Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MlGcXyEgbNScPo7JGZ7K-YIx-hE.roa
File: MlGcXyEgbNScPo7JGZ7K-YIx-hE.roa (raw, json)
Hash identifier: i563nmkBQdJFhxrlIff1oRTxh7rQ4Mpm4CHOx8oTnfk=
Subject key identifier: 32:51:9C:5F:21:20:6C:D4:9C:3E:8E:C9:19:9E:CA:F9:82:31:FA:11
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C39C89B521A99C0BA16891B19BF1430CD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MlGcXyEgbNScPo7JGZ7K-YIx-hE.roa
Signing time: Sat 07 Feb 2026 20:26:14 +0000
ROA not before: Sat 07 Feb 2026 20:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 31.58.100.0/22 maxlen: 24
31.59.29.0/24 maxlen: 24
31.59.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:39:c8:9b:52:1a:99:c0:ba:16:89:1b:19:bf:14:30:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 7 20:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32519c5f21206cd49c3e8ec9199ecaf98231fa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:12:f9:3f:ac:18:45:2b:7f:b9:28:61:58:
93:61:5b:5f:b4:2a:da:b5:73:64:e0:c9:eb:c8:25:
f0:2a:dd:62:d6:a2:07:b0:f8:ad:47:69:bf:82:2a:
04:df:3e:6f:2e:ea:f2:b4:25:7a:d0:27:0d:9b:48:
85:48:d8:20:47:bd:9f:2d:32:4c:3d:50:b3:a5:68:
67:d4:7f:c7:b1:74:b6:c2:6b:97:30:cf:e7:a0:ae:
fa:58:63:d6:15:ba:a0:3f:7a:13:c8:62:88:7f:89:
c0:d6:25:00:5b:f2:64:1d:a5:b3:ae:16:2c:d0:d3:
b1:25:81:8c:be:33:88:76:3d:fd:29:28:f9:3f:06:
53:fb:3e:79:57:50:a6:fe:20:be:d9:a8:28:40:d9:
9e:37:2a:76:9a:5a:13:c0:71:31:31:91:37:d3:91:
54:0c:94:3f:bb:5a:c2:d4:70:1e:62:5c:68:5e:af:
51:a5:dc:b7:0d:6a:38:b0:7a:39:69:9a:7f:21:22:
5d:89:cd:1f:b8:44:75:26:56:61:be:3d:e8:48:5b:
a8:4e:4e:84:69:6b:0b:3e:e2:eb:11:c1:3c:5d:e8:
49:0f:34:db:e4:67:5c:8a:93:e6:39:d5:31:fa:b4:
09:02:84:35:21:ef:9f:10:3a:d9:63:14:f3:92:d8:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:9C:5F:21:20:6C:D4:9C:3E:8E:C9:19:9E:CA:F9:82:31:FA:11
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MlGcXyEgbNScPo7JGZ7K-YIx-hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.100.0/22
31.59.29.0/24
31.59.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:85:b5:ea:4e:07:8b:d4:22:7d:d1:8a:73:73:db:0f:bc:e0:
95:2f:59:4d:27:88:03:08:ba:34:02:57:65:60:5b:45:f5:7c:
d5:3e:cd:7b:26:24:60:7c:3b:85:96:3d:cb:f3:a9:18:11:a5:
3c:b6:8a:b0:7e:36:98:be:6b:8e:c1:77:35:c8:4b:a8:5e:7e:
92:30:e8:a0:07:40:25:b7:19:72:63:44:d6:91:5a:27:43:15:
ad:8b:03:a0:93:d1:e1:37:e4:0a:7d:79:2c:2d:c2:95:3e:37:
ac:d5:7e:fb:c1:57:de:db:ee:bf:dc:77:e4:a8:b6:4f:f6:e9:
1b:0a:ac:ab:00:d1:80:6a:a3:53:3d:b8:44:13:ce:fa:9b:5c:
0c:90:39:30:1b:f9:23:b2:40:24:ca:00:f4:74:96:59:e4:43:
82:0d:c9:c8:76:53:36:3d:17:2a:7f:39:e9:d6:8f:fc:7b:85:
51:1b:78:09:2e:46:b2:71:c9:f3:6f:e0:93:e9:a3:80:03:7b:
34:ac:99:9c:5c:f0:86:ea:c9:91:31:f4:24:30:ec:62:f6:54:
a7:71:99:61:3d:e9:47:95:80:9e:9d:10:8a:6d:b3:21:d1:b5:
24:9b:6f:5e:3b:59:00:2b:ba:ea:7d:27:1e:92:c2:02:6c:e6:
e1:cf:ea:03
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZw5yJtSGpnAuhaJGxm/FDDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjA3MjAyNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjUxOWM1ZjIxMjA2Y2Q0OWMzZThlYzkxOTllY2FmOTgyMzFmYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTAS+T+sGEUrf7koYViTYVtftCra
tXNk4MnryCXwKt1i1qIHsPitR2m/gioE3z5vLurytCV60CcNm0iFSNggR72fLTJM
PVCzpWhn1H/HsXS2wmuXMM/noK76WGPWFbqgP3oTyGKIf4nA1iUAW/JkHaWzrhYs
0NOxJYGMvjOIdj39KSj5PwZT+z55V1Cm/iC+2agoQNmeNyp2mloTwHExMZE305FU
DJQ/u1rC1HAeYlxoXq9Rpdy3DWo4sHo5aZp/ISJdic0fuER1JlZhvj3oSFuoTk6E
aWsLPuLrEcE8XehJDzTb5GdcipPmOdUx+rQJAoQ1Ie+fEDrZYxTzkthUgQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDJRnF8hIGzUnD6OyRmeyvmCMfoRMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTWxHY1h5RWdiTlNjUG83SkdaN0stWUl4LWhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCHzpkAwQA
HzsdAwQAHzsiMA0GCSqGSIb3DQEBCwUAA4IBAQAKhbXqTgeL1CJ90Ypzc9sPvOCV
L1lNJ4gDCLo0AldlYFtF9XzVPs17JiRgfDuFlj3L86kYEaU8toqwfjaYvmuOwXc1
yEuoXn6SMOigB0AltxlyY0TWkVonQxWtiwOgk9HhN+QKfXksLcKVPjes1X77wVfe
2+6/3HfkqLZP9ukbCqyrANGAaqNTPbhEE876m1wMkDkwG/kjskAkygD0dJZZ5EOC
DcnIdlM2PRcqfznp1o/8e4VRG3gJLkayccnzb+CT6aOAA3s0rJmcXPCG6smRMfQk
MOxi9lSncZlhPelHlYCenRCKbbMh0bUkm29eO1kAK7rqfSceksICbObhz+oD
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:30:51 2026 by rpki-client