Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GU5cYmGDL0uRHE15RkEVJOB1b8Y.roa
File: GU5cYmGDL0uRHE15RkEVJOB1b8Y.roa (raw, json)
Hash identifier: y5CUz818hMVqEQstn5FiRI4g4qiH/GLusY2XiEAFFZQ=
Subject key identifier: 19:4E:5C:62:61:83:2F:4B:91:1C:4D:79:46:41:15:24:E0:75:6F:C6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C55F6FCCF63079426433F046C176C951
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GU5cYmGDL0uRHE15RkEVJOB1b8Y.roa
Signing time: Tue 10 Nov 2026 12:12:08 +0000
ROA not before: Tue 10 Nov 2026 12:12:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215242
IP address blocks: 31.56.213.0/24 maxlen: 24
31.56.214.0/24 maxlen: 24
31.58.211.0/24 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:5f:6f:cc:f6:30:79:42:64:33:f0:46:c1:76:c9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 12:12:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=194e5c6261832f4b911c4d7946411524e0756fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:9d:bd:ff:35:c5:a5:76:2f:f4:38:31:e0:
10:7d:a9:d3:3b:02:15:b9:bc:f9:33:dd:f8:4a:3b:
16:51:26:3e:02:0b:bc:d6:4a:27:1c:2c:99:56:fb:
6d:d3:e0:18:52:85:ff:99:0a:7c:12:b8:4b:69:fb:
1c:d0:2c:76:4e:a6:f9:37:9e:7d:de:7a:53:64:58:
87:ee:c9:ea:2c:a2:d5:d8:7d:cd:7f:5d:8f:7a:90:
0b:10:26:c8:e9:d1:c2:08:49:f2:93:9c:52:00:88:
a7:07:81:c6:20:51:75:a3:67:2c:cd:62:9d:f3:21:
4a:41:a6:f6:67:5d:e7:f2:d4:5e:11:05:13:cd:ce:
6e:30:31:b3:2d:b7:57:08:64:fd:47:70:27:ef:dc:
56:f6:71:63:22:95:cb:bd:fa:fd:14:87:50:71:7a:
50:6c:ce:94:8a:b0:63:a9:ab:4f:3f:2d:1d:82:bd:
16:78:4e:53:22:9b:b7:1e:bb:d5:21:a7:e6:26:7e:
23:4c:0a:ca:66:67:83:ed:11:c1:1e:4e:32:9a:3f:
bb:4d:17:18:0d:61:fa:8c:23:fb:5f:08:34:f2:be:
c3:29:6f:4a:f6:77:83:24:51:60:7c:68:6b:d6:03:
b2:e9:ac:71:54:07:a6:84:cd:17:a5:19:69:4b:0d:
54:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4E:5C:62:61:83:2F:4B:91:1C:4D:79:46:41:15:24:E0:75:6F:C6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GU5cYmGDL0uRHE15RkEVJOB1b8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.213.0-31.56.214.255
31.58.211.0/24
31.58.235.0-31.58.236.255
31.58.246.0/24
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
20:02:a0:f3:f4:e8:62:d5:9a:a4:15:60:84:09:5e:cc:06:68:
23:46:6f:88:d3:20:65:8a:3e:cf:94:d3:39:5b:ce:51:cd:db:
21:b1:89:43:06:c7:d5:86:cb:a9:53:f5:63:8c:73:56:9b:b6:
b9:a6:89:76:a5:d2:8d:5f:e0:a0:c2:18:1f:5c:79:87:9f:a3:
a3:ad:12:a9:14:fe:a6:f2:66:2c:4f:8f:97:1b:fe:f7:8a:00:
eb:47:da:90:73:33:a9:85:98:f3:c6:b8:96:da:90:b9:c9:f2:
9a:a0:88:af:0b:7e:ee:7f:2b:32:88:19:f8:52:10:f8:6d:4f:
c3:ee:12:af:4b:e2:78:ef:de:0e:ea:c0:84:58:b7:40:a1:82:
3b:71:b8:ef:c1:55:99:de:94:07:05:c4:fe:74:78:ac:cb:cc:
b5:9d:ca:33:23:c6:6b:a8:b8:25:c3:b6:e8:e0:e0:9b:6c:82:
72:a4:56:85:47:21:55:ec:5d:f5:cc:0c:ae:0d:1e:46:39:91:
cd:84:8e:78:bb:e5:e9:f4:17:41:d9:a9:d5:9a:1c:98:cc:93:
76:b4:63:c6:e2:65:e3:09:14:4a:ed:16:3b:0f:d4:f2:a6:b2:
48:4e:b5:96:a7:ad:48:c9:58:1f:cf:35:34:f5:ee:11:f1:a9:
d6:23:1b:ff
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAaHFX2/M9jB5QmQz8EbBdslRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTEwMTIxMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTRlNWM2MjYxODMyZjRiOTExYzRkNzk0NjQxMTUyNGUwNzU2ZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhGdvf81xaV2L/Q4MeAQfanTOwIV
ubz5M934SjsWUSY+Agu81konHCyZVvtt0+AYUoX/mQp8ErhLafsc0Cx2Tqb5N559
3npTZFiH7snqLKLV2H3Nf12PepALECbI6dHCCEnyk5xSAIinB4HGIFF1o2cszWKd
8yFKQab2Z13n8tReEQUTzc5uMDGzLbdXCGT9R3An79xW9nFjIpXLvfr9FIdQcXpQ
bM6UirBjqatPPy0dgr0WeE5TIpu3HrvVIafmJn4jTArKZmeD7RHBHk4ymj+7TRcY
DWH6jCP7Xwg08r7DKW9K9neDJFFgfGhr1gOy6axxVAemhM0XpRlpSw1UEQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFBlOXGJhgy9LkRxNeUZBFSTgdW/GMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvR1U1Y1ltR0RMMHVSSEUxNVJrRVZKT0IxYjhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAAfONUD
BAAfONYDBAAfOtMwDAMEAB866wMEAB867AMEAB869gMEANk8/jANBgkqhkiG9w0B
AQsFAAOCAQEAIAKg8/ToYtWapBVghAlezAZoI0ZviNMgZYo+z5TTOVvOUc3bIbGJ
QwbH1YbLqVP1Y4xzVpu2uaaJdqXSjV/goMIYH1x5h5+jo60SqRT+pvJmLE+Plxv+
94oA60fakHMzqYWY88a4ltqQucnymqCIrwt+7n8rMogZ+FIQ+G1Pw+4Sr0vieO/e
DurAhFi3QKGCO3G478FVmd6UBwXE/nR4rMvMtZ3KMyPGa6i4JcO26ODgm2yCcqRW
hUchVexd9cwMrg0eRjmRzYSOeLvl6fQXQdmp1ZocmMyTdrRjxuJl4wkUSu0WOw/U
8qaySE61lqetSMlYH881NPXuEfGp1iMb/w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:49:16 2026 by rpki-client