Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x5MoVOhu6aN2FFzAjfw23ub06T8.roa
File: x5MoVOhu6aN2FFzAjfw23ub06T8.roa (raw, json)
Hash identifier: AkwwTCtzgnounlcREzD4DH7Z7CC4EwyIj22Z1RJ+EQg=
Subject key identifier: C7:93:28:54:E8:6E:E9:A3:76:14:5C:C0:8D:FC:36:DE:E6:F4:E9:3F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C5BBBC362BD1151C724F8AECE747EBC4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x5MoVOhu6aN2FFzAjfw23ub06T8.roa
Signing time: Tue 10 Nov 2026 13:52:57 +0000
ROA not before: Tue 10 Nov 2026 13:52:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216394
IP address blocks: 31.58.247.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:bb:bc:36:2b:d1:15:1c:72:4f:8a:ec:e7:47:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 13:52:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7932854e86ee9a376145cc08dfc36dee6f4e93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:2e:ea:5c:5b:64:b3:77:ef:ac:c7:c0:a7:
04:95:96:e7:5d:61:b0:86:50:45:f5:bc:f4:6b:53:
3b:de:6c:41:8c:a9:24:bc:eb:74:ef:37:cd:8e:2c:
33:3b:2c:b6:e5:a1:e7:79:ea:75:f0:03:78:60:32:
d0:1e:a7:30:f7:eb:0e:d2:bb:4c:db:20:a1:4d:d8:
fe:3d:e8:b4:29:41:6c:58:e0:b0:b1:c3:c6:0c:c2:
5f:8e:51:a2:58:01:6d:62:1a:dd:c1:92:5e:80:35:
8f:af:e1:8f:b1:82:40:71:9d:71:30:f8:95:e6:5a:
37:14:08:40:1e:9a:6f:06:91:f2:44:cd:ba:d9:7e:
04:78:a0:e8:75:d6:50:d4:29:07:25:0a:f7:a5:fc:
4d:2a:1e:e4:80:de:79:67:cf:ed:ab:90:db:ca:c1:
54:68:e8:aa:70:6a:5c:3b:a9:b4:29:c2:e0:f7:a2:
53:b1:8f:4b:11:f3:31:e4:1e:f5:18:fd:fc:1d:c4:
7e:66:da:28:da:44:e5:79:08:bb:75:7f:ae:6f:93:
c0:b6:fd:31:eb:d6:d9:15:92:42:a5:fc:40:72:00:
36:7c:5b:44:13:4b:50:65:8b:9a:32:85:ef:d6:d5:
00:8a:a9:95:33:41:00:71:21:cd:1a:e3:10:88:2f:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:93:28:54:E8:6E:E9:A3:76:14:5C:C0:8D:FC:36:DE:E6:F4:E9:3F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x5MoVOhu6aN2FFzAjfw23ub06T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.247.0/24
31.58.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f9:c3:57:39:07:01:ed:f7:dc:0f:01:49:ba:17:56:6e:10:
52:30:8a:d1:72:7b:cc:9e:7c:45:f3:aa:6f:97:02:3d:a6:39:
9d:2f:47:84:28:2d:7b:4e:2b:af:19:4b:f3:03:a4:5c:cf:30:
49:d3:f0:ce:66:69:3c:57:bc:2c:0e:09:5f:31:7f:e4:03:2e:
67:4b:b5:ae:99:95:50:85:a6:c9:46:70:28:c8:61:9b:61:b2:
e3:57:be:3c:87:ab:af:52:4d:bf:2a:ac:1b:73:b0:c6:00:cd:
76:8a:35:5d:2a:9e:a5:9f:6f:19:6e:6e:bf:65:bc:29:bf:1f:
3f:0e:ad:af:61:63:d4:8d:61:45:ea:bf:13:9f:76:99:59:42:
9f:e9:8a:1d:b5:01:64:c0:17:0c:f5:2e:e3:95:da:8a:ef:a7:
a1:98:08:af:2a:b6:5a:60:ce:2b:16:ea:46:a7:97:a6:d8:6f:
e4:91:47:45:97:2c:62:ee:7f:2b:f8:df:19:48:f9:9f:d2:75:
74:87:f7:b6:0b:d6:01:c2:7e:09:b4:34:1c:61:c5:5a:e6:3a:
7e:0f:34:6c:48:71:d0:0a:e5:cc:98:26:23:d0:25:42:71:d9:
48:45:63:85:86:c9:a9:b6:49:91:99:95:73:c6:9b:44:15:0f:
db:ed:5a:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHFu7w2K9EVHHJPiuznR+vEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTEwMTM1MjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzkzMjg1NGU4NmVlOWEzNzYxNDVjYzA4ZGZjMzZkZWU2ZjRlOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvMu6lxbZLN376zHwKcElZbnXWGw
hlBF9bz0a1M73mxBjKkkvOt07zfNjiwzOyy25aHneep18AN4YDLQHqcw9+sO0rtM
2yChTdj+Pei0KUFsWOCwscPGDMJfjlGiWAFtYhrdwZJegDWPr+GPsYJAcZ1xMPiV
5lo3FAhAHppvBpHyRM262X4EeKDoddZQ1CkHJQr3pfxNKh7kgN55Z8/tq5DbysFU
aOiqcGpcO6m0KcLg96JTsY9LEfMx5B71GP38HcR+Ztoo2kTleQi7dX+ub5PAtv0x
69bZFZJCpfxAcgA2fFtEE0tQZYuaMoXv1tUAiqmVM0EAcSHNGuMQiC8hfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMeTKFTobumjdhRcwI38Nt7m9Ok/MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveDVNb1ZPaHU2YU4yRkZ6QWpmdzIzdWIwNlQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzr3AwQA
Hzr6MA0GCSqGSIb3DQEBCwUAA4IBAQCx+cNXOQcB7ffcDwFJuhdWbhBSMIrRcnvM
nnxF86pvlwI9pjmdL0eEKC17TiuvGUvzA6RczzBJ0/DOZmk8V7wsDglfMX/kAy5n
S7WumZVQhabJRnAoyGGbYbLjV748h6uvUk2/Kqwbc7DGAM12ijVdKp6ln28Zbm6/
Zbwpvx8/Dq2vYWPUjWFF6r8Tn3aZWUKf6YodtQFkwBcM9S7jldqK76ehmAivKrZa
YM4rFupGp5em2G/kkUdFlyxi7n8r+N8ZSPmf0nV0h/e2C9YBwn4JtDQcYcVa5jp+
DzRsSHHQCuXMmCYj0CVCcdlIRWOFhsmptkmRmZVzxptEFQ/b7Vqr
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:00 2026 by rpki-client