Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bL8ESjQVSXkmEFHghslRJcZWoEI.roa
File: bL8ESjQVSXkmEFHghslRJcZWoEI.roa (raw, json)
Hash identifier: oo05xFLzzRbZXS+zPBRe5/BVV2pfC+rRuNFY8yS5VOE=
Subject key identifier: 6C:BF:04:4A:34:15:49:79:26:10:51:E0:86:C9:51:25:C6:56:A0:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A05828F51CA8233A90A71128590395A919
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bL8ESjQVSXkmEFHghslRJcZWoEI.roa
Signing time: Mon 31 Aug 2026 14:11:14 +0000
ROA not before: Mon 31 Aug 2026 14:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201269
IP address blocks: 31.57.217.0/24 maxlen: 24
94.183.245.0/24 maxlen: 24
94.183.247.0/24 maxlen: 24
217.60.188.0/24 maxlen: 24
217.60.189.0/24 maxlen: 24
217.60.190.0/24 maxlen: 24
217.60.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:28:f5:1c:a8:23:3a:90:a7:11:28:59:03:95:a9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 31 14:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cbf044a34154979261051e086c95125c656a042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:19:fc:b1:96:6c:d0:68:bd:1f:99:78:1a:
e6:c0:ba:d7:24:26:08:9d:a1:1e:72:8c:71:c3:9d:
f9:ce:7b:3b:74:25:83:58:1d:bc:0c:0a:cf:a9:8a:
dd:4b:1b:dd:dc:67:6d:8f:4b:f0:66:ae:10:56:ec:
e2:c7:0d:11:c9:de:cd:10:05:bb:d2:5f:f8:98:d8:
1f:44:62:66:b1:06:1f:55:6d:ac:6f:28:0f:aa:fc:
08:cc:58:40:23:c4:39:8f:8f:07:f1:53:af:3d:e6:
28:59:fe:b3:1d:1f:48:d4:b4:3a:09:12:f9:2d:91:
57:d4:af:db:e5:f3:db:be:dd:9b:ea:de:1c:af:c0:
4a:14:f5:a3:33:6e:17:1f:96:63:8c:0b:49:7b:65:
79:cb:37:13:86:0c:4f:6b:23:46:8d:c8:ea:31:7b:
2e:be:53:3b:65:29:3e:8f:8d:a8:08:cf:88:24:e3:
ed:a2:fc:5c:06:71:3f:09:3c:84:42:41:d4:e6:91:
86:02:42:06:7e:34:81:4a:62:8e:45:e6:af:b6:c6:
af:f2:a2:69:63:9e:63:55:0b:07:ae:54:a0:1e:82:
aa:07:44:82:bb:fe:25:27:2f:bd:24:57:5a:a1:3e:
7e:d6:dc:76:5f:dc:17:3e:f8:b2:0f:3f:49:76:94:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BF:04:4A:34:15:49:79:26:10:51:E0:86:C9:51:25:C6:56:A0:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bL8ESjQVSXkmEFHghslRJcZWoEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.217.0/24
94.183.245.0/24
94.183.247.0/24
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:ac:05:d9:88:43:72:c9:c4:81:ca:0b:e6:f1:40:05:d1:98:
c2:4c:8a:1c:80:96:e0:3f:b1:76:37:51:72:3e:85:11:73:a9:
04:be:78:c1:35:75:bc:b6:f6:ee:d1:28:82:c8:d2:99:ca:6c:
a5:dd:60:4b:d9:a5:4f:14:a7:71:a2:f1:97:c5:f9:1f:6b:57:
17:90:a9:22:35:e3:89:64:24:23:92:9a:a0:f2:f4:2a:dd:4c:
25:ec:88:3e:10:ed:f3:f4:11:5c:0b:b3:db:3f:07:0f:95:5d:
5b:23:89:fd:dc:d2:4a:03:5e:58:62:20:b5:53:17:30:7a:98:
17:ae:d9:d4:fd:65:4b:0f:0a:a3:47:aa:b4:ce:60:32:8d:dd:
cf:06:9e:dc:71:99:b8:17:f2:93:96:0e:f0:0e:92:de:01:6b:
0c:31:ec:bd:55:f3:1a:5d:66:03:0d:2e:88:d7:8b:2d:95:70:
0e:b1:d8:23:49:b3:e9:28:ec:2f:b3:dc:47:1e:92:24:db:7c:
41:10:ef:de:f4:18:ef:da:2f:aa:b5:ea:4d:4b:8e:4c:cb:3d:
1e:1b:2f:79:50:62:1f:31:5d:cc:05:01:0e:28:72:18:ab:ab:
ad:cc:85:07:a4:9b:2a:87:ad:44:6b:4c:a8:70:d7:64:2f:b7:
f8:7e:d0:01
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaBYKPUcqCM6kKcRKFkDlakZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODMxMTQxMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2JmMDQ0YTM0MTU0OTc5MjYxMDUxZTA4NmM5NTEyNWM2NTZhMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIQZ/LGWbNBovR+ZeBrmwLrXJCYI
naEecoxxw535zns7dCWDWB28DArPqYrdSxvd3Gdtj0vwZq4QVuzixw0Ryd7NEAW7
0l/4mNgfRGJmsQYfVW2sbygPqvwIzFhAI8Q5j48H8VOvPeYoWf6zHR9I1LQ6CRL5
LZFX1K/b5fPbvt2b6t4cr8BKFPWjM24XH5ZjjAtJe2V5yzcThgxPayNGjcjqMXsu
vlM7ZSk+j42oCM+IJOPtovxcBnE/CTyEQkHU5pGGAkIGfjSBSmKOReavtsav8qJp
Y55jVQsHrlSgHoKqB0SCu/4lJy+9JFdaoT5+1tx2X9wXPviyDz9JdpTMfQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGy/BEo0FUl5JhBR4IbJUSXGVqBCMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYkw4RVNqUVZTWGttRUZIZ2hzbFJKY1pXb0VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHznZAwQA
Xrf1AwQAXrf3AwQC2Ty8MA0GCSqGSIb3DQEBCwUAA4IBAQB7rAXZiENyycSBygvm
8UAF0ZjCTIocgJbgP7F2N1FyPoURc6kEvnjBNXW8tvbu0SiCyNKZymyl3WBL2aVP
FKdxovGXxfkfa1cXkKkiNeOJZCQjkpqg8vQq3Uwl7Ig+EO3z9BFcC7PbPwcPlV1b
I4n93NJKA15YYiC1UxcwepgXrtnU/WVLDwqjR6q0zmAyjd3PBp7ccZm4F/KTlg7w
DpLeAWsMMey9VfMaXWYDDS6I14stlXAOsdgjSbPpKOwvs9xHHpIk23xBEO/e9Bjv
2i+qtepNS45Myz0eGy95UGIfMV3MBQEOKHIYq6utzIUHpJsqh61Ea0yocNdkL7f4
ftAB
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:41 2026 by rpki-client