-client