Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EbXIdrRQlvUcnPcYduz0QMdd5dM.roa
File: EbXIdrRQlvUcnPcYduz0QMdd5dM.roa (raw, json)
Hash identifier: xlG/B847SWkDfr73DAPUNBNBongw6RJiPx4XUxgBn2k=
Subject key identifier: 11:B5:C8:76:B4:50:96:F5:1C:9C:F7:18:76:EC:F4:40:C7:5D:E5:D3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E418A38D0B9536B88A1ADDD0B1660F6D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EbXIdrRQlvUcnPcYduz0QMdd5dM.roa
Signing time: Tue 19 May 2026 18:40:38 +0000
ROA not before: Tue 19 May 2026 18:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199186
IP address blocks: 31.56.165.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.58.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:8a:38:d0:b9:53:6b:88:a1:ad:dd:0b:16:60:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 19 18:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11b5c876b45096f51c9cf71876ecf440c75de5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:25:65:57:e2:4f:4a:51:78:46:cf:48:17:
78:03:03:a7:5b:36:6f:a3:9b:92:33:94:ae:19:6e:
a8:f9:ba:e0:f8:03:85:df:8d:89:f7:f3:b4:cd:b5:
22:a4:8c:e2:88:e7:ea:c3:85:49:1a:85:74:50:b8:
9f:06:b9:13:5b:9c:01:7e:b3:fd:53:7a:71:93:2e:
32:d9:88:87:65:dc:94:bc:4a:9c:b5:97:ac:73:7f:
05:da:25:1a:eb:94:5e:37:81:f0:c7:65:cd:06:8a:
63:44:d1:ba:ca:e2:a1:65:6f:1c:d5:12:ed:42:af:
c0:1d:46:42:a8:c3:10:c1:e7:1b:5b:36:c0:01:49:
17:87:76:9a:13:7d:0a:54:98:1b:fc:9e:e3:b5:7d:
e1:d9:10:0b:65:48:dc:df:91:7e:44:03:61:f7:fd:
71:61:6b:49:69:13:69:60:36:82:bd:3e:c4:96:86:
9e:60:ea:ee:04:f4:4d:d7:83:ea:01:dd:96:15:11:
4d:95:29:68:dd:84:a5:72:2e:a3:4f:fd:56:9f:fe:
fb:9a:f1:7e:35:53:a4:b6:7a:67:07:01:ea:5b:d0:
b5:88:4f:18:72:12:18:b7:9c:ef:ce:b1:fb:25:64:
f2:9a:35:4f:c7:a7:9a:e5:27:58:41:49:67:95:13:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B5:C8:76:B4:50:96:F5:1C:9C:F7:18:76:EC:F4:40:C7:5D:E5:D3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EbXIdrRQlvUcnPcYduz0QMdd5dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.165.0/24
31.57.197.0/24
31.58.96.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d1:55:5c:3d:61:70:dc:a6:a7:dc:29:2b:a9:93:c7:68:6c:
89:ac:7e:ff:7a:41:8a:3d:d4:cc:81:33:a7:3e:ca:a7:f3:3f:
fe:43:b2:ac:c8:e9:04:84:dc:39:ba:25:2b:ba:e2:af:46:74:
c2:31:f5:d4:4a:1c:04:22:db:e7:81:2c:02:a0:a8:67:9d:f4:
8c:ba:61:30:ea:1b:e2:5d:0f:b5:5f:86:88:24:73:30:c2:e8:
b5:6c:01:40:61:6f:cd:69:3a:49:cd:fd:65:23:ce:1d:dd:f0:
2e:bc:e5:ca:09:8b:6b:bc:f4:47:ad:29:96:8c:cf:e2:77:0e:
c5:e1:e4:3d:61:42:87:7a:a0:d8:52:b9:30:a8:2d:02:32:f1:
51:2f:c0:3b:cf:e0:15:fb:82:1f:b0:27:6e:e0:a6:a5:72:bf:
8a:13:fb:40:4f:b1:d6:0a:31:79:62:c2:12:fa:cb:b0:98:cf:
b8:cb:0a:fe:fb:60:62:e0:51:c9:bd:ad:95:a9:39:89:09:60:
86:2a:be:74:bc:f7:56:43:b1:51:c9:84:dd:4b:5a:57:3d:60:
6c:b1:ba:c3:9d:83:00:3d:01:c1:96:d1:3e:6a:1c:cd:cb:a9:
d0:44:d5:93:62:a9:dd:ce:21:90:ca:57:3a:3a:58:ef:44:b5:
7f:9f:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:55:16 2026 by rpki-client