Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jFvqA7HMHMgUTYbcpkvN7Itzdeo.roa
File: jFvqA7HMHMgUTYbcpkvN7Itzdeo.roa (raw, json)
Hash identifier: /B5ZfFqPzIDzMf0txEABUo62Xvpj7xU3czUKxjMt7FY=
Subject key identifier: 8C:5B:EA:03:B1:CC:1C:C8:14:4D:86:DC:A6:4B:CD:EC:8B:73:75:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A12C244055B5CAAE86FAE62AFEE66F0647
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jFvqA7HMHMgUTYbcpkvN7Itzdeo.roa
Signing time: Sun 11 Oct 2026 18:05:35 +0000
ROA not before: Sun 11 Oct 2026 18:05:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218565
IP address blocks: 31.57.211.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
217.60.56.0/24 maxlen: 24
217.60.57.0/24 maxlen: 24
217.60.58.0/24 maxlen: 24
217.60.59.0/24 maxlen: 24
217.60.80.0/24 maxlen: 24
217.60.81.0/24 maxlen: 24
217.60.82.0/24 maxlen: 24
217.60.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:24:40:55:b5:ca:ae:86:fa:e6:2a:fe:e6:6f:06:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 11 18:05:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c5bea03b1cc1cc8144d86dca64bcdec8b7375ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:e9:5e:5e:d2:ff:13:50:a9:73:39:e2:ee:
07:db:15:2f:2f:86:79:a0:ae:6a:9e:74:3f:32:1f:
b4:4b:82:90:56:a5:31:9c:c6:22:f1:11:fc:fa:d6:
1e:25:3b:3d:d7:07:a3:ad:bf:f2:bc:e1:15:76:4b:
8f:1f:58:ba:49:62:82:df:6b:52:be:89:72:0e:a6:
80:b7:f6:4d:8d:05:ce:12:ce:87:b4:f3:ed:be:a2:
2b:8e:2c:79:7d:3c:f4:61:a2:99:a0:c4:23:99:af:
8b:69:6f:87:3f:a8:7b:e0:18:12:82:29:41:0f:ec:
64:b3:03:bd:84:a7:30:75:71:e5:86:5c:1a:c6:9c:
2f:3e:d7:7e:1f:d7:c3:c4:d2:e1:93:6e:1d:de:76:
c7:69:c0:7d:5d:15:66:bf:b9:33:86:72:72:91:1f:
ca:5e:13:bf:e1:1f:2c:41:08:e7:0b:bc:fd:bc:06:
fd:4d:10:44:cf:89:3c:27:f4:c9:fc:9f:58:f8:96:
8b:60:49:1c:10:5e:80:0e:cf:09:1c:56:29:a7:47:
83:c5:a1:f2:77:27:e2:a6:96:6c:0f:49:23:1e:79:
bf:fa:8a:e5:49:ec:e9:68:9f:c5:66:48:ff:f3:f6:
46:d8:b3:ef:09:3f:6c:c2:ce:4e:16:8f:06:be:04:
af:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5B:EA:03:B1:CC:1C:C8:14:4D:86:DC:A6:4B:CD:EC:8B:73:75:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jFvqA7HMHMgUTYbcpkvN7Itzdeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.211.0/24
31.59.222.0/24
217.60.56.0/22
217.60.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:13:f9:75:28:64:63:9b:b8:80:ea:81:60:b3:78:55:ff:97:
22:8f:ac:5b:73:62:69:0e:7d:58:9a:b3:bf:e7:a3:20:08:d4:
b3:ee:ab:99:a4:a6:b4:6b:b9:9a:00:3c:1d:74:01:cb:ee:0d:
ca:7d:21:43:53:b7:a4:f7:a8:e7:09:39:54:a9:55:a2:01:6c:
75:05:e8:32:f5:0e:65:78:e1:fd:58:eb:c2:1c:f6:56:8c:75:
09:f5:06:18:e3:76:1a:8f:b2:aa:7f:87:63:6e:70:a0:6c:5b:
e9:7f:7e:db:b7:eb:32:f1:dc:cb:78:11:51:8c:ea:9c:ef:a2:
e1:ba:e2:3b:08:dd:b4:16:78:ee:97:a2:ee:57:f0:a5:0b:83:
17:f9:be:4a:be:21:34:11:05:6a:e5:e4:a1:53:73:5b:86:e5:
e4:a0:2b:b6:d0:23:7e:fb:bc:ed:99:e9:4b:3c:7f:72:ac:ac:
ee:95:6f:b6:77:7b:30:94:a1:46:b1:2e:63:0e:55:05:39:9a:
69:8b:d6:68:02:79:b2:d1:0f:e8:51:22:1c:fa:65:f6:44:f6:
db:f9:6b:97:0c:6d:50:eb:3d:d4:91:80:a7:66:d5:c4:63:b0:
f1:d7:69:2e:94:bf:ef:8a:dd:0b:f5:a8:1d:26:b6:30:7c:02:
88:ef:54:65
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaEsJEBVtcquhvrmKv7mbwZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDExMTgwNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzViZWEwM2IxY2MxY2M4MTQ0ZDg2ZGNhNjRiY2RlYzhiNzM3NWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5/pXl7S/xNQqXM54u4H2xUvL4Z5
oK5qnnQ/Mh+0S4KQVqUxnMYi8RH8+tYeJTs91wejrb/yvOEVdkuPH1i6SWKC32tS
volyDqaAt/ZNjQXOEs6HtPPtvqIrjix5fTz0YaKZoMQjma+LaW+HP6h74BgSgilB
D+xkswO9hKcwdXHlhlwaxpwvPtd+H9fDxNLhk24d3nbHacB9XRVmv7kzhnJykR/K
XhO/4R8sQQjnC7z9vAb9TRBEz4k8J/TJ/J9Y+JaLYEkcEF6ADs8JHFYpp0eDxaHy
dyfippZsD0kjHnm/+orlSezpaJ/FZkj/8/ZG2LPvCT9sws5OFo8GvgSvSwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIxb6gOxzBzIFE2G3KZLzeyLc3XqMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvakZ2cUE3SE1ITWdVVFliY3Brdk43SXR6ZGVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHznTAwQA
HzveAwQC2Tw4AwQC2TxQMA0GCSqGSIb3DQEBCwUAA4IBAQCbE/l1KGRjm7iA6oFg
s3hV/5cij6xbc2JpDn1YmrO/56MgCNSz7quZpKa0a7maADwddAHL7g3KfSFDU7ek
96jnCTlUqVWiAWx1Begy9Q5leOH9WOvCHPZWjHUJ9QYY43Yaj7Kqf4djbnCgbFvp
f37bt+sy8dzLeBFRjOqc76LhuuI7CN20Fnjul6LuV/ClC4MX+b5KviE0EQVq5eSh
U3NbhuXkoCu20CN++7ztmelLPH9yrKzulW+2d3swlKFGsS5jDlUFOZppi9ZoAnmy
0Q/oUSIc+mX2RPbb+WuXDG1Q6z3UkYCnZtXEY7Dx12kulL/vit0L9agdJrYwfAKI
71Rl
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:05 2026 by rpki-client