Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cs6yIQLyjZSetCmA60sVT1ch8B4.roa
File: Cs6yIQLyjZSetCmA60sVT1ch8B4.roa (raw, json)
Hash identifier: mAQvMRhhQSnLxHvwEIYzzk5w8pRFJxSEtlpZzgqFHsk=
Subject key identifier: 0A:CE:B2:21:02:F2:8D:94:9E:B4:29:80:EB:4B:15:4F:57:21:F0:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EFF62FE950DDD57BF66941E9C64B01A64
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cs6yIQLyjZSetCmA60sVT1ch8B4.roa
Signing time: Thu 25 Jun 2026 15:25:38 +0000
ROA not before: Thu 25 Jun 2026 15:25:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.138.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:62:fe:95:0d:dd:57:bf:66:94:1e:9c:64:b0:1a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 25 15:25:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0aceb22102f28d949eb42980eb4b154f5721f01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:54:ac:97:d4:56:4b:f2:70:44:79:9b:d0:52:
21:b3:c4:c9:54:2e:6b:97:b1:7a:f3:68:00:9c:94:
ae:de:c7:8f:8a:e9:f0:e6:94:81:a9:73:18:e1:17:
c5:99:a9:53:a1:60:2f:25:af:1c:e5:8b:f1:5a:9e:
d7:6b:a5:83:4e:a8:62:f1:90:60:7b:bf:a0:14:85:
fb:f4:c4:2d:2c:7a:56:53:4e:56:17:5a:34:c1:e8:
05:2f:e6:2f:17:34:cc:38:66:03:56:f5:78:03:27:
26:ce:85:40:7f:9f:5d:a5:59:09:61:2f:a4:da:22:
91:e7:f1:6d:8b:d8:30:d4:75:69:ff:43:53:82:0f:
65:ab:33:5b:86:81:03:c4:4c:93:fe:37:c2:0b:49:
16:a1:ed:6e:0c:62:1e:06:7f:da:6e:08:ed:27:38:
ae:09:cf:ce:65:84:14:01:12:2e:9f:51:37:5e:0d:
41:40:06:4e:0d:4d:4e:ea:29:df:58:db:87:d3:f7:
4a:83:89:a8:cd:d6:f2:e5:0d:29:a3:9e:55:d8:5f:
a8:b2:6b:04:41:31:8d:46:42:64:f1:07:a7:14:0e:
84:cb:6d:5a:f8:b0:24:23:bc:d3:b6:17:80:18:c8:
49:ad:60:a9:c6:85:4c:95:fb:78:be:70:82:20:9e:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CE:B2:21:02:F2:8D:94:9E:B4:29:80:EB:4B:15:4F:57:21:F0:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Cs6yIQLyjZSetCmA60sVT1ch8B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.138.0/24
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:ab:11:a6:d0:02:d2:2c:25:22:c0:f7:2e:49:e8:ca:66:aa:
c4:1b:e5:88:d0:38:58:af:92:7f:27:96:19:a6:72:fd:49:2b:
c0:02:03:5e:c0:49:c9:e6:ea:39:50:a1:4d:f0:7d:f7:e8:d3:
9c:52:47:ad:58:36:e3:00:0b:86:11:36:cd:43:15:a2:9b:fa:
ee:0e:ca:42:c6:2c:9b:cf:46:a2:d3:24:9b:65:d0:05:0e:c2:
31:ff:17:45:e8:e5:6a:d0:76:37:0d:2b:f9:f6:55:1d:28:a6:
b5:98:ff:19:a4:6d:54:60:8e:8d:2a:2a:a4:8a:55:2d:92:8b:
39:04:b7:13:3d:49:6f:19:07:04:d9:32:3b:09:d4:85:5a:bd:
3c:71:7b:85:4f:32:ee:29:93:69:56:d5:db:34:06:3a:d7:cc:
6a:3b:d0:c8:9c:fb:18:15:50:50:bd:2a:e5:b1:f8:11:30:31:
ab:c6:95:24:3d:60:d8:b2:71:f2:56:45:99:e6:a6:00:e3:f0:
ad:66:53:d8:df:5c:ec:fe:df:26:af:b9:e8:24:b0:90:63:b1:
58:3d:5c:be:66:fd:79:0b:19:7e:be:c6:58:25:7d:99:49:ab:
ed:02:5a:0d:ae:6e:00:12:67:d0:13:01:64:2d:8b:70:3e:df:
9c:eb:36:2b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ7/Yv6VDd1Xv2aUHpxksBpkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNjI1MTUyNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWNlYjIyMTAyZjI4ZDk0OWViNDI5ODBlYjRiMTU0ZjU3MjFmMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VSsl9RWS/JwRHmb0FIhs8TJVC5r
l7F682gAnJSu3sePiunw5pSBqXMY4RfFmalToWAvJa8c5YvxWp7Xa6WDTqhi8ZBg
e7+gFIX79MQtLHpWU05WF1o0wegFL+YvFzTMOGYDVvV4AycmzoVAf59dpVkJYS+k
2iKR5/Fti9gw1HVp/0NTgg9lqzNbhoEDxEyT/jfCC0kWoe1uDGIeBn/abgjtJziu
Cc/OZYQUARIun1E3Xg1BQAZODU1O6infWNuH0/dKg4mozdby5Q0po55V2F+osmsE
QTGNRkJk8QenFA6Ey21a+LAkI7zTtheAGMhJrWCpxoVMlft4vnCCIJ5X7QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFArOsiEC8o2UnrQpgOtLFU9XIfAeMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQ3M2eUlRTHlqWlNldENtQTYwc1ZUMWNoOEI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHziaAwQB
HzieAwQCHzioAwQBHziuAwQAHzmKAwQBHzoiMA0GCSqGSIb3DQEBCwUAA4IBAQBq
qxGm0ALSLCUiwPcuSejKZqrEG+WI0DhYr5J/J5YZpnL9SSvAAgNewEnJ5uo5UKFN
8H336NOcUketWDbjAAuGETbNQxWim/ruDspCxiybz0ai0ySbZdAFDsIx/xdF6OVq
0HY3DSv59lUdKKa1mP8ZpG1UYI6NKiqkilUtkos5BLcTPUlvGQcE2TI7CdSFWr08
cXuFTzLuKZNpVtXbNAY618xqO9DInPsYFVBQvSrlsfgRMDGrxpUkPWDYsnHyVkWZ
5qYA4/CtZlPY31zs/t8mr7noJLCQY7FYPVy+Zv15Cxl+vsZYJX2ZSavtAloNrm4A
EmfQEwFkLYtwPt+c6zYr
-----END CERTIFICATE-----
Generated at Fri Jun 26 17:02:02 2026 by rpki-client