Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ORzRHRnfP5Y_Y5kKX3MpRJhpIRA.roa
File: ORzRHRnfP5Y_Y5kKX3MpRJhpIRA.roa (raw, json)
Hash identifier: mgbv0qckU+KI/yNYYIuLPNXENlDi+7JttRIrS4N4FV4=
Subject key identifier: 39:1C:D1:1D:19:DF:3F:96:3F:63:99:0A:5F:73:29:44:98:69:21:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A110EF15B7DD2184D5BC5011477BA9BFBF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ORzRHRnfP5Y_Y5kKX3MpRJhpIRA.roa
Signing time: Tue 06 Oct 2026 11:17:46 +0000
ROA not before: Tue 06 Oct 2026 11:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 31.59.165.0/24 maxlen: 24
94.183.193.0/24 maxlen: 24
94.183.199.0/24 maxlen: 24
94.183.212.0/24 maxlen: 24
217.60.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:ef:15:b7:dd:21:84:d5:bc:50:11:47:7b:a9:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 6 11:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391cd11d19df3f963f63990a5f73294498692110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:5d:94:ee:7b:76:8c:e2:c5:f6:e6:1b:53:
37:f8:66:d3:98:5c:2e:fb:c7:0f:2c:32:c1:88:53:
c6:2a:e2:a3:25:35:62:8a:23:76:83:a7:4a:80:69:
ba:57:48:9b:62:bc:0f:78:bf:1d:6f:fe:c5:b9:54:
58:b3:25:e6:79:7d:1a:72:87:5e:67:94:ac:f5:90:
0a:c2:92:22:9c:53:66:83:41:01:4f:06:47:e6:8e:
93:6b:26:54:32:b1:89:02:72:18:f8:c8:9c:e6:d6:
2f:b0:ac:19:68:3c:9f:a0:33:78:71:86:a3:7c:fb:
61:fd:ff:34:b0:f8:79:4a:69:91:d8:20:87:37:28:
82:85:07:17:78:ff:93:70:77:4e:03:c2:8b:45:3d:
18:e0:7d:0e:d5:85:8c:6a:69:85:bd:4c:ee:70:14:
3e:75:75:35:65:f1:cc:20:c3:38:e6:2a:28:2f:76:
e1:ce:9d:6f:fe:68:fa:1b:35:81:1c:65:0f:5e:84:
5f:df:f0:d9:b9:0c:d8:93:ee:ae:e7:0a:26:45:dc:
f2:1d:06:a5:34:0b:6c:d2:37:d2:50:f0:9c:75:58:
5f:96:59:fd:ba:a4:9b:14:44:ce:44:b1:b8:1d:56:
2a:66:7c:fc:05:3c:e6:11:1f:00:a4:af:eb:06:a9:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1C:D1:1D:19:DF:3F:96:3F:63:99:0A:5F:73:29:44:98:69:21:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ORzRHRnfP5Y_Y5kKX3MpRJhpIRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.165.0/24
94.183.193.0/24
94.183.199.0/24
94.183.212.0/24
217.60.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:a7:39:d3:7a:05:90:54:29:c1:4a:e9:29:5b:ea:d5:2f:82:
8b:e4:d0:1c:d9:fe:f9:1a:05:dd:97:64:5e:c0:fb:98:0b:7c:
4f:bc:d8:73:34:b8:63:87:84:2b:32:cc:96:26:c6:7a:7c:f8:
84:df:e9:ee:8b:95:19:d8:8d:79:65:76:ad:90:4f:b2:30:2c:
dc:24:f0:ca:78:3c:be:17:a5:e1:86:e7:98:ca:50:71:f5:2a:
3c:01:05:e5:a6:c4:d6:50:50:07:61:10:ea:81:4e:a3:fb:5b:
68:68:3c:8c:79:f1:9c:48:af:73:bd:1c:a6:58:f1:9d:f3:ee:
1a:6e:32:c8:f4:19:44:3c:f0:37:f4:40:7a:2e:b8:3f:8c:a1:
c8:c5:1b:c9:d0:b1:5d:77:80:d0:59:71:6c:6f:de:d0:2f:ed:
0b:85:7c:12:9b:2e:0a:b3:06:92:85:0b:a8:cc:f9:50:c7:5d:
02:0f:d4:10:ca:6a:98:3d:74:b3:a5:99:52:67:a8:22:7e:01:
01:35:72:50:0d:4c:0a:fa:10:79:32:cd:fb:d5:03:1a:61:37:
c7:f8:66:ef:0e:98:a1:a0:14:a5:9b:d6:b7:46:bf:1d:bb:8e:
0a:d2:96:85:72:64:bc:92:fd:b6:b5:5d:78:3f:32:d6:1e:5c:
c0:24:f1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:25 2026 by rpki-client