Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bnRMNuqLRwGLO3tYZvUqnnAX5_M.roa
File: bnRMNuqLRwGLO3tYZvUqnnAX5_M.roa (raw, json)
Hash identifier: sd9QWkcE9hd9kvnAM4GLAX768ZZXtNThk3P0EaNt4oI=
Subject key identifier: 6E:74:4C:36:EA:8B:47:01:8B:3B:7B:58:66:F5:2A:9E:70:17:E7:F3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EBCCD5203F6DB92862FABF2AD501059FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bnRMNuqLRwGLO3tYZvUqnnAX5_M.roa
Signing time: Fri 12 Jun 2026 17:07:12 +0000
ROA not before: Fri 12 Jun 2026 17:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210457
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.39.0/24 maxlen: 24
31.59.161.0/24 maxlen: 24
94.183.170.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:cd:52:03:f6:db:92:86:2f:ab:f2:ad:50:10:59:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 12 17:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e744c36ea8b47018b3b7b5866f52a9e7017e7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:ba:49:8d:ca:4b:b4:95:a4:8e:7f:f8:de:
79:c5:90:7c:1b:ef:de:36:99:da:23:f8:ff:c6:a9:
c8:1a:18:f7:5e:4d:33:5e:26:71:f3:34:a5:26:c9:
fe:77:01:5c:93:13:5a:5a:c0:3d:c1:76:0b:2a:d9:
c4:06:88:bc:67:cf:bb:9c:b1:58:de:c0:fc:78:56:
77:d8:e3:29:69:86:27:34:8e:68:40:36:1d:ae:15:
fc:34:50:fb:ec:9a:2e:f2:6c:a1:83:c4:e2:f2:46:
9b:68:94:f9:84:b7:6a:9f:4a:06:36:af:39:3b:0d:
b4:25:ef:cf:4d:d2:f3:01:ff:9c:3d:85:0a:f1:c1:
90:4e:34:da:8f:89:ac:ea:d7:ea:71:87:ec:41:54:
ce:6d:a4:ea:bc:52:2d:0c:73:76:4d:26:91:45:80:
f4:13:d3:03:2d:f1:7c:a9:56:ea:da:d4:06:66:e5:
69:9e:7a:8e:04:2c:96:d7:2b:6b:e8:9a:75:df:af:
0f:62:b6:22:25:d7:fd:4c:59:94:30:82:c2:8d:3c:
8c:b0:f2:1f:93:21:7e:a9:7d:de:73:4c:27:1f:ee:
f3:a3:dc:6b:5b:14:91:06:01:2f:55:60:86:99:5a:
42:18:81:5c:59:71:9a:b2:dd:38:14:34:8c:b2:2f:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:74:4C:36:EA:8B:47:01:8B:3B:7B:58:66:F5:2A:9E:70:17:E7:F3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bnRMNuqLRwGLO3tYZvUqnnAX5_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.36.0/24
31.59.39.0/24
31.59.161.0/24
94.183.170.0/24
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b6:6c:0e:2b:19:55:8b:e7:88:02:d4:89:fe:71:1f:c4:97:
1d:9d:97:e2:9f:77:77:50:59:e3:6d:63:50:54:41:67:f7:c8:
22:1c:3e:b7:1e:32:9e:78:e5:3b:a9:b0:28:98:a6:d2:44:d6:
55:e9:96:1b:2a:8d:95:89:99:33:7f:77:0e:b3:e3:c4:4c:bf:
c4:77:46:fb:02:5a:c8:67:5d:6c:ed:50:c8:94:bc:7a:a3:d2:
32:dd:13:80:ad:d1:c9:5d:0f:4e:3d:ca:05:69:ad:bd:33:0b:
cd:89:36:ee:17:6f:f8:54:59:36:b6:e9:f2:af:93:29:b6:22:
36:3c:a1:05:84:65:02:20:88:38:99:36:40:9f:7b:c8:09:1c:
86:42:2f:61:34:66:50:8c:75:fb:7e:97:b3:2c:2a:2a:e0:ed:
93:21:36:e3:b5:05:57:47:f7:52:b3:f8:92:fd:68:2a:40:a5:
db:95:30:5c:28:50:71:e1:a9:58:de:ce:a4:b1:a4:36:90:f7:
4f:47:10:fc:97:74:17:a0:29:09:84:dd:4c:20:80:2c:62:f8:
6d:4d:da:ba:03:8a:c6:80:a8:a0:b6:b3:8f:54:58:8c:4b:61:
5e:e7:98:5c:59:1a:c5:df:e7:93:d0:6c:3b:b1:6b:7c:01:61:
1b:f3:a0:0d
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ68zVID9tuShi+r8q1QEFn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjEyMTcwNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTc0NGMzNmVhOGI0NzAxOGIzYjdiNTg2NmY1MmE5ZTcwMTdlN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT26SY3KS7SVpI5/+N55xZB8G+/e
NpnaI/j/xqnIGhj3Xk0zXiZx8zSlJsn+dwFckxNaWsA9wXYLKtnEBoi8Z8+7nLFY
3sD8eFZ32OMpaYYnNI5oQDYdrhX8NFD77Jou8myhg8Ti8kabaJT5hLdqn0oGNq85
Ow20Je/PTdLzAf+cPYUK8cGQTjTaj4ms6tfqcYfsQVTObaTqvFItDHN2TSaRRYD0
E9MDLfF8qVbq2tQGZuVpnnqOBCyW1ytr6Jp1368PYrYiJdf9TFmUMILCjTyMsPIf
kyF+qX3ec0wnH+7zo9xrWxSRBgEvVWCGmVpCGIFcWXGast04FDSMsi8j5QIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFG50TDbqi0cBizt7WGb1Kp5wF+fzMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYm5STU51cUxSd0dMTzN0WVp2VXFubkFYNV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBHzroAwQA
HzskAwQAHzsnAwQAHzuhAwQAXreqAwQAXrfiAwQBXrfuAwQAXrf+AwQB2TwIAwQA
2TwYAwQA2TxjMA0GCSqGSIb3DQEBCwUAA4IBAQAetmwOKxlVi+eIAtSJ/nEfxJcd
nZfin3d3UFnjbWNQVEFn98giHD63HjKeeOU7qbAomKbSRNZV6ZYbKo2ViZkzf3cO
s+PETL/Ed0b7AlrIZ11s7VDIlLx6o9Iy3ROArdHJXQ9OPcoFaa29MwvNiTbuF2/4
VFk2tunyr5MptiI2PKEFhGUCIIg4mTZAn3vICRyGQi9hNGZQjHX7fpezLCoq4O2T
ITbjtQVXR/dSs/iS/WgqQKXblTBcKFBx4alY3s6ksaQ2kPdPRxD8l3QXoCkJhN1M
IIAsYvhtTdq6A4rGgKigtrOPVFiMS2Fe55hcWRrF3+eT0Gw7sWt8AWEb86AN
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:08 2026 by rpki-client