Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eIUM6T4C-6VCKlshyqH71InvJGw.roa
File: eIUM6T4C-6VCKlshyqH71InvJGw.roa (raw, json)
Hash identifier: DQ4SOqK0TLQj24OVuUEQQ1Q9Fd3U5d9eEq3khtHnF2c=
Subject key identifier: 78:85:0C:E9:3E:02:FB:A5:42:2A:5B:21:CA:A1:FB:D4:89:EF:24:6C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CE361A01C27665B07ACBF40D90B5BF3D0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eIUM6T4C-6VCKlshyqH71InvJGw.roa
Signing time: Thu 12 Mar 2026 18:49:11 +0000
ROA not before: Thu 12 Mar 2026 18:49:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11439
IP address blocks: 31.58.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:61:a0:1c:27:66:5b:07:ac:bf:40:d9:0b:5b:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 12 18:49:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78850ce93e02fba5422a5b21caa1fbd489ef246c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:59:2e:b2:f9:75:c7:41:1e:7d:d4:45:72:
ce:56:06:14:7b:b3:0a:02:73:cb:32:31:0c:19:ba:
d5:6d:9a:bf:5c:dd:45:03:b2:fe:49:50:4a:01:b4:
18:48:46:d8:c4:d8:ce:ca:75:02:93:e1:cc:ce:1e:
84:fa:da:bc:01:28:52:c2:ec:3e:ee:03:31:01:96:
76:64:ae:72:7a:ab:2a:68:53:fd:3e:56:43:07:81:
1d:79:2e:fd:fb:21:ee:c6:fc:f4:1e:d3:a9:b2:c1:
92:ae:d6:ed:12:4d:5a:9f:47:2c:40:ce:b8:0a:34:
e5:df:47:68:5d:8c:fa:36:00:ca:52:97:61:0e:8f:
5f:91:dc:a2:49:de:32:aa:d8:8a:2c:ef:ca:99:56:
0c:dc:d8:d1:c0:52:a7:9a:ea:53:5e:20:23:9d:2a:
1d:cf:3c:ff:92:0f:e4:4d:1d:39:ce:79:9e:31:d6:
cf:9f:fa:c4:2d:cb:95:e7:84:f6:ea:f3:ad:43:41:
d6:2f:02:7d:40:7a:7a:bd:ec:bf:04:f8:68:55:ef:
20:15:e3:33:fa:3b:fc:aa:c4:cb:48:f1:89:c3:9b:
22:00:36:72:94:79:a6:96:86:a7:fb:c4:79:e4:32:
86:f9:94:8e:35:03:f7:91:2f:82:80:f3:e6:1d:b0:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:85:0C:E9:3E:02:FB:A5:42:2A:5B:21:CA:A1:FB:D4:89:EF:24:6C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eIUM6T4C-6VCKlshyqH71InvJGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.138.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:e7:aa:bb:70:27:50:b6:25:bd:95:11:d1:26:df:29:cc:98:
2a:2d:b6:a5:a1:61:4e:28:eb:75:40:22:74:18:e1:43:97:e3:
ac:2e:01:c7:d6:c9:d0:50:96:b0:26:22:76:c6:5b:b7:16:d2:
34:89:4c:2a:b6:eb:d7:09:60:ef:74:2f:55:11:c3:3b:dd:6d:
9c:2f:bb:17:5b:2f:93:45:3d:25:94:0f:c8:6a:f0:eb:5b:a6:
62:88:b4:5d:f4:6f:d2:69:fc:8d:02:e9:29:4f:b3:0f:2e:6d:
32:e8:ee:fd:47:e9:67:35:6e:f7:e2:c1:8d:5e:9f:9d:12:22:
02:99:04:46:b6:1c:bc:40:fc:f1:cd:87:a7:06:53:5a:b8:17:
5d:78:75:96:81:2d:9b:87:df:27:5e:23:37:a7:ef:bb:33:a8:
19:81:35:94:90:b6:10:19:22:6d:fa:4c:46:96:40:b8:0f:ca:
b8:fe:9a:a7:d9:58:ce:03:31:72:12:d9:c9:dd:64:c5:60:2d:
cb:0e:f8:9a:ae:ca:9d:1e:39:63:43:f1:e3:4b:03:36:7d:15:
8d:a2:c2:9a:df:53:47:e4:91:c3:c1:f8:36:19:f7:87:fb:e0:
5a:94:ff:47:62:f2:4d:58:d1:56:58:7f:7e:54:75:c6:69:4f:
69:dc:6b:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzjYaAcJ2ZbB6y/QNkLW/PQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzEyMTg0OTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODg1MGNlOTNlMDJmYmE1NDIyYTViMjFjYWExZmJkNDg5ZWYyNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlNZLrL5dcdBHn3URXLOVgYUe7MK
AnPLMjEMGbrVbZq/XN1FA7L+SVBKAbQYSEbYxNjOynUCk+HMzh6E+tq8AShSwuw+
7gMxAZZ2ZK5yeqsqaFP9PlZDB4EdeS79+yHuxvz0HtOpssGSrtbtEk1an0csQM64
CjTl30doXYz6NgDKUpdhDo9fkdyiSd4yqtiKLO/KmVYM3NjRwFKnmupTXiAjnSod
zzz/kg/kTR05znmeMdbPn/rELcuV54T26vOtQ0HWLwJ9QHp6vey/BPhoVe8gFeMz
+jv8qsTLSPGJw5siADZylHmmloan+8R55DKG+ZSONQP3kS+CgPPmHbDUsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHiFDOk+AvulQipbIcqh+9SJ7yRsMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZUlVTTZUNEMtNlZDS2xzaHlxSDcxSW52Skd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHzqKMA0G
CSqGSIb3DQEBCwUAA4IBAQC456q7cCdQtiW9lRHRJt8pzJgqLbaloWFOKOt1QCJ0
GOFDl+OsLgHH1snQUJawJiJ2xlu3FtI0iUwqtuvXCWDvdC9VEcM73W2cL7sXWy+T
RT0llA/IavDrW6ZiiLRd9G/SafyNAukpT7MPLm0y6O79R+lnNW734sGNXp+dEiIC
mQRGthy8QPzxzYenBlNauBddeHWWgS2bh98nXiM3p++7M6gZgTWUkLYQGSJt+kxG
lkC4D8q4/pqn2VjOAzFyEtnJ3WTFYC3LDviarsqdHjljQ/HjSwM2fRWNosKa31NH
5JHDwfg2GfeH++BalP9HYvJNWNFWWH9+VHXGaU9p3GuU
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:26 2026 by rpki-client