Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dJnfXjRNMeKVAaAGUZljm3dmLkM.roa
File: dJnfXjRNMeKVAaAGUZljm3dmLkM.roa (raw, json)
Hash identifier: G+YUgLbe1iQn+Fo9ZyVVLWFEfOeLsJ5isNzBkOrmep4=
Subject key identifier: 74:99:DF:5E:34:4D:31:E2:95:01:A0:06:51:99:63:9B:77:66:2E:43
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F503345B4022413A74801DC08AC3408DA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dJnfXjRNMeKVAaAGUZljm3dmLkM.roa
Signing time: Sat 11 Jul 2026 08:02:45 +0000
ROA not before: Sat 11 Jul 2026 08:02:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212743
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
94.183.206.0/24 maxlen: 24
94.183.208.0/24 maxlen: 24
94.183.209.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:50:33:45:b4:02:24:13:a7:48:01:dc:08:ac:34:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 11 08:02:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7499df5e344d31e29501a0065199639b77662e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:28:be:37:f8:62:fe:bb:43:79:d9:28:f0:
22:d6:62:67:a6:c1:62:3b:c1:0e:2d:1e:76:f2:5a:
b4:87:e0:6e:64:4d:11:90:f2:df:cf:6c:9c:b2:dd:
87:2b:4f:bc:37:68:17:d3:b4:12:36:52:78:97:34:
95:12:af:d1:96:ee:b2:b5:b0:54:0b:a7:a5:c8:d1:
b7:96:6b:98:d2:f9:a3:4e:1d:4d:eb:42:2b:28:f5:
d8:00:e3:60:34:ad:65:48:fd:e4:7c:04:0a:35:2f:
8c:1b:41:c7:c6:27:55:d1:94:50:45:08:6d:da:0c:
05:ed:b0:7a:4c:55:57:ab:96:d4:fa:f3:04:e3:9c:
5b:f7:23:02:0d:e3:ba:e9:b5:c4:20:e9:35:20:1b:
0f:31:33:24:7c:ae:a1:01:a3:a2:ca:ea:0d:bb:55:
a7:ff:38:de:9a:3b:4a:ef:4b:40:4c:c9:0a:c5:5f:
3c:0b:1f:af:5e:a0:c3:de:6a:32:48:d1:c3:28:aa:
1c:6c:14:4c:f4:7d:63:d3:45:22:65:ce:a4:b6:49:
38:97:47:2c:f1:4a:58:25:57:35:96:39:47:3d:33:
ed:31:cc:32:91:51:2e:57:04:61:e3:87:06:d9:32:
2c:4c:4a:40:74:ff:57:38:82:13:23:b7:61:c6:7a:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:DF:5E:34:4D:31:E2:95:01:A0:06:51:99:63:9B:77:66:2E:43
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dJnfXjRNMeKVAaAGUZljm3dmLkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
94.183.170.0/24
94.183.206.0/24
94.183.208.0/23
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d1:62:93:24:21:20:9f:eb:4e:c5:d7:e8:5c:f8:40:c0:64:
97:6f:0c:c7:ea:1e:e7:e5:5d:c1:43:bf:b7:a4:de:05:3b:d8:
b7:42:52:ea:01:e4:15:e6:b4:4c:f4:0b:a6:04:bb:a9:95:29:
f6:3d:62:b1:e7:3f:3c:ae:e4:9d:01:d3:21:3d:40:06:42:34:
fa:78:61:2b:67:4b:51:11:dc:a9:61:7c:c1:08:0d:10:e7:6d:
98:ce:39:b6:d0:c7:31:91:3b:1a:6d:66:a4:13:27:1b:35:46:
81:21:09:63:1f:17:eb:76:7e:6e:01:2c:e6:9d:a5:19:fc:3b:
59:43:84:ff:20:43:bb:1b:5a:5d:3b:c2:93:c9:18:57:e4:ec:
33:c1:ab:be:2e:05:65:c0:2c:cd:d6:76:2c:93:f1:d2:ce:43:
eb:5f:23:a8:67:22:b0:91:f7:6d:b6:55:65:56:00:67:28:17:
36:8e:85:2f:f8:06:87:5b:cd:ec:3e:0f:b6:62:fd:11:9c:0e:
2d:06:d7:94:ac:48:5e:a8:7b:f3:e5:3c:fe:02:7d:1c:3f:fa:
ca:19:28:63:a6:ac:fa:2a:99:75:84:67:c5:fc:42:83:64:e3:
4e:1d:8d:52:74:29:ff:6b:9a:59:28:26:67:6d:ac:f8:70:ad:
c4:67:0f:dd
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ9QM0W0AiQTp0gB3AisNAjaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzExMDgwMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDk5ZGY1ZTM0NGQzMWUyOTUwMWEwMDY1MTk5NjM5Yjc3NjYyZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD0ovjf4Yv67Q3nZKPAi1mJnpsFi
O8EOLR528lq0h+BuZE0RkPLfz2ycst2HK0+8N2gX07QSNlJ4lzSVEq/Rlu6ytbBU
C6elyNG3lmuY0vmjTh1N60IrKPXYAONgNK1lSP3kfAQKNS+MG0HHxidV0ZRQRQht
2gwF7bB6TFVXq5bU+vME45xb9yMCDeO66bXEIOk1IBsPMTMkfK6hAaOiyuoNu1Wn
/zjemjtK70tATMkKxV88Cx+vXqDD3moySNHDKKocbBRM9H1j00UiZc6ktkk4l0cs
8UpYJVc1ljlHPTPtMcwykVEuVwRh44cG2TIsTEpAdP9XOIITI7dhxnrZGQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFHSZ3140TTHilQGgBlGZY5t3Zi5DMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZEpuZlhqUk5NZUtWQWFBR1VabGptM2RtTGtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBHzroAwQA
HzsnAwQAXreqAwQAXrfOAwQBXrfQAwQAXrfiAwQBXrfuAwQAXrf+AwQB2TwIAwQA
2TwYAwQA2TxjMA0GCSqGSIb3DQEBCwUAA4IBAQBl0WKTJCEgn+tOxdfoXPhAwGSX
bwzH6h7n5V3BQ7+3pN4FO9i3QlLqAeQV5rRM9AumBLuplSn2PWKx5z88ruSdAdMh
PUAGQjT6eGErZ0tREdypYXzBCA0Q522Yzjm20McxkTsabWakEycbNUaBIQljHxfr
dn5uASzmnaUZ/DtZQ4T/IEO7G1pdO8KTyRhX5Owzwau+LgVlwCzN1nYsk/HSzkPr
XyOoZyKwkfdttlVlVgBnKBc2joUv+AaHW83sPg+2Yv0RnA4tBteUrEheqHvz5Tz+
An0cP/rKGShjpqz6Kpl1hGfF/EKDZONOHY1SdCn/a5pZKCZnbaz4cK3EZw/d
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:29 2026 by rpki-client