Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EXmKJjn7oH0z-R1fZuhLDez0ojw.roa
File: EXmKJjn7oH0z-R1fZuhLDez0ojw.roa (raw, json)
Hash identifier: /+x2jLmzU6djCqZm+B/FVyyx/y3KPtdRlXcMF2oQE/Y=
Subject key identifier: 11:79:8A:26:39:FB:A0:7D:33:F9:1D:5F:66:E8:4B:0D:EC:F4:A2:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A19C8B1AC477F94CBB7700D1A3555463D6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EXmKJjn7oH0z-R1fZuhLDez0ojw.roa
Signing time: Mon 02 Nov 2026 13:55:24 +0000
ROA not before: Mon 02 Nov 2026 13:55:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64439
IP address blocks: 31.56.208.0/24 maxlen: 24
31.56.211.0/24 maxlen: 24
31.57.20.0/24 maxlen: 24
31.59.37.0/24 maxlen: 24
31.59.126.0/24 maxlen: 24
94.183.155.0/24 maxlen: 24
94.183.236.0/24 maxlen: 24
217.60.10.0/24 maxlen: 24
217.60.71.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:8b:1a:c4:77:f9:4c:bb:77:00:d1:a3:55:54:63:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 13:55:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11798a2639fba07d33f91d5f66e84b0decf4a23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:fe:98:72:80:4e:a9:cc:32:5e:c7:51:0d:
ad:aa:22:8a:fa:1a:df:5b:7b:71:d0:86:17:5e:95:
04:30:e6:0b:4d:6a:b2:17:7f:ba:e0:83:4b:f5:fa:
5f:23:f0:60:35:80:f6:fe:87:49:00:da:69:e3:28:
c4:2c:85:29:9f:71:12:5e:de:8f:a7:ba:35:af:ab:
d7:e3:d2:01:ff:d9:b4:4b:e2:66:a0:8b:0f:38:9d:
5c:c3:ec:fc:a0:a0:8b:cd:2c:ea:13:0d:c8:62:44:
3d:94:b7:44:b2:1d:f7:0b:64:9b:9e:5b:28:91:95:
e4:39:25:1a:6e:88:ce:3c:2c:71:f3:50:47:d2:20:
19:d8:0d:9f:1b:19:81:da:a8:eb:70:45:2d:a7:7a:
ec:19:f4:10:b4:d3:ac:39:5e:38:97:7c:76:1a:9a:
d6:1b:a4:a6:fa:51:84:16:d2:44:cc:6e:2e:13:59:
d4:ef:fb:6e:c2:6c:f9:66:8e:37:47:e1:d4:08:c1:
23:91:8c:26:16:91:dc:58:b9:94:c2:94:64:b0:53:
ea:2c:fd:3b:06:c8:61:a5:22:4b:04:41:5d:21:de:
5a:e2:c6:15:87:f3:08:11:6e:20:64:3a:2a:1b:66:
70:bd:82:de:7f:f4:16:d1:a1:8e:25:3f:0f:9c:7b:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:8A:26:39:FB:A0:7D:33:F9:1D:5F:66:E8:4B:0D:EC:F4:A2:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EXmKJjn7oH0z-R1fZuhLDez0ojw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.208.0/24
31.56.211.0/24
31.57.20.0/24
31.59.37.0/24
31.59.126.0/24
94.183.155.0/24
94.183.236.0/24
217.60.10.0/24
217.60.71.0/24
217.60.186.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
76:cd:9b:3c:34:4f:77:77:1d:ed:b6:0f:8e:7b:62:6a:64:9d:
81:7f:a4:38:17:89:f3:c5:52:86:49:1d:49:23:97:d0:7e:a7:
c0:af:de:a4:9f:31:97:f8:e8:f7:71:5a:16:90:3b:9c:b3:8b:
c6:ae:3f:29:a5:62:4e:5f:23:1e:3b:b5:eb:b2:13:a3:af:df:
5a:b3:9c:46:45:7c:83:ad:4f:6d:b9:e9:8c:0d:e6:55:56:ee:
0c:45:d6:b6:36:fe:52:a7:c3:a5:54:9b:fa:c8:05:16:04:86:
2f:81:a1:e7:6c:4f:dc:de:de:7b:ef:87:83:26:2c:d8:df:17:
3d:ae:11:77:1a:a9:66:c7:13:8a:a5:6b:46:35:d8:a5:ef:a5:
b8:a7:70:36:29:d3:30:4c:89:47:ae:3e:14:94:0e:63:f6:27:
9d:74:18:ae:a1:57:15:51:09:ab:25:2d:12:f3:21:e1:50:92:
57:5f:d1:64:27:d2:f8:13:1c:d4:1f:17:12:65:49:b0:ad:c0:
eb:11:35:a7:da:86:a4:d7:19:a1:a8:43:ef:71:cd:4e:89:ca:
26:0c:c0:2f:c8:b0:b0:55:3f:81:71:94:4c:81:b0:ea:2b:4c:
c7:9c:e4:3a:1d:d8:95:04:55:60:e6:40:03:88:7f:76:45:d6:
a3:5c:1b:9a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAaGcixrEd/lMu3cA0aNVVGPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTAyMTM1NTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTc5OGEyNjM5ZmJhMDdkMzNmOTFkNWY2NmU4NGIwZGVjZjRhMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8j+mHKATqnMMl7HUQ2tqiKK+hrf
W3tx0IYXXpUEMOYLTWqyF3+64INL9fpfI/BgNYD2/odJANpp4yjELIUpn3ESXt6P
p7o1r6vX49IB/9m0S+JmoIsPOJ1cw+z8oKCLzSzqEw3IYkQ9lLdEsh33C2Sbnlso
kZXkOSUabojOPCxx81BH0iAZ2A2fGxmB2qjrcEUtp3rsGfQQtNOsOV44l3x2GprW
G6Sm+lGEFtJEzG4uE1nU7/tuwmz5Zo43R+HUCMEjkYwmFpHcWLmUwpRksFPqLP07
BshhpSJLBEFdId5a4sYVh/MIEW4gZDoqG2ZwvYLef/QW0aGOJT8PnHuCBQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFBF5iiY5+6B9M/kdX2boSw3s9KI8MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRVhtS0pqbjdvSDB6LVIxZlp1aExEZXowb2p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBCBAIAATA8AwQAHzjQAwQA
HzjTAwQAHzkUAwQAHzslAwQAHzt+AwQAXrebAwQAXrfsAwQA2TwKAwQA2TxHAwQA
2Ty6MA8EAgACMAkDBwAqFG5AAAEwDQYJKoZIhvcNAQELBQADggEBAHbNmzw0T3d3
He22D457YmpknYF/pDgXifPFUoZJHUkjl9B+p8Cv3qSfMZf46PdxWhaQO5yzi8au
PymlYk5fIx47teuyE6Ov31qznEZFfIOtT2256YwN5lVW7gxF1rY2/lKnw6VUm/rI
BRYEhi+BoedsT9ze3nvvh4MmLNjfFz2uEXcaqWbHE4qla0Y12KXvpbincDYp0zBM
iUeuPhSUDmP2J510GK6hVxVRCaslLRLzIeFQkldf0WQn0vgTHNQfFxJlSbCtwOsR
NafahqTXGaGoQ+9xzU6JyiYMwC/IsLBVP4FxlEyBsOorTMec5Dod2JUEVWDmQAOI
f3ZF1qNcG5o=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:45:56 2026 by rpki-client