Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/24NDosuGOzoLKVetD4UFYNcQ4SA.roa
File: 24NDosuGOzoLKVetD4UFYNcQ4SA.roa (raw, json)
Hash identifier: x73nU2X10gXdOf1oB089+xGubJOyS5xtYbEaoPCCv+4=
Subject key identifier: DB:83:43:A2:CB:86:3B:3A:0B:29:57:AD:0F:85:05:60:D7:10:E1:20
Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d
Certificate serial: 019C9945AB760A7B507BC7CCD72A7466632F
Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/24NDosuGOzoLKVetD4UFYNcQ4SA.roa
Signing time: Thu 26 Feb 2026 09:26:45 +0000
ROA not before: Thu 26 Feb 2026 09:26:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29583
IP address blocks: 31.186.184.0/24 maxlen: 24
31.186.185.0/24 maxlen: 24
31.186.186.0/24 maxlen: 24
31.186.187.0/24 maxlen: 24
31.186.188.0/24 maxlen: 24
31.186.190.0/24 maxlen: 24
31.186.191.0/24 maxlen: 24
193.138.78.0/24 maxlen: 24
217.169.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:45:ab:76:0a:7b:50:7b:c7:cc:d7:2a:74:66:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d
Validity
Not Before: Feb 26 09:26:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db8343a2cb863b3a0b2957ad0f850560d710e120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:05:bc:97:d6:cd:5a:98:40:79:d3:f7:9e:
ab:4d:34:78:86:33:a0:f4:30:d8:c1:96:2a:ac:56:
fa:13:ee:80:90:83:62:be:bb:bd:c1:55:11:7e:a2:
47:07:a3:4e:5d:6c:50:76:14:93:dd:6a:19:33:e2:
f0:05:cc:bb:b7:f1:97:55:4a:16:ce:93:6e:1f:d8:
b6:b7:05:10:15:99:08:de:1a:af:27:41:1d:2e:e7:
3b:23:bb:36:f3:6b:8b:a3:cd:4f:5c:e7:8a:28:a2:
98:78:87:8c:cc:3b:bc:0e:ad:8a:fb:f5:29:d6:44:
f3:fa:3c:bb:83:f2:43:26:a5:d8:1b:fb:61:b5:2a:
19:9d:88:e3:cd:46:98:4f:dd:18:14:6a:31:0a:1c:
b0:7a:ea:cd:b2:22:c1:ae:f2:de:a6:a6:6b:3a:fd:
ff:d7:48:d0:c1:f7:f6:92:67:09:95:c4:00:e2:f4:
60:d6:0a:18:e2:bc:2f:72:f4:8f:6d:9d:44:83:7d:
62:ba:27:b0:0a:a4:82:51:33:93:69:e6:ac:7d:80:
51:63:d0:18:3d:e5:37:76:6c:f5:b0:ef:de:09:5b:
21:c7:cb:dd:2b:6a:33:95:df:b1:59:d8:c8:c6:3c:
9f:6d:b2:c1:8a:fe:3e:61:31:f7:66:97:ca:9f:de:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:83:43:A2:CB:86:3B:3A:0B:29:57:AD:0F:85:05:60:D7:10:E1:20
X509v3 Authority Key Identifier:
keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/24NDosuGOzoLKVetD4UFYNcQ4SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.184.0-31.186.188.255
31.186.190.0/23
193.138.78.0/24
217.169.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:f8:d4:c3:26:50:94:b0:b5:67:1a:f9:db:37:be:a1:36:35:
0a:8d:1a:0b:e4:c3:31:95:2c:fe:56:84:28:e2:57:d7:f6:ca:
3a:95:22:00:11:70:91:6e:94:a6:3b:a0:88:24:ca:66:1a:bd:
fa:78:3e:31:1c:59:74:22:b9:0c:ad:8c:9e:76:28:3c:3e:6c:
7a:c7:f3:6c:63:30:2a:99:a9:e5:64:16:04:16:19:bd:47:9b:
a8:e0:b8:9c:ff:82:39:b7:9a:95:a6:a3:59:e2:f4:c2:30:ba:
e2:f4:cb:f9:20:47:bf:26:c4:0f:b0:eb:a7:23:2c:9b:0e:a0:
61:da:49:f9:fc:e4:b4:cf:8e:5f:1b:a7:5d:d5:0c:b7:8b:a2:
da:34:50:42:32:85:02:fc:bb:9d:e0:a6:1d:e4:73:e8:f1:03:
df:5a:7f:d9:79:56:5f:d6:17:9b:fc:ca:5e:0a:7d:fc:21:54:
c8:db:fc:bd:5b:3c:72:90:b8:b9:4e:45:6e:09:2a:ff:a8:bc:
38:12:72:22:74:c8:31:cb:50:90:b2:66:47:41:32:c3:92:fe:
01:49:a5:93:87:4f:a3:df:85:6f:a5:9f:82:e5:2a:5e:e9:1d:
3f:60:7d:95:57:27:0a:c7:d4:e5:4f:92:80:c9:37:0b:d2:7b:
0a:14:67:d3
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZyZRat2CntQe8fM1yp0ZmMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDk1YTJmNDFjZDEwNWFlZjA2ZjI4NzBhNzYzMzk4MDFl
ZGI5MGQwHhcNMjYwMjI2MDkyNjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjgzNDNhMmNiODYzYjNhMGIyOTU3YWQwZjg1MDU2MGQ3MTBlMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbsFvJfWzVqYQHnT956rTTR4hjOg
9DDYwZYqrFb6E+6AkINivru9wVURfqJHB6NOXWxQdhST3WoZM+LwBcy7t/GXVUoW
zpNuH9i2twUQFZkI3hqvJ0EdLuc7I7s282uLo81PXOeKKKKYeIeMzDu8Dq2K+/Up
1kTz+jy7g/JDJqXYG/thtSoZnYjjzUaYT90YFGoxChyweurNsiLBrvLepqZrOv3/
10jQwff2kmcJlcQA4vRg1goY4rwvcvSPbZ1Eg31iuiewCqSCUTOTaeasfYBRY9AY
PeU3dmz1sO/eCVshx8vdK2ozld+xWdjIxjyfbbLBiv4+YTH3ZpfKn95tVQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFNuDQ6LLhjs6CylXrQ+FBWDXEOEgMB8GA1UdIwQY
MBaAFFRJWi9BzRBa7wbyhwp2M5gB7bkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEt
Zjk5NDBmYTFlMTA4LzEvMjRORG9zdUdPem9MS1ZldEQ0VUZZTmNRNFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEtZjk5NDBmYTFlMTA4
LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAMfurgD
BAAfurwDBAEfur4DBADBik4DBATZqbAwDQYJKoZIhvcNAQELBQADggEBAA341MMm
UJSwtWca+ds3vqE2NQqNGgvkwzGVLP5WhCjiV9f2yjqVIgARcJFulKY7oIgkymYa
vfp4PjEcWXQiuQytjJ52KDw+bHrH82xjMCqZqeVkFgQWGb1Hm6jguJz/gjm3mpWm
o1ni9MIwuuL0y/kgR78mxA+w66cjLJsOoGHaSfn85LTPjl8bp13VDLeLoto0UEIy
hQL8u53gph3kc+jxA99af9l5Vl/WF5v8yl4KffwhVMjb/L1bPHKQuLlORW4JKv+o
vDgSciJ0yDHLUJCyZkdBMsOS/gFJpZOHT6PfhW+ln4LlKl7pHT9gfZVXJwrH1OVP
koDJNwvSewoUZ9M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:25 2026 by rpki-client