Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RTjiTl6iFQ5psOKTMGZ4eDp-FCU.roa
File: RTjiTl6iFQ5psOKTMGZ4eDp-FCU.roa (raw, json)
Hash identifier: 2unD58PpeI/jU3PuXyKHRq9BlP+GjeWfrJxYkTFhlME=
Subject key identifier: 45:38:E2:4E:5E:A2:15:0E:69:B0:E2:93:30:66:78:78:3A:7E:14:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A197736C68A71554EAF044CBFC50F122F2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RTjiTl6iFQ5psOKTMGZ4eDp-FCU.roa
Signing time: Sun 01 Nov 2026 14:11:26 +0000
ROA not before: Sun 01 Nov 2026 14:11:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 31.58.243.0/24 maxlen: 24
31.59.152.0/24 maxlen: 24
31.59.153.0/24 maxlen: 24
31.59.154.0/24 maxlen: 24
31.59.192.0/24 maxlen: 24
31.59.193.0/24 maxlen: 24
31.59.216.0/24 maxlen: 24
31.59.217.0/24 maxlen: 24
31.59.218.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.69.0/24 maxlen: 24
217.60.147.0/24 maxlen: 24
217.60.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:73:6c:68:a7:15:54:ea:f0:44:cb:fc:50:f1:22:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 14:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4538e24e5ea2150e69b0e293306678783a7e1425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:c6:2f:bd:f8:9d:25:a8:30:51:7d:c5:ef:
ef:d1:3c:3e:55:9b:51:d2:0e:df:b5:f9:8d:22:8b:
25:13:40:2f:45:5b:fd:a7:3e:62:b8:47:51:14:7f:
cf:c4:9b:cf:c7:ee:57:9b:1b:60:f1:60:44:87:36:
fe:5c:6c:22:13:b1:ac:f0:4d:03:7b:55:86:1f:f6:
ac:42:4a:df:68:0d:95:f1:75:2e:62:bd:cc:01:05:
7e:94:d6:68:b1:90:fe:77:7a:1f:e3:62:33:85:92:
4f:58:97:b9:66:7c:1a:7b:f4:a3:05:d8:8c:6f:5f:
4d:47:9c:f1:3e:19:ed:72:ad:80:e0:9d:d5:ab:b5:
72:ae:ea:02:0c:9f:78:8d:15:45:88:f1:0c:78:cf:
e1:d7:d4:7c:19:3c:4f:76:f4:c7:ca:c1:10:0d:3b:
36:dc:33:b5:65:e4:93:ae:70:99:ee:4c:9e:c8:27:
41:43:ff:3e:fb:93:b8:6f:84:e1:91:08:49:07:3b:
ea:86:b9:34:63:bc:60:b6:65:2b:12:31:73:f4:7d:
de:06:ad:75:c8:3a:37:77:8f:fd:e4:45:f7:b3:1d:
8c:a4:4f:db:e4:6a:15:cd:c0:5e:9d:15:8d:a7:fd:
f3:b7:83:d0:9a:b0:9f:ba:2d:a7:81:09:d1:ee:f5:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:38:E2:4E:5E:A2:15:0E:69:B0:E2:93:30:66:78:78:3A:7E:14:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/RTjiTl6iFQ5psOKTMGZ4eDp-FCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.243.0/24
31.59.152.0-31.59.154.255
31.59.192.0/23
31.59.216.0-31.59.218.255
217.60.18.0/23
217.60.69.0/24
217.60.147.0/24
217.60.177.0/24
Signature Algorithm: sha256WithRSAEncryption
54:88:b2:5f:26:61:1e:11:5e:f9:ac:b5:c9:7a:a4:c8:6d:79:
66:08:7c:e7:24:77:5b:79:93:c3:49:2a:34:ce:d8:3e:8a:0d:
ca:88:e2:eb:2e:34:0d:9f:b3:57:e8:79:55:eb:55:e9:8b:a4:
19:03:37:65:ed:73:7e:11:0b:b5:20:c4:4a:41:fd:63:74:f6:
72:53:98:2d:26:1d:ba:c5:fd:50:86:08:d3:f3:0a:dc:ae:56:
d6:c9:cf:55:6a:cf:86:73:de:9d:65:ea:8d:3b:14:f4:d5:80:
77:26:42:1a:eb:d9:b9:44:c7:76:8d:f2:0b:0b:ff:a5:24:7e:
3e:67:97:75:3d:41:82:52:bf:0a:43:05:49:76:64:17:1e:e9:
a1:58:d3:7e:0b:76:d8:80:10:f4:79:ef:9a:56:ff:4e:4b:53:
88:01:f9:a8:55:5d:b0:a0:96:d0:97:e1:5b:d6:0c:7e:e7:32:
97:62:91:26:95:f8:66:ad:81:62:f9:0e:a5:60:a1:59:0c:13:
08:2f:72:f8:8f:0b:3f:03:f1:b0:6a:a7:81:21:91:44:89:5c:
31:1d:99:6c:cc:6a:1f:1f:80:52:ac:fa:0a:64:e1:33:1c:06:
b2:89:18:87:eb:55:1d:2e:0b:a1:2f:cb:03:21:bf:79:40:57:
38:73:46:5c
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAaGXc2xopxVU6vBEy/xQ8SLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTAxMTQxMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTM4ZTI0ZTVlYTIxNTBlNjliMGUyOTMzMDY2Nzg3ODNhN2UxNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv/GL734nSWoMFF9xe/v0Tw+VZtR
0g7ftfmNIoslE0AvRVv9pz5iuEdRFH/PxJvPx+5Xmxtg8WBEhzb+XGwiE7Gs8E0D
e1WGH/asQkrfaA2V8XUuYr3MAQV+lNZosZD+d3of42IzhZJPWJe5Znwae/SjBdiM
b19NR5zxPhntcq2A4J3Vq7VyruoCDJ94jRVFiPEMeM/h19R8GTxPdvTHysEQDTs2
3DO1ZeSTrnCZ7kyeyCdBQ/8++5O4b4ThkQhJBzvqhrk0Y7xgtmUrEjFz9H3eBq11
yDo3d4/95EX3sx2MpE/b5GoVzcBenRWNp/3zt4PQmrCfui2ngQnR7vU+IQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFEU44k5eohUOabDikzBmeHg6fhQlMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUlRqaVRsNmlGUTVwc09LVE1HWjRlRHAtRkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAHzrzMAwD
BAMfO5gDBAAfO5oDBAEfO8AwDAMEAx872AMEAB872gMEAdk8EgMEANk8RQMEANk8
kwMEANk8sTANBgkqhkiG9w0BAQsFAAOCAQEAVIiyXyZhHhFe+ay1yXqkyG15Zgh8
5yR3W3mTw0kqNM7YPooNyoji6y40DZ+zV+h5VetV6YukGQM3Ze1zfhELtSDESkH9
Y3T2clOYLSYdusX9UIYI0/MK3K5W1snPVWrPhnPenWXqjTsU9NWAdyZCGuvZuUTH
do3yCwv/pSR+PmeXdT1BglK/CkMFSXZkFx7poVjTfgt22IAQ9Hnvmlb/TktTiAH5
qFVdsKCW0JfhW9YMfucyl2KRJpX4Zq2BYvkOpWChWQwTCC9y+I8LPwPxsGqngSGR
RIlcMR2ZbMxqHx+AUqz6CmThMxwGsokYh+tVHS4LoS/LAyG/eUBXOHNGXA==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:32:51 2026 by rpki-client