Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0oqIPel4QImygWMwL9ANAFynuk.roa
File: Z0oqIPel4QImygWMwL9ANAFynuk.roa (raw, json)
Hash identifier: U/YECpPXPkLiBNegxrtDeEE64rYfE6PKbzHo9bh3pes=
Subject key identifier: 67:4A:2A:20:F7:A5:E1:02:26:CA:05:8C:C0:BF:40:34:01:72:9E:E9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0E9A8E6B7D4CB37718BDDCB571D107307
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0oqIPel4QImygWMwL9ANAFynuk.roa
Signing time: Mon 28 Sep 2026 20:15:55 +0000
ROA not before: Mon 28 Sep 2026 20:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203861
IP address blocks: 31.58.218.0/24 maxlen: 24
31.59.160.0/24 maxlen: 24
217.60.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:a8:e6:b7:d4:cb:37:71:8b:dd:cb:57:1d:10:73:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 28 20:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=674a2a20f7a5e10226ca058cc0bf403401729ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:db:d5:e7:ea:2b:13:c7:2b:f7:b5:02:9c:
e8:7d:55:cf:1e:de:99:c8:9d:df:20:92:f2:8e:02:
39:ca:13:8b:f0:46:da:56:d3:42:43:2d:01:c5:c6:
ab:08:39:88:89:db:ea:42:61:d6:07:53:aa:bf:1e:
a4:59:71:4d:4d:63:58:5e:36:b3:cf:11:e7:8f:0f:
20:e6:3e:0a:02:c4:56:bb:08:18:b8:f6:73:7a:a0:
91:93:35:4e:04:bb:5a:0e:c6:f9:dd:41:43:99:8d:
9f:6e:a8:a4:fa:c4:94:7e:5c:af:62:0c:68:f5:29:
14:20:dd:8d:b0:03:34:83:a0:03:9b:20:33:cc:08:
af:bd:9f:da:25:3b:20:c6:84:bb:30:10:d9:53:71:
f1:90:3e:30:7e:08:c6:d9:53:f2:5a:9d:69:fa:1b:
05:e9:e2:ea:c5:50:82:75:85:65:0e:df:1d:1e:96:
44:08:ef:3a:55:9f:40:09:14:1b:5e:0c:f7:ac:a7:
4e:a0:b7:8f:a2:c3:1d:47:6a:93:18:4e:40:3e:8c:
3a:a4:85:c3:bb:f2:6c:b2:87:bf:c5:11:2b:d4:d0:
ea:98:83:8d:f5:1b:6e:db:af:ec:5c:14:0c:94:f7:
83:2f:60:42:8e:0a:ca:96:bb:b9:72:30:df:2d:9f:
e3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4A:2A:20:F7:A5:E1:02:26:CA:05:8C:C0:BF:40:34:01:72:9E:E9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Z0oqIPel4QImygWMwL9ANAFynuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.218.0/24
31.59.160.0/24
217.60.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:5f:9b:28:27:7d:9c:94:fc:f7:0a:14:f5:49:c8:4a:3d:d4:
cd:97:30:9a:b8:c1:c6:85:7c:33:ee:c0:e5:4e:93:c7:da:e5:
6e:f5:22:0c:1b:49:98:79:6c:b0:20:81:90:dc:be:bd:02:c9:
0b:44:27:2b:74:81:a5:b4:5f:23:e4:8d:42:fd:a9:11:4d:a5:
d3:e6:40:2d:a6:28:54:2e:de:17:f9:79:44:41:30:41:4b:af:
ef:53:4e:47:03:d9:e8:bd:bc:76:98:03:57:97:df:99:33:db:
91:42:78:5d:bf:5d:ce:f5:17:f0:32:99:2a:73:54:cd:92:97:
7b:f7:ca:9b:a7:9d:a3:4b:7d:25:a6:4b:f3:98:40:ea:c4:64:
7f:84:09:9d:e4:a0:58:27:5b:b3:8c:8d:74:b3:4e:55:40:5d:
ff:eb:e9:7b:76:26:4c:41:85:0e:dc:29:02:04:b5:3c:99:12:
72:16:d5:db:07:8a:cc:87:c2:26:97:ec:bb:a8:52:de:89:06:
7c:75:8f:e7:cb:c3:bc:ac:95:e5:e0:e6:c6:95:6e:9f:e4:f5:
ae:7b:a4:c3:ad:26:79:e8:d5:de:96:51:50:52:52:8f:f2:a5:
bf:69:33:d9:66:f9:b4:aa:af:a1:65:38:b4:12:fb:b4:a0:c1:
5b:ca:98:9e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDpqOa31Ms3cYvdy1cdEHMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTI4MjAxNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzRhMmEyMGY3YTVlMTAyMjZjYTA1OGNjMGJmNDAzNDAxNzI5ZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe3b1efqKxPHK/e1ApzofVXPHt6Z
yJ3fIJLyjgI5yhOL8EbaVtNCQy0BxcarCDmIidvqQmHWB1Oqvx6kWXFNTWNYXjaz
zxHnjw8g5j4KAsRWuwgYuPZzeqCRkzVOBLtaDsb53UFDmY2fbqik+sSUflyvYgxo
9SkUIN2NsAM0g6ADmyAzzAivvZ/aJTsgxoS7MBDZU3HxkD4wfgjG2VPyWp1p+hsF
6eLqxVCCdYVlDt8dHpZECO86VZ9ACRQbXgz3rKdOoLePosMdR2qTGE5APow6pIXD
u/Jssoe/xREr1NDqmION9Rtu26/sXBQMlPeDL2BCjgrKlru5cjDfLZ/jwQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGdKKiD3peECJsoFjMC/QDQBcp7pMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWjBvcUlQZWw0UUlteWdXTXdMOUFOQUZ5bnVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzraAwQA
HzugAwQA2TxNMA0GCSqGSIb3DQEBCwUAA4IBAQCyX5soJ32clPz3ChT1SchKPdTN
lzCauMHGhXwz7sDlTpPH2uVu9SIMG0mYeWywIIGQ3L69AskLRCcrdIGltF8j5I1C
/akRTaXT5kAtpihULt4X+XlEQTBBS6/vU05HA9novbx2mANXl9+ZM9uRQnhdv13O
9RfwMpkqc1TNkpd798qbp52jS30lpkvzmEDqxGR/hAmd5KBYJ1uzjI10s05VQF3/
6+l7diZMQYUO3CkCBLU8mRJyFtXbB4rMh8Iml+y7qFLeiQZ8dY/ny8O8rJXl4ObG
lW6f5PWue6TDrSZ56NXellFQUlKP8qW/aTPZZvm0qq+hZTi0Evu0oMFbypie
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:40:59 2026 by rpki-client