Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mCy4Ef55WsjwQjRVtd9YNkzf1lg.roa
File: mCy4Ef55WsjwQjRVtd9YNkzf1lg.roa (raw, json)
Hash identifier: j8Lbis/UJ4Tov6RVLFVkvmiKd/smAV8FzzHHk0LAXeE=
Subject key identifier: 98:2C:B8:11:FE:79:5A:C8:F0:42:34:55:B5:DF:58:36:4C:DF:D6:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E3C736DC519E330A1646AB3C50D27022A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mCy4Ef55WsjwQjRVtd9YNkzf1lg.roa
Signing time: Mon 18 May 2026 18:57:38 +0000
ROA not before: Mon 18 May 2026 18:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51852
IP address blocks: 31.58.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3c:73:6d:c5:19:e3:30:a1:64:6a:b3:c5:0d:27:02:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 18 18:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=982cb811fe795ac8f0423455b5df58364cdfd658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:72:ca:4f:65:cb:1f:dd:c0:42:d5:93:97:
f9:72:9f:78:f9:35:20:8c:2f:9c:84:71:4e:79:4f:
c7:9d:f6:cb:af:95:c0:64:0f:95:19:fd:24:34:37:
48:bf:b1:cc:d0:c6:14:af:43:12:89:ca:aa:b5:f3:
da:49:40:53:bd:0a:73:81:76:7a:22:68:05:f9:03:
c2:1d:79:f2:92:b9:b4:ef:c0:33:fd:99:f1:e9:f3:
5d:1c:26:0c:02:1c:0c:30:fd:66:e3:8b:82:16:2d:
ce:4c:54:44:e6:e5:76:e8:4d:04:f8:9d:a4:cd:7d:
e0:9d:bb:48:6a:b6:29:8c:c2:c8:3e:d0:6d:c7:db:
9d:d6:a9:d6:fd:7e:b4:d9:39:85:c3:cb:14:43:b6:
e5:f9:6b:06:66:d2:56:b0:10:56:ad:95:e2:a7:c3:
12:12:77:9c:1c:46:ff:28:77:23:6b:0e:ac:9e:14:
36:be:32:70:73:9a:65:3c:4e:99:00:af:c6:36:4d:
db:a2:a1:6f:0d:fc:52:e7:29:10:6d:81:28:68:de:
20:e7:56:bc:88:6a:89:bf:80:bd:f5:a8:50:d8:b2:
bb:83:a3:fc:51:f6:2f:be:14:2e:8e:9f:6b:ce:72:
b1:64:d6:4c:98:03:42:7c:a0:39:a8:9a:58:1c:e9:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2C:B8:11:FE:79:5A:C8:F0:42:34:55:B5:DF:58:36:4C:DF:D6:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mCy4Ef55WsjwQjRVtd9YNkzf1lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.211.0/24
Signature Algorithm: sha256WithRSAEncryption
74:47:c1:ab:6d:02:62:a8:f9:ef:e6:0e:12:af:37:cd:92:39:
a9:ee:44:af:81:34:0a:90:10:b4:e4:00:20:fb:fb:d6:25:ea:
21:51:16:18:b2:69:72:e0:1f:67:fb:46:35:91:cc:a7:b1:dd:
f6:1a:2f:f8:4e:6d:0c:ed:cc:db:ea:22:b5:ca:ca:b9:90:68:
9a:ae:5e:05:75:25:6f:45:88:7e:05:7c:89:a1:87:6d:03:54:
0f:59:47:34:cc:cb:ee:18:93:d2:02:b4:c4:6d:29:5c:ba:14:
57:a4:fb:97:a0:c1:74:c4:bb:2f:71:79:53:7f:d3:3d:19:bb:
ce:f4:1b:c8:0d:3a:8e:e8:45:7d:c3:62:07:d1:8e:ba:c5:04:
4c:dd:d0:c5:28:4e:89:74:69:ec:a7:3f:16:8d:d9:43:d7:1f:
37:17:f1:fc:63:b7:66:7f:78:50:f9:e2:18:d9:84:77:87:f8:
2e:55:57:64:5b:76:91:7c:c0:9e:82:ad:20:ac:b7:36:34:94:
ea:45:69:94:6c:9a:af:d2:6a:29:ee:29:11:77:a4:99:58:e8:
ef:3c:53:45:ce:ae:44:ac:a3:b6:f5:2a:c1:36:fe:f3:9e:86:
ab:99:99:7c:2a:9b:fc:92:8b:52:96:b0:0b:d3:b8:37:d0:33:
ca:52:93:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ48c23FGeMwoWRqs8UNJwIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNTE4MTg1NzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODJjYjgxMWZlNzk1YWM4ZjA0MjM0NTViNWRmNTgzNjRjZGZkNjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0spyyk9lyx/dwELVk5f5cp94+TUg
jC+chHFOeU/HnfbLr5XAZA+VGf0kNDdIv7HM0MYUr0MSicqqtfPaSUBTvQpzgXZ6
ImgF+QPCHXnykrm078Az/Znx6fNdHCYMAhwMMP1m44uCFi3OTFRE5uV26E0E+J2k
zX3gnbtIarYpjMLIPtBtx9ud1qnW/X602TmFw8sUQ7bl+WsGZtJWsBBWrZXip8MS
EnecHEb/KHcjaw6snhQ2vjJwc5plPE6ZAK/GNk3boqFvDfxS5ykQbYEoaN4g51a8
iGqJv4C99ahQ2LK7g6P8UfYvvhQujp9rznKxZNZMmANCfKA5qJpYHOnhuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgsuBH+eVrI8EI0VbXfWDZM39ZYMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbUN5NEVmNTVXc2p3UWpSVnRkOVlOa3pmMWxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrTMA0G
CSqGSIb3DQEBCwUAA4IBAQB0R8GrbQJiqPnv5g4SrzfNkjmp7kSvgTQKkBC05AAg
+/vWJeohURYYsmly4B9n+0Y1kcynsd32Gi/4Tm0M7czb6iK1ysq5kGiarl4FdSVv
RYh+BXyJoYdtA1QPWUc0zMvuGJPSArTEbSlcuhRXpPuXoMF0xLsvcXlTf9M9GbvO
9BvIDTqO6EV9w2IH0Y66xQRM3dDFKE6JdGnspz8WjdlD1x83F/H8Y7dmf3hQ+eIY
2YR3h/guVVdkW3aRfMCegq0grLc2NJTqRWmUbJqv0mop7ikRd6SZWOjvPFNFzq5E
rKO29SrBNv7znoarmZl8Kpv8kotSlrAL07g30DPKUpP2
-----END CERTIFICATE-----
Generated at Wed May 27 15:55:22 2026 by rpki-client