Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EHXoTsj2vSbolxP9eZI4EOpgl3o.roa
File: EHXoTsj2vSbolxP9eZI4EOpgl3o.roa (raw, json)
Hash identifier: LrPSwuFCumK0b7mPI/8HE44Wj27H9gbttTVGaBBfOEg=
Subject key identifier: 10:75:E8:4E:C8:F6:BD:26:E8:97:13:FD:79:92:38:10:EA:60:97:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C482F6F38E8A075EB9A354A5ABB769ACE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EHXoTsj2vSbolxP9eZI4EOpgl3o.roa
Signing time: Tue 10 Feb 2026 15:33:14 +0000
ROA not before: Tue 10 Feb 2026 15:33:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393886
IP address blocks: 31.57.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 07:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:2f:6f:38:e8:a0:75:eb:9a:35:4a:5a:bb:76:9a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 10 15:33:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1075e84ec8f6bd26e89713fd79923810ea60977a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:84:b5:e6:d4:2c:b3:05:16:5d:0c:6e:25:b8:
11:76:f0:f4:b7:33:62:d3:bd:2f:a8:4b:d6:56:09:
c4:54:ed:89:d7:1a:55:d2:67:e5:65:45:a5:69:b4:
6e:82:d1:a9:e5:e3:ed:7b:b2:99:46:4a:0c:09:47:
be:15:3b:83:91:33:8e:ed:2c:ad:73:92:2f:54:a7:
08:76:30:11:b3:37:e0:c3:88:c2:41:49:d3:a1:46:
04:9d:88:c5:4b:42:31:35:7a:15:33:08:fb:7e:10:
39:c9:d2:56:5e:f1:1a:c7:3f:9c:e7:0f:38:d7:a8:
0a:e4:f3:a3:45:68:b8:81:ca:d6:25:a9:53:b5:f6:
84:ac:e2:57:12:b2:93:12:5c:89:90:9e:88:9b:64:
e2:fb:c2:de:f9:1a:e8:e9:15:5d:d3:97:a9:80:14:
75:61:8b:26:88:4b:b6:af:e6:49:4b:4b:52:12:29:
b8:51:07:71:99:54:cf:e8:b8:76:d2:d8:ba:c9:ae:
cb:a1:69:3a:0d:8d:f4:90:a2:ff:fa:28:8c:06:cc:
e4:19:88:f0:6b:9a:97:79:9b:de:b8:a1:af:4c:49:
ff:88:15:94:54:f9:20:0e:e2:3f:4e:ab:8d:67:45:
14:33:92:95:39:42:c0:43:b1:8d:e7:d6:bd:d8:20:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:75:E8:4E:C8:F6:BD:26:E8:97:13:FD:79:92:38:10:EA:60:97:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EHXoTsj2vSbolxP9eZI4EOpgl3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.234.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3e:bb:3b:90:25:06:1a:82:95:a4:5c:93:57:9e:56:10:72:
f5:11:b8:98:69:3e:21:7a:f7:fb:dd:d5:41:b4:ac:e9:ff:a2:
48:4e:50:0b:c3:d6:81:ec:e0:20:e2:63:79:95:50:18:ef:04:
4d:84:89:e2:f9:8c:87:2d:b6:36:79:75:79:ae:84:eb:79:2b:
cc:f4:01:f5:38:52:2a:92:77:b7:7a:18:6e:f5:34:ff:e4:f6:
46:ce:f2:44:b0:15:66:ba:9f:7f:47:b6:56:4c:fd:8e:ef:18:
2b:8a:c9:c5:6a:0e:52:09:ac:3d:12:0b:18:a2:c9:87:7a:75:
75:68:05:6f:6b:ba:e9:42:8c:f4:fb:00:73:5a:f9:d9:47:12:
1a:16:23:2c:b1:f7:2d:db:8d:a5:8b:b9:c2:dc:90:1d:9d:46:
ff:fc:e1:2a:91:25:10:ed:49:08:59:53:f4:2e:0b:6f:46:85:
36:2c:79:9c:e0:69:5c:d1:b1:28:0f:7d:84:40:88:a8:1d:99:
85:ee:06:30:7e:f5:ad:9c:96:19:4a:e3:20:8d:42:d3:88:85:
3b:eb:54:0e:b7:4e:17:ca:39:36:27:40:6e:f0:52:b5:31:d2:
8d:a5:76:d6:75:f2:9e:83:07:0e:24:31:70:5a:22:65:bb:da:
7d:bd:fa:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxIL2846KB165o1Slq7dprOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjEwMTUzMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDc1ZTg0ZWM4ZjZiZDI2ZTg5NzEzZmQ3OTkyMzgxMGVhNjA5NzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IS15tQsswUWXQxuJbgRdvD0tzNi
070vqEvWVgnEVO2J1xpV0mflZUWlabRugtGp5ePte7KZRkoMCUe+FTuDkTOO7Syt
c5IvVKcIdjARszfgw4jCQUnToUYEnYjFS0IxNXoVMwj7fhA5ydJWXvEaxz+c5w84
16gK5POjRWi4gcrWJalTtfaErOJXErKTElyJkJ6Im2Ti+8Le+Rro6RVd05epgBR1
YYsmiEu2r+ZJS0tSEim4UQdxmVTP6Lh20ti6ya7LoWk6DY30kKL/+iiMBszkGYjw
a5qXeZveuKGvTEn/iBWUVPkgDuI/TquNZ0UUM5KVOULAQ7GN59a92CClpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBB16E7I9r0m6JcT/XmSOBDqYJd6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRUhYb1RzajJ2U2JvbHhQOWVaSTRFT3BnbDNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHznqMA0G
CSqGSIb3DQEBCwUAA4IBAQCHPrs7kCUGGoKVpFyTV55WEHL1EbiYaT4hevf73dVB
tKzp/6JITlALw9aB7OAg4mN5lVAY7wRNhIni+YyHLbY2eXV5roTreSvM9AH1OFIq
kne3ehhu9TT/5PZGzvJEsBVmup9/R7ZWTP2O7xgrisnFag5SCaw9EgsYosmHenV1
aAVva7rpQoz0+wBzWvnZRxIaFiMssfct242li7nC3JAdnUb//OEqkSUQ7UkIWVP0
LgtvRoU2LHmc4Glc0bEoD32EQIioHZmF7gYwfvWtnJYZSuMgjULTiIU761QOt04X
yjk2J0Bu8FK1MdKNpXbWdfKegwcOJDFwWiJlu9p9vfru
-----END CERTIFICATE-----
Generated at Thu Feb 26 12:16:34 2026 by rpki-client