Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FEi6TFkWPIn2uKPAkuz3Nui4ruI.roa
File: FEi6TFkWPIn2uKPAkuz3Nui4ruI.roa (raw, json)
Hash identifier: AFP9w5PLBD2kj7Hly9On++XlDrW9eekU8XSgBkTewhI=
Subject key identifier: 14:48:BA:4C:59:16:3C:89:F6:B8:A3:C0:92:EC:F7:36:E8:B8:AE:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D52FCB87F378499CE06B46EE33508466A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FEi6TFkWPIn2uKPAkuz3Nui4ruI.roa
Signing time: Fri 03 Apr 2026 10:56:27 +0000
ROA not before: Fri 03 Apr 2026 10:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206119
IP address blocks: 31.57.217.0/24 maxlen: 24
31.59.37.0/24 maxlen: 24
94.183.152.0/24 maxlen: 24
217.60.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:fc:b8:7f:37:84:99:ce:06:b4:6e:e3:35:08:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 3 10:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1448ba4c59163c89f6b8a3c092ecf736e8b8aee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:7d:06:f4:89:1a:4e:0f:4d:a1:66:44:56:
fd:77:4f:f7:c0:81:9d:c0:f5:13:13:7a:ce:54:18:
71:46:35:8c:24:20:92:23:62:9b:83:5c:93:9b:28:
d5:96:8d:db:20:9e:0d:ab:b3:05:29:7b:30:d3:da:
d9:6b:9c:8a:d3:fd:da:aa:af:ce:30:ee:21:59:46:
1f:d5:7d:ca:d1:43:81:8d:0f:7d:12:1f:c0:45:32:
3e:63:c4:aa:74:fb:b0:ff:4b:9d:98:b3:86:bc:93:
73:bb:ff:e7:4a:17:a1:62:b2:c8:82:0c:7d:f6:c0:
f5:c7:5b:56:e0:20:58:c6:a9:9d:fc:dc:03:9e:c0:
9a:00:a6:90:4e:b3:41:25:ed:29:71:86:79:64:4d:
43:5c:5c:59:e4:ae:e1:8c:77:8f:4d:8f:6d:07:3b:
22:d8:e6:a5:a3:13:b6:bf:c2:cf:9e:2b:c8:eb:3c:
2c:95:98:cf:54:12:04:68:56:be:b6:3f:ba:b9:5c:
97:fe:19:6d:01:b4:d8:43:10:5a:33:17:1a:68:8c:
20:09:f1:c0:30:8b:c5:bf:35:92:4c:9b:79:77:f5:
86:fc:d0:de:1e:40:c2:0f:2a:e1:17:bb:52:30:a3:
28:d1:ad:22:af:55:db:50:bc:8d:18:2a:d1:c3:86:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:BA:4C:59:16:3C:89:F6:B8:A3:C0:92:EC:F7:36:E8:B8:AE:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FEi6TFkWPIn2uKPAkuz3Nui4ruI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.217.0/24
31.59.37.0/24
94.183.152.0/24
217.60.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:7d:77:fd:60:a1:0a:65:b2:16:26:07:7a:be:35:c6:06:54:
89:6b:a1:a5:bb:3a:71:52:42:96:27:6c:cd:ff:1d:4b:8f:1e:
4d:ce:87:f5:1b:9a:f9:5d:17:52:63:72:c1:c7:97:33:5f:29:
33:ee:0f:ed:c0:28:8f:6e:42:71:45:4c:5f:c9:e9:35:50:ed:
2e:86:96:4a:9b:70:59:6d:de:4a:64:66:e2:e2:4d:d7:8b:89:
72:c4:ab:c2:dc:20:0b:bb:cc:94:b8:eb:13:e6:81:da:3e:2b:
09:ee:bb:1e:75:59:8e:80:ae:e9:5b:d9:d5:27:8d:fe:76:39:
74:02:91:5f:8b:1d:6a:26:58:d2:e2:17:0c:29:1f:9b:3c:23:
20:fb:19:f6:8b:30:db:b5:db:0f:39:8e:51:c2:63:6e:e6:e3:
33:64:34:28:28:d0:09:bc:75:32:e0:a5:9e:b5:ef:12:3a:d1:
1c:2b:2a:aa:f1:c5:0f:72:e3:a2:a8:e0:eb:28:27:0a:67:43:
36:43:5b:47:fc:21:01:59:5f:fc:4c:3a:c9:6e:d7:3a:2d:19:
d8:c7:fe:bc:5d:e6:db:3a:7a:b0:1e:f2:01:a2:f5:46:e7:38:
a5:97:7b:e9:fe:2e:ce:b2:a0:1f:eb:ef:27:35:cf:fd:1e:65:
fa:02:3f:40
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ1S/Lh/N4SZzga0buM1CEZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNDAzMTA1NjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDQ4YmE0YzU5MTYzYzg5ZjZiOGEzYzA5MmVjZjczNmU4YjhhZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyB9BvSJGk4PTaFmRFb9d0/3wIGd
wPUTE3rOVBhxRjWMJCCSI2Kbg1yTmyjVlo3bIJ4Nq7MFKXsw09rZa5yK0/3aqq/O
MO4hWUYf1X3K0UOBjQ99Eh/ARTI+Y8SqdPuw/0udmLOGvJNzu//nShehYrLIggx9
9sD1x1tW4CBYxqmd/NwDnsCaAKaQTrNBJe0pcYZ5ZE1DXFxZ5K7hjHePTY9tBzsi
2OaloxO2v8LPnivI6zwslZjPVBIEaFa+tj+6uVyX/hltAbTYQxBaMxcaaIwgCfHA
MIvFvzWSTJt5d/WG/NDeHkDCDyrhF7tSMKMo0a0ir1XbULyNGCrRw4bwVwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBRIukxZFjyJ9rijwJLs9zbouK7iMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRkVpNlRGa1dQSW4ydUtQQWt1ejNOdWk0cnVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHznZAwQA
HzslAwQAXreYAwQA2TzyMA0GCSqGSIb3DQEBCwUAA4IBAQC1fXf9YKEKZbIWJgd6
vjXGBlSJa6GluzpxUkKWJ2zN/x1Ljx5Nzof1G5r5XRdSY3LBx5czXykz7g/twCiP
bkJxRUxfyek1UO0uhpZKm3BZbd5KZGbi4k3Xi4lyxKvC3CALu8yUuOsT5oHaPisJ
7rsedVmOgK7pW9nVJ43+djl0ApFfix1qJljS4hcMKR+bPCMg+xn2izDbtdsPOY5R
wmNu5uMzZDQoKNAJvHUy4KWete8SOtEcKyqq8cUPcuOiqODrKCcKZ0M2Q1tH/CEB
WV/8TDrJbtc6LRnYx/68XebbOnqwHvIBovVG5zill3vp/i7OsqAf6+8nNc/9HmX6
Aj9A
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:15 2026 by rpki-client