Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FcDOxSFpoXAr8O2AEaahrD7hVNU.roa
File: FcDOxSFpoXAr8O2AEaahrD7hVNU.roa (raw, json)
Hash identifier: ygOmdnCBAaKgb6wfaANLOn1Q/XyHBEeukuy8wTRYVt0=
Subject key identifier: 15:C0:CE:C5:21:69:A1:70:2B:F0:ED:80:11:A6:A1:AC:3E:E1:54:D5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F553502C2F6CBCCB0A03D3221B403AA05
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FcDOxSFpoXAr8O2AEaahrD7hVNU.roa
Signing time: Sun 12 Jul 2026 07:22:45 +0000
ROA not before: Sun 12 Jul 2026 07:22:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.84.0/24 maxlen: 24
31.59.163.0/24 maxlen: 24
31.59.186.0/24 maxlen: 24
31.59.212.0/24 maxlen: 24
217.60.244.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:35:02:c2:f6:cb:cc:b0:a0:3d:32:21:b4:03:aa:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 12 07:22:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15c0cec52169a1702bf0ed8011a6a1ac3ee154d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:e2:3a:d5:d2:0b:d4:56:9a:87:19:84:a0:
e5:0c:51:5e:8b:e9:e6:da:cf:ae:24:d9:c1:ae:09:
3e:2f:ee:64:89:ad:81:4c:7d:98:8e:46:62:05:72:
76:ac:0d:de:8c:3f:73:eb:a6:09:3f:61:c9:fd:90:
a1:45:38:c0:a8:7e:24:c2:47:3d:1f:ca:37:f9:41:
b2:dc:49:10:22:4e:9d:c0:5f:8b:a5:5b:56:91:34:
3b:dc:a4:bb:b3:e5:ac:03:ca:d1:68:09:60:a5:34:
93:fa:4e:1c:21:4d:f2:93:0d:a6:8b:a8:9a:a2:dc:
80:bf:99:69:b3:47:a0:58:33:cc:0c:5e:23:81:cf:
05:94:7c:d2:1f:b0:40:79:8a:b1:4f:c1:c8:fe:3d:
1a:e9:f4:fd:15:53:f2:61:e2:94:88:3f:9e:10:47:
02:40:b3:0a:4a:7e:5d:a4:7c:56:74:76:87:67:0e:
bc:3d:c5:96:9e:3f:6f:79:65:d2:4b:4a:bc:a8:f5:
be:cd:ca:5e:82:4d:6f:16:1d:a6:28:df:ac:ec:5f:
09:b8:e7:65:03:fc:13:28:f6:39:90:a6:0f:37:1c:
d5:9d:e3:f2:04:73:23:a1:d3:4e:d4:80:b1:b3:70:
f9:0b:9b:3c:33:e5:0f:69:82:b3:4d:11:ec:d8:07:
71:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C0:CE:C5:21:69:A1:70:2B:F0:ED:80:11:A6:A1:AC:3E:E1:54:D5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FcDOxSFpoXAr8O2AEaahrD7hVNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.84.0/24
31.59.163.0/24
31.59.186.0/24
31.59.212.0/24
217.60.244.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:fc:d0:1d:c1:e4:0e:25:78:ba:b9:8a:5a:a2:da:af:a4:c4:
47:af:be:23:88:14:65:08:43:07:f7:03:d4:0e:25:80:5e:3f:
21:40:34:52:f5:74:d7:24:ac:13:fa:b3:27:43:79:01:63:63:
be:ba:4e:28:81:c8:26:81:33:21:a3:db:aa:64:18:ef:01:c5:
6e:d2:03:ea:8d:7a:d1:61:8d:69:33:2c:03:bf:f3:bc:cf:5a:
18:c3:d7:f4:0a:5a:24:e2:b3:1d:93:6a:c3:fc:c4:0d:91:d7:
b4:ba:fe:98:c4:5e:3d:49:5c:ac:fb:d7:21:76:14:93:b6:64:
ca:f6:11:48:20:39:b1:63:2c:c2:13:43:2d:c7:12:af:e1:85:
6c:5a:7c:f5:15:9a:36:99:32:2d:e5:4e:b9:be:6d:ed:e5:fd:
62:9e:67:bd:b6:6d:f8:ba:34:fb:cc:a8:4d:2f:47:eb:34:43:
33:0e:4f:79:08:48:59:65:39:52:a0:cb:62:de:bd:78:d9:40:
a0:dc:a0:ca:b4:d5:30:0d:89:22:e4:62:ab:50:51:6c:45:d9:
4d:ab:a5:fa:c2:74:29:5e:7c:1c:86:d9:50:63:f4:fb:64:0c:
35:2b:55:09:6d:20:fe:ac:3f:7b:93:28:66:a9:b1:a0:3e:0f:
36:64:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:28 2026 by rpki-client