Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0_ZMHSgBwyvgmvAff5rs5_8DI6A.roa
File: 0_ZMHSgBwyvgmvAff5rs5_8DI6A.roa (raw, json)
Hash identifier: sr8QSlUyysuPJZLwRhK7bHs1MPlnEfT5SS9qFiplRN4=
Subject key identifier: D3:F6:4C:1D:28:01:C3:2B:E0:9A:F0:1F:7F:9A:EC:E7:FF:03:23:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FEC56646F0E050A1E0E509FC3F3CB9D73
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0_ZMHSgBwyvgmvAff5rs5_8DI6A.roa
Signing time: Mon 10 Aug 2026 15:41:52 +0000
ROA not before: Mon 10 Aug 2026 15:41:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 31.56.140.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.78.0/24 maxlen: 24
31.57.79.0/24 maxlen: 24
31.57.80.0/24 maxlen: 24
31.57.81.0/24 maxlen: 24
31.57.85.0/24 maxlen: 24
31.57.86.0/24 maxlen: 24
31.57.87.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.58.10.0/24 maxlen: 24
31.58.16.0/24 maxlen: 24
31.58.19.0/24 maxlen: 24
31.58.20.0/24 maxlen: 24
31.58.21.0/24 maxlen: 24
31.58.26.0/24 maxlen: 24
31.58.29.0/24 maxlen: 24
31.58.30.0/24 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.18.0/24 maxlen: 24
31.59.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:56:64:6f:0e:05:0a:1e:0e:50:9f:c3:f3:cb:9d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 10 15:41:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3f64c1d2801c32be09af01f7f9aece7ff0323a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:ed:f0:be:52:86:0c:48:93:a7:13:ca:89:
95:a1:7b:2b:fc:c3:9f:5b:59:9f:ec:44:e7:f2:11:
65:d2:21:fa:bf:64:cd:26:40:18:25:36:e7:50:e1:
55:52:86:28:de:60:05:fe:17:68:f6:5d:b5:a3:a9:
71:9f:90:46:f3:ce:62:54:d1:0c:9d:49:d2:60:9c:
3e:66:df:1e:46:b5:62:25:1f:5e:8d:b9:1a:ea:67:
b1:9c:04:30:e6:2d:7d:0e:57:e9:01:b8:f8:9b:3c:
1e:a3:f5:f4:eb:9a:86:bd:56:6b:6c:79:61:23:65:
16:a0:a4:a7:c4:da:c7:c3:b7:25:1a:fb:70:7b:58:
bb:3c:36:60:b8:fb:3e:6d:45:be:18:f7:a7:29:ad:
ed:3d:9a:c4:f8:f2:49:d0:d3:28:50:e3:6b:68:96:
79:7d:4e:fd:29:8b:2d:1d:ad:da:64:8d:40:12:59:
c1:e8:b4:cc:83:b8:c4:43:2d:dd:ea:37:ab:8d:23:
dd:c3:fe:d7:c7:0a:02:71:30:a2:96:10:fe:05:60:
9a:6b:60:90:00:7b:42:65:25:63:51:f1:20:5d:8a:
d1:33:1e:8f:33:58:bc:64:ee:20:7c:5a:d4:79:6b:
b9:2b:70:7d:05:fd:cc:99:2c:b0:dc:c5:11:4d:68:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F6:4C:1D:28:01:C3:2B:E0:9A:F0:1F:7F:9A:EC:E7:FF:03:23:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0_ZMHSgBwyvgmvAff5rs5_8DI6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.140.0/24
31.56.147.0/24
31.57.78.0-31.57.81.255
31.57.85.0-31.57.87.255
31.57.203.0/24
31.58.10.0/24
31.58.16.0/24
31.58.19.0-31.58.21.255
31.58.26.0/24
31.58.29.0-31.58.30.255
31.58.167.0/24
31.59.13.0/24
31.59.18.0/24
31.59.24.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b4:fe:ac:36:98:97:b5:ea:31:b6:af:5b:4e:f2:a5:e5:44:
d5:25:2a:b6:1b:01:ce:d1:8f:1d:a0:6f:66:51:0b:1f:b4:ca:
58:ea:60:74:6d:82:52:e6:09:c6:2f:f1:bf:b0:36:af:48:69:
fd:67:2d:fe:85:f8:7d:50:13:21:57:9d:65:86:73:43:03:ed:
06:79:e1:08:da:a6:75:ea:54:d7:88:ef:c8:b8:97:3f:a4:f2:
7c:a9:68:63:03:53:3d:97:00:c1:e7:d2:52:a8:c5:5a:f2:47:
5b:8d:6c:fc:a2:95:69:65:09:3a:36:9b:9c:6c:71:f5:0d:83:
cb:4e:64:79:8e:1d:18:90:b0:70:22:e9:24:2a:86:69:12:6f:
4b:d4:bb:6f:52:08:f6:bd:5e:70:f6:c0:fa:27:de:c2:b6:17:
69:29:e4:e1:19:88:f1:7c:fb:1b:15:c0:89:73:a8:d1:5f:21:
30:b1:63:14:07:5b:dd:84:18:26:d1:50:dd:9d:2e:86:e5:20:
c9:b0:83:57:14:55:0a:57:dc:d2:9b:1b:a9:f9:63:4b:a0:69:
bd:7e:1c:5e:59:4b:61:d4:09:e5:d2:26:0c:c7:66:56:8e:86:
14:ee:48:2b:10:64:e8:ef:86:0a:a7:85:12:0c:02:24:4f:40:
cf:cc:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:58:12 2026 by rpki-client