Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MElPUOuaCCmcWImEINIFNNseLeY.roa
File: MElPUOuaCCmcWImEINIFNNseLeY.roa (raw, json)
Hash identifier: NgQs64mdw9CWlU9JrA52vXJLkq/ZojjR/6MCw1yaTZA=
Subject key identifier: 30:49:4F:50:EB:9A:08:29:9C:58:89:84:20:D2:05:34:DB:1E:2D:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CF7FC45B6EDAD421C15D17ACA57EAF8C3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MElPUOuaCCmcWImEINIFNNseLeY.roa
Signing time: Mon 16 Mar 2026 18:50:31 +0000
ROA not before: Mon 16 Mar 2026 18:50:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 31.57.37.0/24 maxlen: 24
31.57.185.0/24 maxlen: 24
217.60.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:fc:45:b6:ed:ad:42:1c:15:d1:7a:ca:57:ea:f8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 16 18:50:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30494f50eb9a08299c58898420d20534db1e2de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:a6:44:7d:3f:9e:b2:0f:a6:f2:f5:62:3f:
12:65:03:1c:38:f8:fc:cd:7b:47:01:0a:19:bf:2d:
ca:41:22:63:86:c5:2f:2f:b2:f6:cd:a4:19:6b:b7:
a5:0e:00:bd:6c:a3:d3:ac:1f:f5:1b:fd:b6:94:96:
82:15:1c:0b:7a:23:78:20:8f:8c:25:02:b0:f5:98:
44:40:e6:b5:4e:91:7d:c1:e5:03:ab:10:d2:4c:e7:
db:3f:b9:ee:da:9b:03:bc:07:41:4f:96:ff:98:65:
57:3d:2e:20:fd:77:1f:54:31:9f:7c:dd:53:ec:0f:
8a:1a:28:8e:92:06:42:98:a4:84:9d:7e:d2:71:5b:
80:69:cf:e2:cf:46:da:6b:7d:68:0e:b6:c6:f0:f8:
52:88:e3:84:37:f4:5b:e9:38:e2:0b:a9:fb:f6:e9:
25:e1:be:72:36:1c:8d:84:b5:94:a4:7b:4f:40:6e:
cf:65:f6:a7:b7:15:6a:1c:ac:d9:6d:3e:2d:a7:9a:
d6:82:41:62:2b:7c:51:6d:8d:7f:15:b6:34:eb:05:
73:20:96:f6:c6:2e:1f:77:dc:32:1b:19:2b:a4:3c:
85:cd:34:6e:1a:fa:7d:f6:14:a8:1a:91:61:80:45:
6e:0b:a8:30:d8:7c:8d:f3:80:f1:d1:f1:70:63:cf:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:4F:50:EB:9A:08:29:9C:58:89:84:20:D2:05:34:DB:1E:2D:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MElPUOuaCCmcWImEINIFNNseLeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.37.0/24
31.57.185.0/24
217.60.250.0/24
Signature Algorithm: sha256WithRSAEncryption
26:03:4d:43:37:e7:1e:e8:dd:50:cc:37:96:07:6c:07:48:4a:
62:af:ce:74:e6:5f:a0:13:2f:d6:93:33:72:57:4a:8e:89:61:
f0:23:87:8a:56:e7:02:0e:3d:93:36:48:c0:0a:53:39:d8:26:
4c:83:4b:c0:f5:ce:c1:e2:7a:24:9d:90:5a:9a:5d:ee:98:d2:
fd:5d:45:9d:e8:25:24:87:4d:30:c7:05:40:25:e1:87:90:29:
22:b3:78:bb:df:af:d9:e5:ab:f8:cb:ef:c3:97:c4:cb:5b:00:
08:f0:32:94:35:43:4a:19:cb:63:2a:7f:cc:e2:03:ac:ab:ef:
65:b2:c6:90:79:6a:16:e3:c6:a8:dc:48:6b:c7:84:b0:3a:ff:
c3:c4:cb:cc:1a:42:3d:b7:b1:23:e6:e9:af:6b:cc:70:f9:f0:
eb:fc:33:0c:c2:a3:d5:3c:9b:37:32:7a:1f:cf:c7:72:f6:1d:
86:41:a2:c3:03:78:fa:36:01:82:30:cc:e7:3d:d7:2d:da:9e:
68:a3:1d:9b:7d:01:2f:6e:8b:90:a5:6b:cb:69:c4:56:ab:80:
b0:df:43:2e:bc:2d:d3:4b:92:6e:73:9d:d7:9d:1c:1a:36:85:
be:4f:18:00:c6:92:ce:11:01:70:67:5e:54:c5:f2:f2:dc:f2:
c8:4f:7f:60
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZz3/EW27a1CHBXRespX6vjDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzE2MTg1MDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDQ5NGY1MGViOWEwODI5OWM1ODg5ODQyMGQyMDUzNGRiMWUyZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFKmRH0/nrIPpvL1Yj8SZQMcOPj8
zXtHAQoZvy3KQSJjhsUvL7L2zaQZa7elDgC9bKPTrB/1G/22lJaCFRwLeiN4II+M
JQKw9ZhEQOa1TpF9weUDqxDSTOfbP7nu2psDvAdBT5b/mGVXPS4g/XcfVDGffN1T
7A+KGiiOkgZCmKSEnX7ScVuAac/iz0baa31oDrbG8PhSiOOEN/Rb6TjiC6n79ukl
4b5yNhyNhLWUpHtPQG7PZfantxVqHKzZbT4tp5rWgkFiK3xRbY1/FbY06wVzIJb2
xi4fd9wyGxkrpDyFzTRuGvp99hSoGpFhgEVuC6gw2HyN84Dx0fFwY8//VwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDBJT1DrmggpnFiJhCDSBTTbHi3mMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTUVsUFVPdWFDQ21jV0ltRUlOSUZOTnNlTGVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzklAwQA
Hzm5AwQA2Tz6MA0GCSqGSIb3DQEBCwUAA4IBAQAmA01DN+ce6N1QzDeWB2wHSEpi
r8505l+gEy/WkzNyV0qOiWHwI4eKVucCDj2TNkjAClM52CZMg0vA9c7B4noknZBa
ml3umNL9XUWd6CUkh00wxwVAJeGHkCkis3i736/Z5av4y+/Dl8TLWwAI8DKUNUNK
GctjKn/M4gOsq+9lssaQeWoW48ao3Ehrx4SwOv/DxMvMGkI9t7Ej5umva8xw+fDr
/DMMwqPVPJs3Mnofz8dy9h2GQaLDA3j6NgGCMMznPdct2p5oox2bfQEvbouQpWvL
acRWq4Cw30MuvC3TS5Juc53XnRwaNoW+TxgAxpLOEQFwZ15UxfLy3PLIT39g
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:26 2026 by rpki-client