Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x_OaYHk0fQ90_yAnJBi4M61UQAE.roa
File: x_OaYHk0fQ90_yAnJBi4M61UQAE.roa (raw, json)
Hash identifier: Uleuz9zSUB5wQgPzrSTmYx2U23t4IdrgxBbOJCcgwyk=
Subject key identifier: C7:F3:9A:60:79:34:7D:0F:74:FF:20:27:24:18:B8:33:AD:54:40:01
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DDEFE26525177DBEAF60109636EA012A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x_OaYHk0fQ90_yAnJBi4M61UQAE.roa
Signing time: Thu 30 Apr 2026 15:24:51 +0000
ROA not before: Thu 30 Apr 2026 15:24:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 31.58.144.0/24 maxlen: 24
217.60.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:fe:26:52:51:77:db:ea:f6:01:09:63:6e:a0:12:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 30 15:24:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7f39a6079347d0f74ff20272418b833ad544001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:49:46:11:42:58:4a:57:31:27:47:8c:3f:
c8:26:70:60:08:37:d0:42:87:9b:47:d2:df:dc:57:
7b:bb:39:cc:2e:9c:83:64:de:0a:1d:aa:5c:0c:0f:
19:80:44:49:63:bf:2e:ef:d3:e0:e3:bc:4a:17:d4:
19:71:f7:fb:74:9f:72:2e:e9:78:44:f6:02:67:bb:
c8:92:e8:f3:c6:d8:2b:1c:d3:e1:6c:83:b1:38:24:
f3:4d:63:cd:35:62:cd:80:6c:56:07:37:00:6c:6c:
f7:9a:86:d8:a6:8f:ef:e8:dd:61:cd:a0:cd:f8:fd:
4e:71:d1:eb:07:f9:51:45:0c:e2:d3:7a:42:9f:99:
75:7b:9e:e4:df:69:04:28:33:d0:5e:b2:ac:72:59:
11:b0:bf:03:44:8a:5c:03:e9:ec:31:d8:d1:d1:02:
ee:89:fa:99:ba:83:9e:ac:de:28:fe:4b:72:f9:97:
8b:66:ee:e4:a0:62:a6:86:b9:5a:b5:12:1f:73:29:
f4:6b:94:7a:b2:7a:55:e9:72:51:4b:f4:1d:2d:d1:
b4:0c:c7:36:63:a2:63:09:2f:ba:2e:d5:1b:8d:19:
c9:26:70:70:ca:89:cd:df:28:6f:30:59:9a:33:99:
ed:5c:56:4d:06:3d:a3:af:b4:bf:ab:42:cd:fc:15:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:9A:60:79:34:7D:0F:74:FF:20:27:24:18:B8:33:AD:54:40:01
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x_OaYHk0fQ90_yAnJBi4M61UQAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.144.0/24
217.60.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:10:2d:a7:37:50:9d:0a:d3:c7:d9:e6:5b:fc:9c:51:9b:23:
e8:c3:ab:06:88:cf:5d:de:34:4b:89:fd:cf:c3:58:06:f3:2a:
8d:22:ca:d3:d2:2a:ab:79:a7:b0:eb:31:b8:c0:2c:85:62:c6:
2c:ae:34:c5:d2:d3:cb:34:36:04:e1:2e:d5:cc:99:24:c4:88:
a3:78:a3:d0:1f:97:e5:4a:31:f2:f2:4d:b4:fc:49:92:4d:bb:
d0:cc:8f:88:23:d9:c4:e0:d9:b9:b7:35:76:47:9d:6b:6a:60:
65:19:84:fd:63:be:cb:19:98:cf:b3:99:44:1b:8e:c9:fc:4e:
56:a9:ea:e6:79:4d:37:89:c3:28:07:c3:93:8e:8a:00:dc:3c:
8a:1b:5d:d4:fa:63:df:dd:15:52:6b:db:33:39:f0:b7:16:c0:
d5:ce:5d:d4:f0:68:4b:0e:a9:6b:18:f8:90:96:28:e1:f4:6c:
9a:5b:a8:18:10:d6:f9:9f:5b:d3:b4:f7:1b:70:d0:2a:ff:65:
75:d6:18:c7:96:b6:db:87:b5:fe:15:f9:13:3d:16:a3:72:12:
e8:c3:cd:74:70:91:6a:fe:32:6b:ca:f8:16:11:e7:ec:ad:66:
d0:91:ab:c6:39:a3:c8:66:3a:01:34:88:fd:85:56:15:8b:09:
77:98:d3:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3e/iZSUXfb6vYBCWNuoBKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNDMwMTUyNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2YzOWE2MDc5MzQ3ZDBmNzRmZjIwMjcyNDE4YjgzM2FkNTQ0MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhhJRhFCWEpXMSdHjD/IJnBgCDfQ
QoebR9Lf3Fd7uznMLpyDZN4KHapcDA8ZgERJY78u79Pg47xKF9QZcff7dJ9yLul4
RPYCZ7vIkujzxtgrHNPhbIOxOCTzTWPNNWLNgGxWBzcAbGz3mobYpo/v6N1hzaDN
+P1OcdHrB/lRRQzi03pCn5l1e57k32kEKDPQXrKsclkRsL8DRIpcA+nsMdjR0QLu
ifqZuoOerN4o/kty+ZeLZu7koGKmhrlatRIfcyn0a5R6snpV6XJRS/QdLdG0DMc2
Y6JjCS+6LtUbjRnJJnBwyonN3yhvMFmaM5ntXFZNBj2jr7S/q0LN/BU65QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMfzmmB5NH0PdP8gJyQYuDOtVEABMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveF9PYVlIazBmUTkwX3lBbkpCaTRNNjFVUUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzqQAwQA
2Ty4MA0GCSqGSIb3DQEBCwUAA4IBAQCoEC2nN1CdCtPH2eZb/JxRmyPow6sGiM9d
3jRLif3Pw1gG8yqNIsrT0iqreaew6zG4wCyFYsYsrjTF0tPLNDYE4S7VzJkkxIij
eKPQH5flSjHy8k20/EmSTbvQzI+II9nE4Nm5tzV2R51ramBlGYT9Y77LGZjPs5lE
G47J/E5WqermeU03icMoB8OTjooA3DyKG13U+mPf3RVSa9szOfC3FsDVzl3U8GhL
DqlrGPiQlijh9GyaW6gYENb5n1vTtPcbcNAq/2V11hjHlrbbh7X+FfkTPRajchLo
w810cJFq/jJryvgWEefsrWbQkavGOaPIZjoBNIj9hVYViwl3mNNh
-----END CERTIFICATE-----
Generated at Fri May 8 15:35:33 2026 by rpki-client