Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2wj63YBbAsNHJ7RVme-AeuIOrL0.roa
File: 2wj63YBbAsNHJ7RVme-AeuIOrL0.roa (raw, json)
Hash identifier: +3rzglSrT0HBgouUy4lk6GzBZDDLYww9TNmtWWIdFPs=
Subject key identifier: DB:08:FA:DD:80:5B:02:C3:47:27:B4:55:99:EF:80:7A:E2:0E:AC:BD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0232CBAE8FDA1C03C70E9E0AE76E6FC2C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2wj63YBbAsNHJ7RVme-AeuIOrL0.roa
Signing time: Fri 21 Aug 2026 07:15:28 +0000
ROA not before: Fri 21 Aug 2026 07:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.56.5.0/24 maxlen: 24
31.56.119.0/24 maxlen: 24
31.56.128.0/24 maxlen: 24
31.56.129.0/24 maxlen: 24
31.56.130.0/24 maxlen: 24
31.56.131.0/24 maxlen: 24
31.56.132.0/24 maxlen: 24
31.56.133.0/24 maxlen: 24
31.56.134.0/24 maxlen: 24
31.56.135.0/24 maxlen: 24
31.56.136.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.207.0/24 maxlen: 24
31.56.246.0/24 maxlen: 24
31.56.247.0/24 maxlen: 24
31.56.248.0/24 maxlen: 24
31.56.249.0/24 maxlen: 24
31.56.250.0/24 maxlen: 24
31.56.251.0/24 maxlen: 24
31.56.252.0/24 maxlen: 24
31.56.253.0/24 maxlen: 24
31.56.254.0/24 maxlen: 24
31.56.255.0/24 maxlen: 24
31.57.41.0/24 maxlen: 24
31.57.42.0/24 maxlen: 24
31.57.82.0/24 maxlen: 24
31.58.116.0/22 maxlen: 24
31.59.0.0/24 maxlen: 24
31.59.1.0/24 maxlen: 24
31.59.2.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.6.0/24 maxlen: 24
31.59.7.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.246.0/24 maxlen: 24
31.59.247.0/24 maxlen: 24
217.60.126.0/24 maxlen: 24
217.60.127.0/24 maxlen: 24
217.60.160.0/24 maxlen: 24
217.60.161.0/24 maxlen: 24
217.60.166.0/24 maxlen: 24
217.60.167.0/24 maxlen: 24
217.60.168.0/24 maxlen: 24
217.60.169.0/24 maxlen: 24
217.60.170.0/24 maxlen: 24
217.60.171.0/24 maxlen: 24
217.60.172.0/24 maxlen: 24
217.60.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:2c:ba:e8:fd:a1:c0:3c:70:e9:e0:ae:76:e6:fc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 21 07:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db08fadd805b02c34727b45599ef807ae20eacbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:38:05:c2:56:8c:ba:67:3e:33:eb:9d:78:
4c:9e:f6:d8:74:f3:f0:74:80:33:51:a8:c7:b2:25:
9a:99:e9:1b:a8:f0:a7:07:d5:b8:fa:4e:2c:9d:ff:
70:3c:4f:a9:09:14:19:7c:38:e1:86:5a:28:9c:52:
66:6f:33:98:2b:b6:f2:0d:bb:af:61:49:c9:81:68:
71:44:04:da:50:c2:e6:9c:77:69:b0:c8:6e:a3:b5:
16:e5:e9:8e:0e:84:c8:8b:0c:12:b5:dc:cc:35:37:
65:98:c1:49:ad:db:95:99:b7:26:0c:f1:bf:2a:0c:
70:af:10:3d:72:60:25:4d:dc:2a:0c:49:7c:cd:6c:
0f:45:b3:ee:08:eb:6e:8d:d2:4a:23:9d:e4:52:a7:
92:f7:0b:23:9d:0c:7a:b5:53:98:c0:1c:44:ba:0c:
3f:07:f8:50:ee:e6:c3:d4:20:9f:94:2f:99:d3:0a:
5b:a5:0f:ca:69:5a:bb:92:89:9b:46:50:34:95:dc:
9f:a8:d6:2f:b8:6a:2f:a4:c5:ad:f5:26:b5:f2:5b:
f7:9e:dd:d4:4e:09:03:9b:1b:71:8f:04:db:f6:69:
1b:f4:ce:95:30:85:83:f9:49:22:b8:39:ed:d3:a7:
d0:b8:ea:31:48:16:d3:5e:2c:47:c6:8b:af:cb:55:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:08:FA:DD:80:5B:02:C3:47:27:B4:55:99:EF:80:7A:E2:0E:AC:BD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2wj63YBbAsNHJ7RVme-AeuIOrL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.5.0/24
31.56.119.0/24
31.56.128.0-31.56.137.255
31.56.207.0/24
31.56.246.0-31.56.255.255
31.57.41.0-31.57.42.255
31.57.82.0/24
31.58.116.0/22
31.59.0.0-31.59.9.255
31.59.246.0/23
217.60.126.0/23
217.60.160.0/23
217.60.166.0-217.60.173.255
Signature Algorithm: sha256WithRSAEncryption
b9:10:f1:32:83:6e:6e:a9:8e:c3:65:2f:0b:e3:92:5b:2f:b9:
a6:73:3a:52:66:eb:75:21:5d:9c:0f:cc:cd:8b:80:54:10:7c:
05:f9:4f:4c:bc:ac:01:23:51:43:59:d5:8f:a3:5d:60:0e:a5:
ff:43:9e:76:30:18:de:87:5d:b0:e7:ec:54:34:d4:50:7d:0f:
60:d7:72:59:b1:85:a1:39:00:1d:cb:89:16:31:b2:77:cd:b4:
ce:b3:78:8b:3e:a2:e7:60:05:e2:56:e2:de:46:db:f0:af:19:
1d:04:aa:29:16:ff:08:cc:b9:c9:a8:c6:d3:f6:2a:79:3b:80:
40:60:23:94:7b:19:95:d5:32:38:25:03:d2:17:e4:aa:6e:5f:
60:93:7c:e7:e5:bb:5a:86:6f:a6:29:82:1b:95:17:1d:cf:24:
d4:05:64:cd:26:ba:e2:c1:72:3b:37:ed:5d:af:63:23:e5:97:
fe:b9:f5:19:49:ce:b8:6a:39:63:6e:70:d8:db:a1:1a:16:d8:
b6:04:17:b8:38:57:f1:02:e9:9b:fa:4a:4d:74:2b:1f:56:97:
b1:f6:4e:b6:44:ef:99:52:95:bf:75:77:b3:bc:60:f2:f7:54:
87:51:84:19:3c:b5:ee:30:9d:cd:81:dd:0a:73:4b:3e:06:0e:
b3:a5:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:10 2026 by rpki-client