Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1VlKqgnXPKTCKTJsgIzv4UuGJjs.roa
File: 1VlKqgnXPKTCKTJsgIzv4UuGJjs.roa (raw, json)
Hash identifier: NI7pIgySDHMDMd5bPttNUkLk7NTqpndYqjsfjksqF5U=
Subject key identifier: D5:59:4A:AA:09:D7:3C:A4:C2:29:32:6C:80:8C:EF:E1:4B:86:26:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FBDAB974DE70616700DB560ECCC6E2C53
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1VlKqgnXPKTCKTJsgIzv4UuGJjs.roa
Signing time: Sat 01 Aug 2026 14:12:46 +0000
ROA not before: Sat 01 Aug 2026 14:12:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.84.0/24 maxlen: 24
31.59.186.0/24 maxlen: 24
31.59.212.0/24 maxlen: 24
217.60.244.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:ab:97:4d:e7:06:16:70:0d:b5:60:ec:cc:6e:2c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 1 14:12:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5594aaa09d73ca4c229326c808cefe14b86263b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:6b:e3:e3:8d:19:be:0a:17:ae:08:e3:a7:
e5:2a:db:32:ac:e7:d2:27:17:18:3c:c7:b4:2f:f5:
21:9c:94:e5:35:fe:4b:3f:56:fb:0c:e4:2b:99:ee:
de:06:96:15:2f:f9:09:2f:ca:06:b8:dc:fb:55:3d:
89:f6:39:32:16:7e:65:1a:c4:ca:6b:45:f1:46:f9:
3f:16:ce:07:04:d2:4d:5b:1e:62:72:86:8f:17:f5:
6a:6e:ba:e5:33:cd:cd:94:32:40:60:b9:78:ef:41:
6c:fe:0d:8b:29:0e:9d:93:74:6d:5f:b1:1d:9c:a8:
75:c1:79:d0:6f:45:d9:a8:4b:e5:c4:53:c2:2f:79:
55:ea:07:a4:43:81:c1:e8:a8:a7:bf:7b:f0:3a:aa:
08:ae:fa:8d:f4:65:62:27:01:98:ca:fa:d2:72:eb:
47:f5:59:12:4d:2b:d0:f3:ac:9c:00:55:5a:67:83:
05:9c:f3:a4:06:df:26:c6:a3:30:63:a7:79:52:7d:
06:ed:1f:10:b4:5e:a5:90:65:ce:c1:a3:96:8a:dc:
d4:ea:3f:01:0c:f0:a6:dd:c4:ee:fe:3a:b3:23:f8:
9f:6b:0f:f9:15:a5:d7:48:3c:01:a1:15:4a:27:db:
ce:6e:ef:cf:c4:61:a7:f4:4c:d8:9e:f3:da:64:7b:
8d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:59:4A:AA:09:D7:3C:A4:C2:29:32:6C:80:8C:EF:E1:4B:86:26:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1VlKqgnXPKTCKTJsgIzv4UuGJjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.84.0/24
31.59.186.0/24
31.59.212.0/24
217.60.244.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c9:b3:90:e3:13:e3:b9:8f:15:80:33:d9:51:27:9f:b9:48:
de:e5:4b:af:24:8e:65:53:2d:03:97:76:13:56:3d:08:3a:1a:
ac:47:b1:10:e1:84:26:11:2e:fc:3c:9e:92:a9:11:9a:de:06:
ac:21:b3:a3:86:29:7b:a0:bd:2d:5d:f1:b1:cb:60:f5:e9:10:
61:b6:b3:68:ff:4c:61:56:33:9d:88:fd:5e:85:9e:a7:52:9e:
17:5b:44:dc:fc:a6:4a:aa:d3:09:bb:cf:ad:79:e2:2f:46:c2:
eb:7d:bb:57:0a:d1:c5:ee:43:ff:67:bd:b4:49:b1:c9:e6:df:
65:97:2c:a6:6e:6a:14:20:12:8f:a7:e1:dc:6a:92:74:3f:ac:
b4:43:4b:c8:79:2b:2c:12:4a:f7:7d:68:3c:35:85:f4:d6:71:
64:0b:07:8f:a2:54:4a:c0:03:8b:0b:e7:5d:3b:5d:c7:58:1e:
aa:4e:2d:df:de:6e:b1:aa:63:b3:d3:84:02:7e:da:8e:53:4a:
c1:09:e3:63:dc:df:d0:d8:61:c2:93:a5:18:65:45:d0:cb:73:
b5:91:58:02:30:74:68:8e:1a:b3:f8:19:78:09:3e:ed:3c:0f:
94:33:8a:59:80:92:02:59:ba:42:ce:a9:60:e1:43:79:74:71:
e8:12:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:05 2026 by rpki-client