Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h3mmiF1koKxlLWgqWAjYKzKdIo8.roa
File: h3mmiF1koKxlLWgqWAjYKzKdIo8.roa (raw, json)
Hash identifier: GP49D/W6pb224n6lCHpTreN6aWHNn13+rOCY75N5O50=
Subject key identifier: 87:79:A6:88:5D:64:A0:AC:65:2D:68:2A:58:08:D8:2B:32:9D:22:8F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E5114339D6CB571633B0862F92DF4CCBB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h3mmiF1koKxlLWgqWAjYKzKdIo8.roa
Signing time: Fri 22 May 2026 19:05:38 +0000
ROA not before: Fri 22 May 2026 19:05:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 31.57.204.0/24 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.92.0/24 maxlen: 24
31.58.93.0/24 maxlen: 24
31.58.94.0/24 maxlen: 24
31.58.95.0/24 maxlen: 24
31.58.230.0/24 maxlen: 24
217.60.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:14:33:9d:6c:b5:71:63:3b:08:62:f9:2d:f4:cc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 22 19:05:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8779a6885d64a0ac652d682a5808d82b329d228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:26:1c:b0:33:4e:6d:6b:14:5f:f6:45:78:
c0:0f:e6:af:0b:c3:d3:ae:d9:2d:b5:87:44:bb:14:
f7:d5:a3:ea:8d:c5:a6:73:af:5e:f2:ba:a7:c0:4f:
e5:53:c9:f7:be:5a:a2:66:66:a7:82:15:bf:4c:d1:
17:ce:23:34:d8:0c:f3:25:cb:70:5e:e6:a7:8e:1a:
1e:f4:62:f4:b0:43:fc:37:cb:60:6d:10:56:00:27:
b9:1f:45:6e:0a:1b:ad:13:c2:54:cc:d2:ed:14:57:
94:a3:78:0f:55:1e:50:cd:45:b4:16:1e:ad:e1:47:
25:a9:17:ad:7e:e1:49:b4:cf:f2:47:64:c2:48:e8:
69:93:c4:2e:e3:22:d8:07:9f:a6:cb:2c:d8:e1:9e:
1b:9c:b9:5d:4a:84:c9:6a:13:3c:b3:1e:a7:72:03:
8b:0b:46:84:c6:ff:ab:9c:bc:cd:af:b1:bd:31:02:
5d:84:b9:83:de:e0:96:e4:fd:a5:30:b0:5b:c7:75:
89:bc:48:b2:21:dc:11:e8:c5:0b:76:7d:e8:6a:37:
74:3c:93:6c:c7:eb:de:6f:63:a9:29:c0:4b:79:55:
2d:06:d2:0e:32:90:63:61:8a:ca:67:99:a1:8f:64:
c6:3c:a3:ce:0c:8e:5a:ec:19:5c:6c:16:43:f9:97:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:A6:88:5D:64:A0:AC:65:2D:68:2A:58:08:D8:2B:32:9D:22:8F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h3mmiF1koKxlLWgqWAjYKzKdIo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.204.0/24
31.58.92.0/22
31.58.230.0/24
217.60.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c1:1d:71:13:10:36:51:b6:3e:9c:df:a5:3c:e7:61:c9:7e:
6b:00:32:a2:a0:b9:82:44:46:80:b1:c7:61:b8:e2:56:72:04:
34:81:33:8e:4b:4d:22:a4:0b:e4:85:0d:86:f0:a1:4a:8d:b3:
48:52:ee:31:3e:4a:5d:51:b0:4e:64:32:85:b6:89:92:e2:c2:
55:04:19:2d:62:27:e0:50:b7:fb:8b:ac:fc:90:4c:f3:7b:d8:
de:10:47:a2:f8:00:6c:14:f1:a1:4e:3f:28:08:2f:9b:e9:24:
9f:2a:9d:3b:7d:4a:2d:91:1e:a9:b7:8a:56:bb:9e:a8:77:df:
c7:3e:34:bb:de:6f:08:49:0a:10:f8:11:0c:59:21:f2:a7:56:
a0:9b:9c:39:58:e5:96:51:31:b0:bc:1c:9a:f2:1f:e0:83:89:
e4:97:9e:a1:5e:82:0f:76:1e:02:07:d8:44:dc:52:93:53:a6:
7b:52:21:f0:da:95:db:c5:3c:3b:12:fa:b2:e8:6e:e9:35:84:
a6:94:ef:ba:9d:a4:7f:f9:05:cd:fc:64:19:03:36:15:85:32:
38:fa:a2:48:6c:ea:af:e1:12:ce:f4:1a:88:57:a0:21:7f:4c:
c1:ef:cc:e9:44:d1:4b:b5:12:d3:87:9f:27:d8:0e:05:01:62:
7f:57:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:56:44 2026 by rpki-client