Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9PVpQT3gpEvbJgG1iC2iKGdWEAs.roa
File: 9PVpQT3gpEvbJgG1iC2iKGdWEAs.roa (raw, json)
Hash identifier: 7T7ipsDg5K6tH5oOZw+QH0lI1QKRtSIvV0j9ab9h3AM=
Subject key identifier: F4:F5:69:41:3D:E0:A4:4B:DB:26:01:B5:88:2D:A2:28:67:56:10:0B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FF0B9BDF443BD4C0F0095C6C4EBB29CBE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9PVpQT3gpEvbJgG1iC2iKGdWEAs.roa
Signing time: Tue 11 Aug 2026 12:08:52 +0000
ROA not before: Tue 11 Aug 2026 12:08:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64439
IP address blocks: 31.56.208.0/24 maxlen: 24
31.56.211.0/24 maxlen: 24
31.59.37.0/24 maxlen: 24
94.183.155.0/24 maxlen: 24
217.60.10.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:b9:bd:f4:43:bd:4c:0f:00:95:c6:c4:eb:b2:9c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 11 12:08:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4f569413de0a44bdb2601b5882da2286756100b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:fd:63:b4:74:aa:c7:98:67:5c:fd:5b:8c:
96:61:d2:90:95:07:eb:25:92:57:b4:be:12:a5:8d:
3e:3a:ba:41:a3:e6:2a:86:d6:9d:09:4c:69:20:f0:
6e:6f:44:b7:c5:d0:fb:9f:00:10:65:0f:7b:0b:97:
77:3c:1b:b3:4e:a9:ff:8c:21:e1:37:da:db:da:a1:
3e:fe:80:ad:54:e9:16:37:1b:84:04:30:2f:4f:7e:
14:4d:2f:1d:da:fc:c9:11:33:5e:cc:dc:25:9e:24:
b1:dd:85:0d:d1:36:e9:3b:15:2c:9a:26:92:eb:cb:
c4:7c:95:ea:70:ff:4b:ae:02:c3:cb:32:0c:94:2a:
e1:7c:b6:fe:99:b2:c5:ac:69:6a:9f:9d:2b:6d:08:
52:8d:f2:67:2c:59:d1:95:e6:a9:e3:1d:72:28:07:
1f:d7:18:da:17:ed:12:2c:dc:db:2a:27:83:67:79:
34:d3:f6:2f:f1:ba:60:dc:27:bd:64:7f:a4:c1:cf:
6c:53:21:48:6e:4d:f7:12:75:b3:c0:46:1a:46:78:
31:dd:8c:40:04:94:7e:3b:6a:25:24:c5:9b:12:d6:
30:5e:5b:7a:dd:85:19:8b:fa:61:7f:82:11:42:26:
2a:0d:7a:b8:72:6f:6f:df:12:62:f8:5c:e3:91:8f:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:69:41:3D:E0:A4:4B:DB:26:01:B5:88:2D:A2:28:67:56:10:0B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9PVpQT3gpEvbJgG1iC2iKGdWEAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.208.0/24
31.56.211.0/24
31.59.37.0/24
94.183.155.0/24
217.60.10.0/24
217.60.186.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:db:36:e4:a1:47:f1:0f:d2:f0:53:04:3a:d8:06:0a:2d:43:
78:4c:29:73:d6:3d:f4:4d:7b:06:2e:a2:e1:7b:7b:23:62:46:
0c:52:12:b4:ec:ad:75:76:e5:39:24:17:85:e7:a0:24:a3:21:
91:43:39:60:21:82:86:26:db:40:80:9c:d1:bc:fa:4c:78:9e:
95:d3:4f:78:9a:59:1d:92:f0:02:58:34:f5:38:45:bf:95:02:
d0:85:f6:60:5a:14:f2:d6:46:65:32:9f:3b:10:4f:18:0f:90:
15:39:f1:ce:4e:30:70:68:b6:1f:89:f2:13:b2:3b:57:e6:f2:
35:b4:10:5a:51:3c:cd:c7:12:78:f0:b4:c5:5a:ce:95:f7:f3:
a2:50:53:75:70:84:8d:16:e8:83:41:3a:53:f5:cb:b7:28:28:
44:56:9d:e5:d6:a8:0b:0f:4b:b3:82:60:8c:f4:d5:44:39:8f:
f1:89:fd:6d:bc:08:9c:a9:b3:92:e0:f6:88:f9:66:cd:b8:13:
90:a7:4d:b2:85:3f:ae:10:dd:1e:1d:bb:78:ad:a8:21:32:fb:
b5:85:4e:49:e8:03:06:f9:11:4f:f9:51:8e:04:9a:bd:18:09:
14:83:70:cd:f8:b5:9f:8a:21:55:d6:4b:c2:86:2d:db:71:f4:
d9:da:31:7c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ/wub30Q71MDwCVxsTrspy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODExMTIwODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGY1Njk0MTNkZTBhNDRiZGIyNjAxYjU4ODJkYTIyODY3NTYxMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAX9Y7R0qseYZ1z9W4yWYdKQlQfr
JZJXtL4SpY0+OrpBo+YqhtadCUxpIPBub0S3xdD7nwAQZQ97C5d3PBuzTqn/jCHh
N9rb2qE+/oCtVOkWNxuEBDAvT34UTS8d2vzJETNezNwlniSx3YUN0TbpOxUsmiaS
68vEfJXqcP9LrgLDyzIMlCrhfLb+mbLFrGlqn50rbQhSjfJnLFnRleap4x1yKAcf
1xjaF+0SLNzbKieDZ3k00/Yv8bpg3Ce9ZH+kwc9sUyFIbk33EnWzwEYaRngx3YxA
BJR+O2olJMWbEtYwXlt63YUZi/phf4IRQiYqDXq4cm9v3xJi+FzjkY+NqQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFPT1aUE94KRL2yYBtYgtoihnVhALMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvOVBWcFFUM2dwRXZiSmdHMWlDMmlLR2RXRUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzjQAwQA
HzjTAwQAHzslAwQAXrebAwQA2TwKAwQA2Ty6MA0GCSqGSIb3DQEBCwUAA4IBAQCb
2zbkoUfxD9LwUwQ62AYKLUN4TClz1j30TXsGLqLhe3sjYkYMUhK07K11duU5JBeF
56AkoyGRQzlgIYKGJttAgJzRvPpMeJ6V0094mlkdkvACWDT1OEW/lQLQhfZgWhTy
1kZlMp87EE8YD5AVOfHOTjBwaLYfifITsjtX5vI1tBBaUTzNxxJ48LTFWs6V9/Oi
UFN1cISNFuiDQTpT9cu3KChEVp3l1qgLD0uzgmCM9NVEOY/xif1tvAicqbOS4PaI
+WbNuBOQp02yhT+uEN0eHbt4raghMvu1hU5J6AMG+RFP+VGOBJq9GAkUg3DN+LWf
iiFV1kvChi3bcfTZ2jF8
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:12:56 2026 by rpki-client