Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m6OE_orJEqVPNu5BMiKeRILeXck.roa
File: m6OE_orJEqVPNu5BMiKeRILeXck.roa (raw, json)
Hash identifier: pzP/A4A+p7i5dKwbcR8D2bj+tEhkAJ+6HFyfp34HHns=
Subject key identifier: 9B:A3:84:FE:8A:C9:12:A5:4F:36:EE:41:32:22:9E:44:82:DE:5D:C9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F958F79151607FB65C4558C0F065A28B6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m6OE_orJEqVPNu5BMiKeRILeXck.roa
Signing time: Fri 24 Jul 2026 19:17:15 +0000
ROA not before: Fri 24 Jul 2026 19:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
94.183.203.0/24 maxlen: 24
94.183.208.0/24 maxlen: 24
94.183.209.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:8f:79:15:16:07:fb:65:c4:55:8c:0f:06:5a:28:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 19:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ba384fe8ac912a54f36ee4132229e4482de5dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:3f:0e:a8:53:9c:0c:6a:94:ea:ee:97:60:
25:0b:72:f6:95:33:27:e1:75:0c:b9:c7:dd:9f:80:
3a:c5:75:95:ad:f1:1f:f0:8a:d7:c9:0b:e7:a7:cb:
38:2d:12:65:2d:1c:9e:be:01:f1:67:62:e4:49:89:
de:72:32:25:bc:64:2e:73:13:75:a6:ec:6b:f8:a8:
e9:a6:5e:07:c0:03:71:05:b7:d7:d9:cb:f0:47:54:
7b:84:e0:05:1b:89:e2:67:71:95:d5:31:e8:b8:e8:
27:e1:64:54:24:64:9b:1a:ba:a9:05:58:d5:9c:9e:
62:17:f3:fd:37:55:19:3f:d1:c3:9d:83:e4:f0:cb:
00:8a:6e:a5:2a:4f:12:bc:4b:92:08:27:4d:78:f3:
a5:60:bb:bd:06:ff:3e:fd:6c:e6:42:51:08:15:62:
75:67:d5:63:b0:ea:d3:ea:09:e2:6d:34:e0:2d:46:
4b:8e:2b:56:c5:ed:ee:b5:b7:4b:e7:c2:04:1f:58:
3b:57:25:fc:c7:a8:bb:24:6f:3d:41:73:79:9c:86:
fc:81:39:88:90:13:fa:88:17:9f:27:ca:66:2e:23:
66:1f:ae:70:63:8a:a2:c5:18:ca:ad:b6:92:4c:8f:
3a:d6:e9:e0:c9:bf:19:44:fd:ef:cc:4e:13:87:8e:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A3:84:FE:8A:C9:12:A5:4F:36:EE:41:32:22:9E:44:82:DE:5D:C9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m6OE_orJEqVPNu5BMiKeRILeXck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
94.183.170.0/24
94.183.203.0/24
94.183.208.0/23
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2f:b1:61:43:ef:9c:7c:b9:4f:00:37:31:3a:a8:5d:c8:29:
64:5d:29:b2:bb:64:18:7c:81:7a:2d:cb:00:e0:98:15:6f:14:
f7:40:a9:17:c6:8f:4a:43:12:41:67:cb:f6:7e:fa:89:b6:49:
cb:86:14:f6:f8:05:8d:86:5b:0d:2d:a2:e7:e7:53:1b:9b:52:
4e:6f:f3:0c:34:aa:64:7f:54:47:5a:6a:91:4f:2a:8d:3c:f0:
d8:cf:33:f3:e9:ab:82:b9:4a:ea:d1:fb:18:bb:7d:3b:a9:69:
25:cd:82:e7:2d:11:bb:a6:cd:b1:d6:18:a1:f9:c1:86:be:38:
c5:6e:88:a9:5e:68:23:8c:be:72:22:18:28:2e:d6:1a:bf:a8:
ae:bc:9a:18:6f:b8:9d:f0:9e:6d:13:e4:78:ca:a0:0a:61:b5:
65:f1:44:57:74:f7:d8:3d:22:b9:87:6b:10:08:e9:2d:f1:b8:
47:75:d1:75:06:84:b0:41:d1:00:ed:63:04:b5:48:4b:06:98:
52:13:8c:90:4b:25:f1:21:58:ff:06:6a:b7:56:ac:35:31:35:
17:7b:7e:67:dd:82:d6:b3:e7:f0:98:02:c9:6e:aa:5e:d0:ca:
6c:b8:fa:5f:68:4b:1c:1c:5e:55:db:7b:9c:e4:b6:e7:64:e6:
35:f3:bb:e9
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ+Vj3kVFgf7ZcRVjA8GWii2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzI0MTkxNzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmEzODRmZThhYzkxMmE1NGYzNmVlNDEzMjIyOWU0NDgyZGU1ZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZQ/DqhTnAxqlOrul2AlC3L2lTMn
4XUMucfdn4A6xXWVrfEf8IrXyQvnp8s4LRJlLRyevgHxZ2LkSYnecjIlvGQucxN1
puxr+Kjppl4HwANxBbfX2cvwR1R7hOAFG4niZ3GV1THouOgn4WRUJGSbGrqpBVjV
nJ5iF/P9N1UZP9HDnYPk8MsAim6lKk8SvEuSCCdNePOlYLu9Bv8+/WzmQlEIFWJ1
Z9VjsOrT6gnibTTgLUZLjitWxe3utbdL58IEH1g7VyX8x6i7JG89QXN5nIb8gTmI
kBP6iBefJ8pmLiNmH65wY4qixRjKrbaSTI861ungyb8ZRP3vzE4Th471rQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFJujhP6KyRKlTzbuQTIinkSC3l3JMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbTZPRV9vckpFcVZQTnU1Qk1pS2VSSUxlWGNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBHzroAwQA
HzsnAwQAXreqAwQAXrfLAwQBXrfQAwQAXrfiAwQBXrfuAwQAXrf+AwQB2TwIAwQA
2TwYAwQA2TxjMA0GCSqGSIb3DQEBCwUAA4IBAQAAL7FhQ++cfLlPADcxOqhdyClk
XSmyu2QYfIF6LcsA4JgVbxT3QKkXxo9KQxJBZ8v2fvqJtknLhhT2+AWNhlsNLaLn
51Mbm1JOb/MMNKpkf1RHWmqRTyqNPPDYzzPz6auCuUrq0fsYu307qWklzYLnLRG7
ps2x1hih+cGGvjjFboipXmgjjL5yIhgoLtYav6iuvJoYb7id8J5tE+R4yqAKYbVl
8URXdPfYPSK5h2sQCOkt8bhHddF1BoSwQdEA7WMEtUhLBphSE4yQSyXxIVj/Bmq3
Vqw1MTUXe35n3YLWs+fwmALJbqpe0MpsuPpfaEscHF5V23uc5LbnZOY187vp
-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:33 2026 by rpki-client