Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7znupB1gyxs1-6hNi2LwHgllmjs.roa
File: 7znupB1gyxs1-6hNi2LwHgllmjs.roa (raw, json)
Hash identifier: WTBDTy/GW4P5jOwmPHz474x7T5cL88DD+f2wVjN1Sl0=
Subject key identifier: EF:39:EE:A4:1D:60:CB:1B:35:FB:A8:4D:8B:62:F0:1E:09:65:9A:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A00F689CDFCB70CFD3AB5DA7CF607E8C96
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7znupB1gyxs1-6hNi2LwHgllmjs.roa
Signing time: Mon 17 Aug 2026 11:08:29 +0000
ROA not before: Mon 17 Aug 2026 11:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56594
IP address blocks: 31.58.137.0/24 maxlen: 24
31.58.254.0/24 maxlen: 24
31.59.46.0/24 maxlen: 24
31.59.47.0/24 maxlen: 24
31.59.92.0/24 maxlen: 24
31.59.93.0/24 maxlen: 24
31.59.94.0/24 maxlen: 24
31.59.95.0/24 maxlen: 24
31.59.114.0/24 maxlen: 24
31.59.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:68:9c:df:cb:70:cf:d3:ab:5d:a7:cf:60:7e:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 11:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef39eea41d60cb1b35fba84d8b62f01e09659a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:62:30:33:86:3d:ac:9c:48:f1:15:38:71:
c0:46:b5:eb:2b:28:41:cd:e3:54:a2:85:66:81:58:
97:aa:a6:3a:77:d7:eb:22:d4:22:fb:7a:4d:ab:ff:
0d:fd:cd:e8:e3:2e:d4:d5:77:29:5a:3d:9f:9b:3a:
47:54:f3:de:f0:23:9e:d2:06:1e:4a:04:23:6b:d1:
65:e8:a1:95:79:4c:f1:a2:e7:8c:aa:0a:fa:9b:dd:
4b:f1:6b:84:e7:8f:1b:50:a9:f6:e9:85:f0:5b:b6:
72:ee:73:4a:4f:42:c1:b5:cf:67:9b:04:3f:28:12:
4c:d7:13:26:00:07:49:94:c4:0d:7b:4f:8f:7d:cd:
1c:34:35:b3:ba:46:80:c9:d0:ec:46:e0:08:2f:e9:
cc:7d:29:7c:83:93:a5:d5:96:ce:13:93:68:bc:d1:
f7:b3:0b:b8:d6:9b:3b:ba:46:59:a6:43:2e:a8:f4:
7e:17:7f:03:f3:66:36:7a:47:f6:8d:dd:2b:d8:dc:
a8:3e:70:28:3a:eb:51:6c:3d:eb:02:7c:29:d6:83:
fa:73:4a:f7:2a:05:9f:ee:c7:89:9c:ec:e1:ba:4e:
9d:dd:e7:96:a2:fa:8c:9a:00:d0:76:b0:59:37:2e:
b8:b8:dd:b6:b5:16:7d:5a:fc:53:2f:84:91:1b:6b:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:39:EE:A4:1D:60:CB:1B:35:FB:A8:4D:8B:62:F0:1E:09:65:9A:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7znupB1gyxs1-6hNi2LwHgllmjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.137.0/24
31.58.254.0/24
31.59.46.0/23
31.59.92.0/22
31.59.114.0/24
31.59.185.0/24
Signature Algorithm: sha256WithRSAEncryption
36:43:3d:f8:ea:3b:f9:79:5e:b0:f5:20:43:30:5d:fe:06:a3:
f3:6d:51:83:f3:13:b8:0b:74:91:09:ee:0f:da:b2:62:eb:cf:
16:86:c6:55:f5:13:56:bd:53:9e:ff:04:05:29:09:0f:46:e7:
d6:e8:53:da:02:46:d3:ad:93:c2:9a:ea:10:4f:15:f2:27:bb:
7a:57:8f:c5:4f:1e:40:d3:54:25:f4:27:dc:c2:b1:a4:7e:a2:
ec:ab:bf:e8:fd:07:a8:97:44:13:76:49:ed:96:87:66:3d:64:
c2:d2:ed:85:0a:66:ca:2a:b5:03:9e:db:6e:70:9a:b3:6f:49:
fa:1f:73:e7:da:2b:0e:76:42:08:da:53:93:50:5f:35:64:f2:
fa:f2:ad:6b:18:05:86:5e:e4:98:40:f3:6e:b9:10:f3:bd:24:
5e:51:69:52:67:5c:07:03:2f:21:ee:9e:7d:33:c2:10:81:92:
47:6f:ac:7a:10:6c:d1:3a:31:4f:67:d1:a5:09:8b:1e:0b:d3:
63:43:ec:1e:83:dc:b8:6b:b7:c2:66:ad:42:1e:bd:f3:d3:bd:
bf:59:61:7a:79:a6:d3:ee:1c:d8:cd:c5:60:d1:35:bc:b9:d4:
27:35:d6:04:96:90:a9:07:a1:47:54:8f:b7:9e:ba:91:39:95:
bb:3c:78:e6
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaAPaJzfy3DP06tdp89gfoyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODE3MTEwODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjM5ZWVhNDFkNjBjYjFiMzVmYmE4NGQ4YjYyZjAxZTA5NjU5YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cBiMDOGPaycSPEVOHHARrXrKyhB
zeNUooVmgViXqqY6d9frItQi+3pNq/8N/c3o4y7U1XcpWj2fmzpHVPPe8COe0gYe
SgQja9Fl6KGVeUzxoueMqgr6m91L8WuE548bUKn26YXwW7Zy7nNKT0LBtc9nmwQ/
KBJM1xMmAAdJlMQNe0+Pfc0cNDWzukaAydDsRuAIL+nMfSl8g5Ol1ZbOE5NovNH3
swu41ps7ukZZpkMuqPR+F38D82Y2ekf2jd0r2NyoPnAoOutRbD3rAnwp1oP6c0r3
KgWf7seJnOzhuk6d3eeWovqMmgDQdrBZNy64uN22tRZ9WvxTL4SRG2t+wwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFO857qQdYMsbNfuoTYti8B4JZZo7MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvN3pudXBCMWd5eHMxLTZoTmkyTHdIZ2xsbWpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzqJAwQA
Hzr+AwQBHzsuAwQCHztcAwQAHztyAwQAHzu5MA0GCSqGSIb3DQEBCwUAA4IBAQA2
Qz346jv5eV6w9SBDMF3+BqPzbVGD8xO4C3SRCe4P2rJi688WhsZV9RNWvVOe/wQF
KQkPRufW6FPaAkbTrZPCmuoQTxXyJ7t6V4/FTx5A01Ql9CfcwrGkfqLsq7/o/Qeo
l0QTdkntlodmPWTC0u2FCmbKKrUDnttucJqzb0n6H3Pn2isOdkII2lOTUF81ZPL6
8q1rGAWGXuSYQPNuuRDzvSReUWlSZ1wHAy8h7p59M8IQgZJHb6x6EGzROjFPZ9Gl
CYseC9NjQ+weg9y4a7fCZq1CHr3z072/WWF6eabT7hzYzcVg0TW8udQnNdYElpCp
B6FHVI+3nrqROZW7PHjm
-----END CERTIFICATE-----
Generated at Wed Aug 26 00:31:08 2026 by rpki-client