Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0DL1nT3s8U4fltD4975Va2q_r1M.roa
File: 0DL1nT3s8U4fltD4975Va2q_r1M.roa (raw, json)
Hash identifier: UAFr68XjwtYc7DlNY2pilfD61MGJxCmFECAfG/QjZHc=
Subject key identifier: D0:32:F5:9D:3D:EC:F1:4E:1F:96:D0:F8:F7:BE:55:6B:6A:BF:AF:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A047198848939B2ADB6423CF1D4DA1CA65
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0DL1nT3s8U4fltD4975Va2q_r1M.roa
Signing time: Fri 28 Aug 2026 06:40:50 +0000
ROA not before: Fri 28 Aug 2026 06:40:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.56.5.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.119.0/24 maxlen: 24
31.56.128.0/24 maxlen: 24
31.56.129.0/24 maxlen: 24
31.56.130.0/24 maxlen: 24
31.56.131.0/24 maxlen: 24
31.56.132.0/24 maxlen: 24
31.56.133.0/24 maxlen: 24
31.56.134.0/24 maxlen: 24
31.56.135.0/24 maxlen: 24
31.56.136.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.207.0/24 maxlen: 24
31.56.246.0/24 maxlen: 24
31.56.247.0/24 maxlen: 24
31.56.248.0/24 maxlen: 24
31.56.249.0/24 maxlen: 24
31.56.250.0/24 maxlen: 24
31.56.251.0/24 maxlen: 24
31.56.252.0/24 maxlen: 24
31.56.253.0/24 maxlen: 24
31.56.254.0/24 maxlen: 24
31.56.255.0/24 maxlen: 24
31.57.41.0/24 maxlen: 24
31.57.42.0/24 maxlen: 24
31.57.82.0/24 maxlen: 24
31.58.116.0/22 maxlen: 24
31.59.0.0/24 maxlen: 24
31.59.1.0/24 maxlen: 24
31.59.2.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.6.0/24 maxlen: 24
31.59.7.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.246.0/24 maxlen: 24
31.59.247.0/24 maxlen: 24
217.60.126.0/24 maxlen: 24
217.60.127.0/24 maxlen: 24
217.60.160.0/24 maxlen: 24
217.60.161.0/24 maxlen: 24
217.60.166.0/24 maxlen: 24
217.60.167.0/24 maxlen: 24
217.60.168.0/24 maxlen: 24
217.60.169.0/24 maxlen: 24
217.60.170.0/24 maxlen: 24
217.60.171.0/24 maxlen: 24
217.60.172.0/24 maxlen: 24
217.60.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:19:88:48:93:9b:2a:db:64:23:cf:1d:4d:a1:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 06:40:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d032f59d3decf14e1f96d0f8f7be556b6abfaf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:9d:3f:c2:33:80:5b:a4:d2:0c:c8:79:af:
9a:65:dc:71:97:f0:37:a9:c8:67:a8:09:24:86:0b:
42:9a:6e:e8:77:1b:ca:ea:08:24:1e:bf:17:2a:6d:
5b:70:f0:70:70:0a:29:f1:03:44:a6:f6:ce:db:7b:
d7:eb:c9:aa:4a:6a:6d:7e:ed:d2:5e:ec:4d:37:7b:
27:48:c9:86:11:be:47:34:57:15:75:83:18:31:b9:
24:19:a2:34:9c:ea:84:74:b8:56:e8:26:77:08:cf:
eb:2c:85:cb:79:cc:7c:da:0d:bc:de:4b:53:e6:21:
44:3e:80:d7:64:a3:26:22:ec:ba:c6:6b:2b:28:a3:
e2:e6:94:4b:2f:18:d7:6d:99:72:94:9f:0b:94:9d:
a3:b8:36:d9:a6:43:5f:4f:a4:c2:ea:4e:4d:5b:51:
fc:30:93:44:49:e4:2c:0d:7a:16:c6:13:be:de:89:
77:ba:60:a9:fa:57:c4:a8:7e:f5:6d:5a:25:83:56:
88:b1:db:7e:17:74:28:3a:b0:ae:7f:b5:33:32:58:
de:bc:68:14:6b:e9:b9:2e:86:e8:d6:51:36:95:38:
f1:6d:4d:3e:f3:12:4b:73:67:c6:48:8a:3e:42:54:
88:7d:f1:dd:4b:cb:05:0b:38:e7:93:8d:a4:b2:7f:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:F5:9D:3D:EC:F1:4E:1F:96:D0:F8:F7:BE:55:6B:6A:BF:AF:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0DL1nT3s8U4fltD4975Va2q_r1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.5.0/24
31.56.69.0/24
31.56.119.0/24
31.56.128.0-31.56.137.255
31.56.207.0/24
31.56.246.0-31.56.255.255
31.57.41.0-31.57.42.255
31.57.82.0/24
31.58.116.0/22
31.59.0.0-31.59.9.255
31.59.246.0/23
217.60.126.0/23
217.60.160.0/23
217.60.166.0-217.60.173.255
Signature Algorithm: sha256WithRSAEncryption
73:2a:a6:54:60:59:46:4b:a0:e6:2d:77:20:e6:c4:52:fc:bf:
be:f7:d1:c2:57:1e:d8:fb:a9:0d:82:dd:28:42:05:86:2a:38:
22:16:bd:39:71:73:ae:7b:5c:ce:25:1e:e8:f1:d6:aa:cb:49:
54:2e:35:c6:69:5d:76:87:31:65:3b:99:03:f9:0d:24:5b:7b:
e9:8a:67:09:ff:2c:63:03:8d:0f:92:c6:07:65:49:a4:58:e9:
46:73:6b:85:c1:38:8b:44:c0:d9:b5:a4:d5:19:6b:8d:61:fd:
0e:16:07:ad:e5:90:83:73:97:4f:a5:fe:48:ce:0f:fe:89:b1:
a3:40:e9:43:bc:69:00:80:6e:ab:e1:2e:36:5f:9a:74:30:18:
ac:7d:6c:68:fb:d5:f9:62:1d:1b:ba:91:09:fa:dd:4d:77:bc:
c4:6d:a0:5a:b4:4e:9e:50:26:78:6d:52:c0:24:3b:0d:f1:e0:
9d:c0:55:39:e7:13:04:c0:5d:50:09:c3:bd:2c:29:03:6c:62:
bc:01:bf:87:15:42:7a:5f:0c:85:80:0c:fc:d9:29:5d:75:7e:
03:98:1a:76:2c:a5:98:85:c7:65:a7:d7:c5:92:5c:8f:3c:26:
de:2c:89:3d:0b:63:59:72:57:50:c3:29:44:a1:b0:a3:61:be:
91:94:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:35 2026 by rpki-client