Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xo33BwcppZ3mcX6B7FWa984MAEo.roa
File: xo33BwcppZ3mcX6B7FWa984MAEo.roa (raw, json)
Hash identifier: /qi1SuGYMzPh1MjQ5Exm3us1wVR64x2W07HJsvrdRw0=
Subject key identifier: C6:8D:F7:07:07:29:A5:9D:E6:71:7E:81:EC:55:9A:F7:CE:0C:00:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FA7A0B9E5B2AEFABAEC35179AFEDB47C3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xo33BwcppZ3mcX6B7FWa984MAEo.roa
Signing time: Tue 28 Jul 2026 07:29:16 +0000
ROA not before: Tue 28 Jul 2026 07:29:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 31.58.183.0/24 maxlen: 24
31.59.162.0/24 maxlen: 24
31.59.164.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:a0:b9:e5:b2:ae:fa:ba:ec:35:17:9a:fe:db:47:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 28 07:29:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c68df7070729a59de6717e81ec559af7ce0c004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:10:84:66:5b:dd:43:85:6d:e7:1e:e7:0c:
d5:b3:98:e5:b6:4b:42:7a:54:ba:64:72:4d:dc:7e:
df:e6:51:1b:52:6e:9a:16:47:62:25:4b:e0:28:95:
e1:c5:89:f1:6a:c0:5c:45:e6:77:eb:c2:39:98:3b:
17:fc:35:ac:14:f0:f3:b6:25:e9:00:e4:c9:95:25:
a3:65:47:a7:63:82:12:b5:e1:97:fa:d4:cb:f5:4d:
77:5d:61:01:4c:33:fc:69:3b:47:db:76:95:f6:bb:
93:2c:ce:ec:3a:a7:76:77:c9:3c:7a:0f:8a:29:64:
a8:85:94:8b:45:5d:86:99:9c:15:92:e6:29:c3:d4:
e4:f8:fa:8a:44:29:db:16:ef:92:37:8a:df:d6:30:
4f:14:c0:da:0b:cf:1d:69:2f:7e:e4:76:57:1c:a8:
c7:05:cd:57:e4:10:7c:a2:71:44:2c:f8:e2:98:29:
8a:9f:c5:0e:be:22:1c:af:19:6a:f6:46:d5:1d:d2:
ad:ba:c4:dd:6d:7c:90:17:c3:cc:30:c3:bb:e6:b6:
d7:4d:b9:54:f7:48:53:c5:83:b0:d1:1b:4c:bf:2c:
e8:4d:97:04:cb:46:1c:7b:d9:28:5f:cc:19:5a:e4:
8e:e4:a7:58:1a:ac:be:05:f6:75:88:ab:29:c8:22:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8D:F7:07:07:29:A5:9D:E6:71:7E:81:EC:55:9A:F7:CE:0C:00:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xo33BwcppZ3mcX6B7FWa984MAEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.183.0/24
31.59.162.0/24
31.59.164.0/24
94.183.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5f:da:0e:ee:b6:eb:e1:f5:77:6a:e6:9f:6c:8b:c4:61:2f:
ed:4b:61:2a:0a:a1:42:c1:1a:81:76:97:c6:5c:73:23:1a:de:
59:ee:5e:d2:21:7b:e0:4c:4e:71:0f:c2:a1:b6:b3:74:27:5e:
b7:61:8e:7c:27:04:86:6a:eb:84:9a:f4:6d:7a:85:6b:d0:59:
53:0b:28:29:f0:be:4c:4b:a2:69:57:37:be:27:25:f2:ef:e8:
f8:84:0d:72:4d:92:f9:16:42:59:e7:d0:3e:ec:f3:07:47:cc:
55:03:66:cf:1f:53:aa:3d:5a:68:b8:c2:74:2d:69:0e:26:55:
a3:e6:08:d6:6d:8e:ad:99:08:74:44:4e:91:54:be:ae:e1:c2:
97:82:80:3e:d1:5f:27:b0:b2:72:b9:43:a6:eb:0e:bf:97:3e:
57:0d:1f:9e:3d:e3:16:f7:84:22:2c:8b:ba:5c:62:52:e6:ac:
15:b1:5f:54:b3:38:13:e1:cd:13:19:14:0f:e5:55:4f:9c:de:
fb:90:f5:20:4b:7b:29:56:e6:16:74:46:af:db:4f:03:39:b8:
14:be:42:c4:3f:5e:58:c2:7f:3f:9a:1d:52:85:cd:b5:54:44:
01:27:92:40:c3:40:a5:76:5d:75:be:ce:30:67:54:81:f6:14:
cb:3b:ec:3f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ+noLnlsq76uuw1F5r+20fDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzI4MDcyOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjhkZjcwNzA3MjlhNTlkZTY3MTdlODFlYzU1OWFmN2NlMGMwMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDkQhGZb3UOFbece5wzVs5jltktC
elS6ZHJN3H7f5lEbUm6aFkdiJUvgKJXhxYnxasBcReZ368I5mDsX/DWsFPDztiXp
AOTJlSWjZUenY4ISteGX+tTL9U13XWEBTDP8aTtH23aV9ruTLM7sOqd2d8k8eg+K
KWSohZSLRV2GmZwVkuYpw9Tk+PqKRCnbFu+SN4rf1jBPFMDaC88daS9+5HZXHKjH
Bc1X5BB8onFELPjimCmKn8UOviIcrxlq9kbVHdKtusTdbXyQF8PMMMO75rbXTblU
90hTxYOw0RtMvyzoTZcEy0Yce9koX8wZWuSO5KdYGqy+BfZ1iKspyCKu8wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMaN9wcHKaWd5nF+gexVmvfODABKMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveG8zM0J3Y3BwWjNtY1g2QjdGV2E5ODRNQUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzq3AwQA
HzuiAwQAHzukAwQAXrflMA0GCSqGSIb3DQEBCwUAA4IBAQAeX9oO7rbr4fV3auaf
bIvEYS/tS2EqCqFCwRqBdpfGXHMjGt5Z7l7SIXvgTE5xD8KhtrN0J163YY58JwSG
auuEmvRteoVr0FlTCygp8L5MS6JpVze+JyXy7+j4hA1yTZL5FkJZ59A+7PMHR8xV
A2bPH1OqPVpouMJ0LWkOJlWj5gjWbY6tmQh0RE6RVL6u4cKXgoA+0V8nsLJyuUOm
6w6/lz5XDR+ePeMW94QiLIu6XGJS5qwVsV9UszgT4c0TGRQP5VVPnN77kPUgS3sp
VuYWdEav208DObgUvkLEP15Ywn8/mh1Shc21VEQBJ5JAw0Cldl11vs4wZ1SB9hTL
O+w/
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:58 2026 by rpki-client