Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2MrUxNA67ZnRvoO9HnfcO3fyDoE.roa
File: 2MrUxNA67ZnRvoO9HnfcO3fyDoE.roa (raw, json)
Hash identifier: OOZYPYbBdcwi1RDZ7L53VB7R7fPUfVsoFtPWlJCX1dk=
Subject key identifier: D8:CA:D4:C4:D0:3A:ED:99:D1:BE:83:BD:1E:77:DC:3B:77:F2:0E:81
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C482CAFE2ACDC2812CF8739019E73197B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2MrUxNA67ZnRvoO9HnfcO3fyDoE.roa
Signing time: Tue 10 Feb 2026 15:30:14 +0000
ROA not before: Tue 10 Feb 2026 15:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30633
IP address blocks: 31.57.193.0/24 maxlen: 24
31.57.232.0/24 maxlen: 24
31.57.235.0/24 maxlen: 24
31.58.148.0/24 maxlen: 24
31.58.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:2c:af:e2:ac:dc:28:12:cf:87:39:01:9e:73:19:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 10 15:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8cad4c4d03aed99d1be83bd1e77dc3b77f20e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:8b:35:12:2e:2f:c3:9e:a7:56:f1:b4:37:
d6:ae:43:d0:f9:6f:ba:27:5c:08:37:b7:03:f4:0a:
68:f1:3a:74:9e:96:8f:06:5c:84:12:23:81:15:fa:
4b:cb:92:93:6d:1c:af:86:00:5c:60:bf:80:db:1d:
2a:0b:80:28:a3:1c:2f:8b:d9:d4:c4:a5:91:14:0c:
ab:54:0e:22:66:ec:0f:97:9e:e9:a4:d0:47:58:d5:
b3:f5:e2:59:fe:73:93:22:45:fe:65:11:58:78:aa:
25:6b:a0:65:f2:d1:7c:e9:83:23:c3:cd:4f:83:ab:
8e:a8:fa:52:aa:8c:e4:c9:63:ca:84:92:ed:c0:84:
d4:c7:b5:74:50:09:e6:a4:eb:f5:ba:10:80:ee:a5:
f3:91:b4:c2:02:9e:b1:eb:0c:77:c4:10:d5:79:c9:
7a:77:9f:85:5b:19:3c:8e:1d:72:a5:24:75:13:fb:
da:52:68:4c:ce:93:24:57:eb:ba:3b:d9:3a:4c:4e:
d2:19:71:67:93:44:00:cb:4d:45:f7:6e:ec:17:98:
48:2d:f6:36:c5:41:dc:36:ca:20:70:96:54:a5:5c:
18:d8:34:f6:17:98:bf:99:a4:4b:68:0c:20:8d:a0:
fb:25:a9:14:73:91:34:cd:ad:da:db:af:81:04:3d:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:D4:C4:D0:3A:ED:99:D1:BE:83:BD:1E:77:DC:3B:77:F2:0E:81
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2MrUxNA67ZnRvoO9HnfcO3fyDoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.193.0/24
31.57.232.0/24
31.57.235.0/24
31.58.148.0/24
31.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
86:29:d6:52:36:9b:44:03:83:b9:15:01:03:d0:94:e4:ca:7e:
ec:7d:d6:00:b9:5d:1a:7d:48:20:8d:5f:b9:af:d8:e7:80:62:
64:bd:17:da:c2:e3:a3:ab:0b:0b:eb:c5:bc:23:c1:c8:4a:32:
05:86:be:d2:cd:67:46:9e:03:e7:44:b1:04:44:c5:90:87:11:
84:d6:e5:6b:03:d7:fc:29:b6:86:b5:3d:5f:e4:80:fa:65:14:
5e:a0:b5:5b:f9:47:f7:69:3d:62:9b:ec:bf:71:41:09:15:1e:
e0:40:37:4d:23:81:e1:84:7b:ed:c9:04:fa:8b:f4:b7:30:fa:
fc:11:86:83:e9:b2:40:fb:fa:18:56:c6:57:bf:28:91:6f:17:
59:1c:34:37:2d:62:35:2b:52:61:13:bd:3b:9c:39:5d:b8:8c:
74:20:42:d7:45:16:cc:5e:8d:01:35:22:ca:13:2f:b7:dd:1e:
47:3d:cb:6d:42:d8:7c:d8:1d:7b:2f:4f:31:8f:24:78:ef:ac:
32:11:32:2a:e4:c6:68:b1:9d:03:2f:78:aa:8d:c8:be:8a:ee:
24:9d:65:60:00:bb:8b:b8:0e:a4:99:a5:20:19:f0:bc:f5:fe:
7a:e4:55:42:36:75:e9:03:cb:15:ea:c7:d6:ee:a4:97:65:3e:
03:b3:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:47 2026 by rpki-client