Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-r2L7YQ1rwlFldJL2_4gSHqGJRI.roa
File: 1-r2L7YQ1rwlFldJL2_4gSHqGJRI.roa (raw, json)
Hash identifier: /fSc/X7Xp67KNgEGJKHhr235iaXNZvlfYeH6hOnxAEA=
Subject key identifier: FA:BD:8B:ED:84:35:AF:09:45:95:D2:4B:DB:FE:20:48:7A:86:25:12
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A033D9D5227C569832247AC28BA19A879F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-r2L7YQ1rwlFldJL2_4gSHqGJRI.roa
Signing time: Mon 24 Aug 2026 12:58:28 +0000
ROA not before: Mon 24 Aug 2026 12:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.56.16.0/22 maxlen: 24
31.56.188.0/24 maxlen: 24
31.58.92.0/24 maxlen: 24
31.58.93.0/24 maxlen: 24
31.58.176.0/24 maxlen: 24
31.58.177.0/24 maxlen: 24
31.58.218.0/23 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.124.0/24 maxlen: 24
31.59.125.0/24 maxlen: 24
31.59.126.0/24 maxlen: 24
31.59.127.0/24 maxlen: 24
31.59.142.0/24 maxlen: 24
31.59.149.0/24 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.216.0/22 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/23 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.200.0/24 maxlen: 24
94.183.201.0/24 maxlen: 24
94.183.202.0/24 maxlen: 24
94.183.204.0/24 maxlen: 24
94.183.205.0/24 maxlen: 24
94.183.217.0/24 maxlen: 24
94.183.219.0/24 maxlen: 24
94.183.220.0/22 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.221.0/24 maxlen: 24
94.183.222.0/24 maxlen: 24
94.183.223.0/24 maxlen: 24
94.183.228.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
94.183.236.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
94.183.253.0/24 maxlen: 24
94.183.255.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.16.0/22 maxlen: 24
217.60.16.0/24 maxlen: 24
217.60.17.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.21.0/24 maxlen: 24
217.60.23.0/24 maxlen: 24
217.60.64.0/24 maxlen: 24
217.60.65.0/24 maxlen: 24
217.60.66.0/24 maxlen: 24
217.60.68.0/24 maxlen: 24
217.60.69.0/24 maxlen: 24
217.60.71.0/24 maxlen: 24
217.60.74.0/24 maxlen: 24
217.60.75.0/24 maxlen: 24
217.60.80.0/24 maxlen: 24
217.60.81.0/24 maxlen: 24
217.60.82.0/24 maxlen: 24
217.60.83.0/24 maxlen: 24
217.60.176.0/24 maxlen: 24
217.60.181.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:d9:d5:22:7c:56:98:32:24:7a:c2:8b:a1:9a:87:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 24 12:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fabd8bed8435af094595d24bdbfe20487a862512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:e0:c3:0d:b5:ef:33:6d:1b:58:a7:70:d3:
f0:3e:9a:90:9d:22:bb:f9:0e:f8:0c:c9:39:8e:31:
a2:c5:b1:dc:8e:d8:1c:17:84:7e:e0:ac:3d:16:39:
82:f1:71:79:d5:d0:4b:a0:62:ed:cd:6a:c9:20:c4:
1a:bc:a9:7b:4f:01:9b:af:e3:34:1a:88:fe:d3:61:
f5:8b:40:0e:e4:d4:62:45:a7:8a:ff:0c:6d:9d:08:
e4:73:9b:d7:50:89:98:69:5c:83:2e:35:a5:ac:a2:
fb:9d:1a:03:00:c2:9b:60:cf:6f:24:01:41:0e:ec:
ce:4e:b0:29:92:04:74:80:2a:50:ff:45:a6:3b:7d:
53:f8:d5:d2:b4:4d:00:7c:64:8f:3a:8c:ed:79:dc:
1a:68:da:5c:ad:c4:cd:bd:6b:20:82:1c:d8:09:da:
22:5c:8b:1d:f8:90:5c:c0:57:1b:c4:d6:86:14:34:
17:60:65:d6:a8:ed:86:fb:c8:83:8f:4e:0b:a9:de:
5d:27:ab:3b:ec:97:03:13:81:d1:21:91:cf:f8:a0:
b6:48:f9:f4:f1:90:25:64:02:16:7a:87:ed:b4:b6:
d4:83:8b:9c:38:96:94:4b:e7:48:b7:e9:62:3e:28:
1d:99:e1:43:e4:8d:a8:4a:ed:65:35:3e:02:f5:82:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BD:8B:ED:84:35:AF:09:45:95:D2:4B:DB:FE:20:48:7A:86:25:12
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-r2L7YQ1rwlFldJL2_4gSHqGJRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.56.188.0/24
31.58.92.0/23
31.58.176.0/23
31.58.218.0/23
31.58.240.0/22
31.59.36.0/24
31.59.124.0/22
31.59.142.0/24
31.59.149.0/24
31.59.208.0/24
31.59.216.0/21
94.183.157.0/24
94.183.200.0-94.183.202.255
94.183.204.0/23
94.183.217.0/24
94.183.219.0-94.183.223.255
94.183.228.0/23
94.183.236.0/24
94.183.241.0/24
94.183.253.0/24
94.183.255.0/24
217.60.13.0/24
217.60.16.0-217.60.21.255
217.60.23.0/24
217.60.64.0-217.60.66.255
217.60.68.0/23
217.60.71.0/24
217.60.74.0/23
217.60.80.0/22
217.60.176.0/24
217.60.181.0/24
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8e:43:e0:86:f5:31:9b:a8:e6:87:74:0c:8f:e9:7b:5a:f1:
95:9b:35:e7:72:6a:e9:b1:80:2b:e7:48:c2:a0:87:59:b0:41:
99:0f:d8:6e:78:b8:bb:d4:db:e8:53:38:3e:d7:d2:74:7d:60:
41:b5:80:04:87:fe:5c:3e:28:96:24:e5:ab:66:2b:3b:90:17:
04:bf:21:03:ea:f5:23:40:c0:9d:72:0d:cd:81:d5:47:a7:68:
6a:9c:d8:42:52:9c:a2:80:cb:4e:1c:d4:74:21:36:5f:57:59:
84:10:44:79:2f:ee:be:f7:e6:9a:26:cf:d1:dc:17:5e:9c:b2:
b3:15:04:46:e9:4a:1c:e5:08:70:56:0e:fb:22:a7:8c:c0:08:
32:28:8e:3f:26:57:d5:63:8a:84:a4:37:34:7e:d1:79:09:df:
da:6d:b6:69:6e:34:88:27:c5:f0:21:43:03:4d:90:b8:e0:63:
59:f2:b1:52:c9:fe:5c:a5:f5:5b:ae:44:1b:ed:c9:41:af:1e:
17:1b:41:c4:f8:20:15:c3:fb:84:6d:c2:4f:a6:32:24:d1:b5:
6f:23:6d:63:90:24:de:50:94:90:4f:79:be:f2:c9:8c:35:17:
65:09:4a:d2:3c:e4:ba:0a:17:24:60:11:8d:79:e8:e1:20:5f:
b1:26:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:38 2026 by rpki-client