Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DviqCXClePdUIJqjcP__EROtop8.roa
File: DviqCXClePdUIJqjcP__EROtop8.roa (raw, json)
Hash identifier: 8RgOmqpasrebfr65Ek8L7rEiqxxnT/zeKOZWrdlJtzc=
Subject key identifier: 0E:F8:AA:09:70:A5:78:F7:54:20:9A:A3:70:FF:FF:11:13:AD:A2:9F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1DE31E569944E8DC7A201B9FECE19AB04
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DviqCXClePdUIJqjcP__EROtop8.roa
Signing time: Sun 15 Nov 2026 07:52:54 +0000
ROA not before: Sun 15 Nov 2026 07:52:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 31.57.4.0/24 maxlen: 24
31.57.60.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:31:e5:69:94:4e:8d:c7:a2:01:b9:fe:ce:19:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 07:52:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ef8aa0970a578f754209aa370ffff1113ada29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:12:cb:e4:5a:e5:2c:34:aa:ed:f1:bc:fe:
37:1c:28:53:7e:e1:80:db:9b:b8:e0:a9:d8:d8:25:
3c:16:11:c6:43:74:11:0a:f1:f6:f5:e4:29:59:4c:
52:d3:df:23:e5:72:a1:08:49:1b:99:99:36:10:38:
be:3c:b3:8f:11:05:1c:c5:eb:df:d0:f3:01:e9:37:
8b:51:26:24:30:2a:0e:a9:c8:b3:6d:9d:3d:c3:8a:
56:26:99:8c:21:ab:56:80:78:73:51:41:ae:16:c4:
4e:51:76:7a:88:44:96:b0:ca:ce:5e:b9:75:d2:d2:
89:a1:98:49:50:60:74:50:75:50:af:70:e9:cc:11:
66:3f:b7:44:7d:3f:58:00:5f:a3:d1:30:a4:de:61:
2f:9e:75:f6:2e:e2:ff:f7:37:b7:ee:62:c7:ef:50:
ce:01:69:0b:0f:eb:f3:e5:cb:df:b9:f1:c7:16:66:
ee:32:07:af:70:ae:fb:d5:71:2c:b7:2e:1f:67:12:
a1:5e:e4:e1:fb:8e:80:64:07:d6:a6:98:1b:f0:b8:
49:f6:fa:7e:0b:1b:6b:b5:58:b0:2c:c6:40:2e:9c:
96:f1:68:00:15:22:bd:44:22:97:81:73:8e:89:6b:
a4:ca:ad:3a:95:be:13:48:73:a4:b8:66:54:db:71:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:AA:09:70:A5:78:F7:54:20:9A:A3:70:FF:FF:11:13:AD:A2:9F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DviqCXClePdUIJqjcP__EROtop8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.4.0/24
31.57.60.0/24
31.57.140.0/24
31.59.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d2:55:66:00:13:e8:d9:f4:93:25:2f:56:08:ea:14:b9:59:
dc:ae:cf:c2:55:f9:41:13:0f:ee:c8:15:df:fe:cf:76:d2:c5:
8c:58:12:c7:31:25:7a:7c:b2:7b:81:e0:bf:6b:9b:dd:3e:48:
7f:40:e8:cc:55:cb:57:2c:0c:3d:b6:7c:b9:ef:d9:4e:e5:e7:
18:c0:79:64:5d:71:0d:4b:89:9d:11:8f:e6:51:45:34:9c:8f:
dc:a4:a2:56:00:ff:3c:f7:d0:91:ca:54:79:56:6f:0a:89:8d:
a9:61:ef:c5:2d:eb:be:3a:15:ff:b7:70:63:9e:d6:22:2b:3b:
dd:e5:2e:44:b2:82:b9:8a:9a:05:42:89:44:e0:19:37:c5:9d:
5b:cc:a1:b8:a9:b8:ab:12:dd:f7:bd:f1:23:b5:49:d9:41:e6:
b5:53:f0:34:35:d0:fa:22:c4:6f:fe:17:12:f9:7f:cd:7a:58:
20:bd:05:f8:a0:af:78:cb:83:3f:cb:3b:67:ff:be:63:6c:bb:
52:23:e7:54:a0:63:90:e2:c8:aa:94:3f:f5:bc:91:7e:4d:ed:
b7:dd:82:e9:2f:0f:98:65:eb:c2:4a:99:fe:b4:4d:ec:fd:30:
98:60:ea:35:f4:3a:48:37:b7:7f:09:cc:14:c6:c0:b6:8e:2a:
1c:9f:37:d6
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHeMeVplE6Nx6IBuf7OGasEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTE1MDc1MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWY4YWEwOTcwYTU3OGY3NTQyMDlhYTM3MGZmZmYxMTEzYWRhMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEwSy+Ra5Sw0qu3xvP43HChTfuGA
25u44KnY2CU8FhHGQ3QRCvH29eQpWUxS098j5XKhCEkbmZk2EDi+PLOPEQUcxevf
0PMB6TeLUSYkMCoOqcizbZ09w4pWJpmMIatWgHhzUUGuFsROUXZ6iESWsMrOXrl1
0tKJoZhJUGB0UHVQr3DpzBFmP7dEfT9YAF+j0TCk3mEvnnX2LuL/9ze37mLH71DO
AWkLD+vz5cvfufHHFmbuMgevcK771XEsty4fZxKhXuTh+46AZAfWppgb8LhJ9vp+
CxtrtViwLMZALpyW8WgAFSK9RCKXgXOOiWukyq06lb4TSHOkuGZU23EuWQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFA74qglwpXj3VCCao3D//xETraKfMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRHZpcUNYQ2xlUGRVSUpxamNQX19FUk90b3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzkEAwQA
Hzk8AwQAHzmMAwQAHztjMA0GCSqGSIb3DQEBCwUAA4IBAQCO0lVmABPo2fSTJS9W
COoUuVncrs/CVflBEw/uyBXf/s920sWMWBLHMSV6fLJ7geC/a5vdPkh/QOjMVctX
LAw9tny579lO5ecYwHlkXXENS4mdEY/mUUU0nI/cpKJWAP8899CRylR5Vm8KiY2p
Ye/FLeu+OhX/t3BjntYiKzvd5S5EsoK5ipoFQolE4Bk3xZ1bzKG4qbirEt33vfEj
tUnZQea1U/A0NdD6IsRv/hcS+X/NelggvQX4oK94y4M/yztn/75jbLtSI+dUoGOQ
4siqlD/1vJF+Te233YLpLw+YZevCSpn+tE3s/TCYYOo19DpIN7d/CcwUxsC2jioc
nzfW
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:28:52 2026 by rpki-client