Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6uvo1w3Uq7PsqcxwjerZdGSR0t8.roa
File: 6uvo1w3Uq7PsqcxwjerZdGSR0t8.roa (raw, json)
Hash identifier: /0aHAki6qb8A5x/kh8Qdd7C+bEl+22tmMtX2q1AjMD4=
Subject key identifier: EA:EB:E8:D7:0D:D4:AB:B3:EC:A9:CC:70:8D:EA:D9:74:64:91:D2:DF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D6BD20EB24F057B1E8FF25A9B7792965F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6uvo1w3Uq7PsqcxwjerZdGSR0t8.roa
Signing time: Wed 08 Apr 2026 06:40:21 +0000
ROA not before: Wed 08 Apr 2026 06:40:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 31.56.140.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.78.0/24 maxlen: 24
31.57.79.0/24 maxlen: 24
31.57.80.0/24 maxlen: 24
31.57.81.0/24 maxlen: 24
31.57.85.0/24 maxlen: 24
31.57.86.0/24 maxlen: 24
31.57.87.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.58.10.0/24 maxlen: 24
31.58.16.0/24 maxlen: 24
31.58.19.0/24 maxlen: 24
31.58.20.0/24 maxlen: 24
31.58.21.0/24 maxlen: 24
31.58.26.0/24 maxlen: 24
31.58.29.0/24 maxlen: 24
31.58.30.0/24 maxlen: 24
31.58.167.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.18.0/24 maxlen: 24
31.59.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:d2:0e:b2:4f:05:7b:1e:8f:f2:5a:9b:77:92:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 8 06:40:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eaebe8d70dd4abb3eca9cc708dead9746491d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:04:eb:4f:ab:a5:3a:4f:ad:2b:d5:38:ad:
a6:b6:6b:90:b2:ad:b6:ce:1d:a4:f6:d1:bd:35:cd:
33:c0:d5:ed:33:99:e9:60:cb:76:a8:fd:b5:fb:e6:
a8:fa:d8:26:83:b9:9f:a5:d3:c4:26:86:25:69:27:
d5:41:85:87:12:19:fd:cc:5d:05:92:b6:73:65:f5:
34:5c:99:ea:ce:d6:de:0f:95:eb:bc:47:1a:d5:88:
06:fa:b4:00:11:4f:f9:31:dd:35:df:73:70:91:98:
aa:c0:01:94:e9:ed:86:7e:d4:e5:77:ad:79:b1:47:
42:c7:b1:23:cd:22:91:68:71:92:39:5c:d8:6e:45:
c0:3c:97:82:3c:38:43:b4:53:be:04:ea:68:76:10:
41:74:78:33:d4:1b:14:d2:75:1b:9c:24:09:83:c5:
11:4e:96:2c:9d:a2:e0:86:bc:bb:86:90:a9:ae:62:
cd:d8:9b:b2:e8:aa:c4:71:db:d4:f2:93:4e:c6:55:
21:8f:84:2f:fe:ac:0e:9f:ca:1f:8c:54:e4:c3:9d:
f2:f9:7a:81:38:13:3b:5a:b0:1b:ec:fc:9d:94:61:
62:44:ac:8b:44:20:76:cb:48:44:f8:96:19:58:6a:
55:8e:ed:3d:d3:01:32:aa:ec:70:aa:9a:bd:70:c5:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EB:E8:D7:0D:D4:AB:B3:EC:A9:CC:70:8D:EA:D9:74:64:91:D2:DF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6uvo1w3Uq7PsqcxwjerZdGSR0t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.140.0/24
31.56.147.0/24
31.57.78.0-31.57.81.255
31.57.85.0-31.57.87.255
31.57.203.0/24
31.58.10.0/24
31.58.16.0/24
31.58.19.0-31.58.21.255
31.58.26.0/24
31.58.29.0-31.58.30.255
31.58.167.0/24
31.59.13.0/24
31.59.18.0/24
31.59.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8b:ee:77:fa:47:f7:68:75:6d:1f:94:2d:af:ff:95:d9:6d:
ea:11:a0:7a:64:35:d3:5e:a7:a7:40:d7:4c:1e:4b:36:c4:be:
0f:2f:8e:fe:7f:0b:22:d4:92:5e:67:80:e6:39:bd:5a:4c:05:
ec:d0:b3:a4:2e:18:78:01:61:f9:47:bf:43:da:6a:ef:66:90:
76:b7:ac:a1:fd:84:20:d9:a8:55:8c:74:31:cd:b5:7e:eb:d4:
14:72:b7:17:bb:6f:64:60:9c:be:c8:ce:2e:d0:c4:8a:cc:39:
08:06:bc:fb:a9:46:e4:a0:f1:41:f6:64:d7:af:cf:29:f7:c1:
50:07:77:8e:b4:c0:cd:87:b5:b2:d7:e9:b7:b4:f3:4e:0b:70:
e6:ee:9b:f2:52:95:b0:df:99:99:06:0d:0e:21:9c:eb:46:b5:
3b:e4:24:e0:91:20:7f:8d:0c:f5:43:b9:f1:cc:08:f8:78:96:
60:13:4d:e3:ed:49:54:ac:26:74:57:91:58:b2:33:e4:d3:49:
73:01:f0:34:a8:10:2c:b9:e2:c3:55:75:a2:fe:a6:8d:d2:69:
e5:c0:5e:70:2d:d4:d3:66:b9:68:60:2d:6e:67:6c:3b:6d:d8:
d2:26:b9:0b:a3:29:e8:93:7a:5a:e0:a0:a1:63:c7:f7:5f:5b:
4c:eb:2c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:05:20 2026 by rpki-client