Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MRwUgduu_G6AlhnkMDW4-U6JPIM.roa
File: MRwUgduu_G6AlhnkMDW4-U6JPIM.roa (raw, json)
Hash identifier: E/63AmE0epegzYTBcqXd7srMdsMexbYUSuBfwR3WH1M=
Subject key identifier: 31:1C:14:81:DB:AE:FC:6E:80:96:19:E4:30:35:B8:F9:4E:89:3C:83
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A12C01B8080DA9BBAEBCEAE3BF008B6822
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MRwUgduu_G6AlhnkMDW4-U6JPIM.roa
Signing time: Sun 11 Oct 2026 17:27:52 +0000
ROA not before: Sun 11 Oct 2026 17:27:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34565
IP address blocks: 31.57.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:01:b8:08:0d:a9:bb:ae:bc:ea:e3:bf:00:8b:68:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 11 17:27:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=311c1481dbaefc6e809619e43035b8f94e893c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ed:c9:d1:ee:70:13:76:a8:28:aa:7d:72:91:
25:9a:17:55:a6:78:fa:6d:a9:32:74:c3:57:e2:94:
8a:50:da:fe:ca:5f:79:4c:b5:9c:84:8a:24:63:05:
e4:2e:92:72:d9:07:07:5d:3e:82:51:08:5a:da:8f:
66:70:0e:d7:f7:0c:03:16:e2:cb:d3:7e:88:ac:4f:
14:b5:ce:69:47:4b:91:af:81:2d:c4:17:ef:b6:88:
a7:7f:18:b5:55:25:bd:19:cf:9c:15:76:c4:5e:ad:
80:24:da:e3:04:e2:19:8d:5c:f7:fa:f4:42:5f:45:
b0:ec:e2:e7:ee:07:c9:b6:19:63:dc:fb:76:7c:e9:
2e:6a:b2:3e:b5:21:67:2a:3d:8b:49:68:10:34:b1:
bb:6c:ff:30:d6:0f:9a:25:01:ae:89:b6:43:08:f4:
54:16:27:9a:87:a0:13:8e:82:2e:28:8f:f2:cb:f4:
49:fd:7b:c2:c1:5a:37:71:67:74:fc:f0:9b:2d:1d:
1c:94:26:22:3f:1a:97:45:60:d8:2a:77:c6:4c:6b:
27:05:ab:c6:e5:d2:12:ec:89:0a:e3:bb:5e:ea:3d:
50:9a:48:02:c1:5f:53:e5:7b:b0:d9:08:97:4c:f3:
5b:a7:11:3a:46:d4:4e:7d:ab:5f:9e:0d:16:a3:30:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1C:14:81:DB:AE:FC:6E:80:96:19:E4:30:35:B8:F9:4E:89:3C:83
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MRwUgduu_G6AlhnkMDW4-U6JPIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.11.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f5:fb:0e:e2:94:c8:45:53:16:58:37:50:65:18:c8:65:dc:
20:dc:55:5c:e2:f3:cb:4c:28:b1:e0:2a:cf:63:c2:44:02:10:
1d:e6:89:1a:16:11:6e:f1:22:2c:d6:6a:88:41:46:f3:55:00:
70:9b:b7:9c:43:85:9c:6c:a2:df:50:91:b6:6c:c7:b2:54:ce:
93:3b:2d:21:fb:6f:a1:fb:8b:58:7d:76:3a:be:67:3f:65:bd:
0c:04:23:f4:13:ed:ab:ca:a6:71:27:c9:08:b6:2a:fd:bd:c4:
bd:92:13:30:59:e0:40:8a:63:2a:7b:76:ca:e1:b2:57:fc:17:
e9:9a:53:f9:64:6d:b5:a6:02:ce:09:25:52:25:99:96:83:b6:
e2:6c:30:a8:30:63:97:f0:60:3a:05:64:09:ab:3f:c8:88:16:
9d:be:1a:a2:da:5e:88:73:b9:05:ce:57:8c:dc:e1:1f:f9:d1:
7a:a3:32:50:22:d8:8d:dc:e5:5f:62:28:b0:13:94:8a:29:97:
a0:14:1d:04:3e:e1:12:6e:74:17:5d:f0:0e:05:58:95:39:e5:
5e:b1:c3:d6:6f:18:0b:de:37:36:18:11:4a:51:e5:f8:d6:d3:
30:65:9e:de:58:c5:5b:9d:ab:ff:fa:12:4b:59:5d:ba:94:8d:
17:8c:eb:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEsAbgIDam7rrzq478Ai2giMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDExMTcyNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTFjMTQ4MWRiYWVmYzZlODA5NjE5ZTQzMDM1YjhmOTRlODkzYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O3J0e5wE3aoKKp9cpElmhdVpnj6
bakydMNX4pSKUNr+yl95TLWchIokYwXkLpJy2QcHXT6CUQha2o9mcA7X9wwDFuLL
036IrE8Utc5pR0uRr4EtxBfvtoinfxi1VSW9Gc+cFXbEXq2AJNrjBOIZjVz3+vRC
X0Ww7OLn7gfJthlj3Pt2fOkuarI+tSFnKj2LSWgQNLG7bP8w1g+aJQGuibZDCPRU
Fieah6ATjoIuKI/yy/RJ/XvCwVo3cWd0/PCbLR0clCYiPxqXRWDYKnfGTGsnBavG
5dIS7IkK47te6j1QmkgCwV9T5Xuw2QiXTPNbpxE6RtROfatfng0WozDSjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDEcFIHbrvxugJYZ5DA1uPlOiTyDMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTVJ3VWdkdXVfRzZBbGhua01EVzQtVTZKUElNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzkLMA0G
CSqGSIb3DQEBCwUAA4IBAQCY9fsO4pTIRVMWWDdQZRjIZdwg3FVc4vPLTCix4CrP
Y8JEAhAd5okaFhFu8SIs1mqIQUbzVQBwm7ecQ4WcbKLfUJG2bMeyVM6TOy0h+2+h
+4tYfXY6vmc/Zb0MBCP0E+2ryqZxJ8kItir9vcS9khMwWeBAimMqe3bK4bJX/Bfp
mlP5ZG21pgLOCSVSJZmWg7bibDCoMGOX8GA6BWQJqz/IiBadvhqi2l6Ic7kFzleM
3OEf+dF6ozJQItiN3OVfYiiwE5SKKZegFB0EPuESbnQXXfAOBViVOeVescPWbxgL
3jc2GBFKUeX41tMwZZ7eWMVbnav/+hJLWV26lI0XjOvX
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:45 2026 by rpki-client