Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gqsl_1r3Kkez-4L78wM_JJlU6gc.roa
File: Gqsl_1r3Kkez-4L78wM_JJlU6gc.roa (raw, json)
Hash identifier: zNn/wsXhnedZzAGCLdVf/rGU0VFSoEOkYfbb41s/BNw=
Subject key identifier: 1A:AB:25:FF:5A:F7:2A:47:B3:FB:82:FB:F3:03:3F:24:99:54:EA:07
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A07097586104162B9682FE54FA95CAEB36
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gqsl_1r3Kkez-4L78wM_JJlU6gc.roa
Signing time: Sat 05 Sep 2026 08:02:41 +0000
ROA not before: Sat 05 Sep 2026 08:02:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 31.56.89.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.153.0/24 maxlen: 24
94.183.154.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.166.0/24 maxlen: 24
94.183.180.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:97:58:61:04:16:2b:96:82:fe:54:fa:95:ca:eb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 5 08:02:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aab25ff5af72a47b3fb82fbf3033f249954ea07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:99:7f:23:ed:43:b5:0f:33:04:de:8c:6f:
88:62:70:ae:98:13:57:f9:a8:ad:be:9d:9a:15:87:
29:03:93:85:cf:16:0c:0b:f4:7e:8f:3b:20:39:aa:
3d:d7:27:03:00:6d:f7:c7:16:4a:d7:c7:e9:b7:cf:
c4:e1:d4:c1:8a:6f:bc:d5:37:d8:20:31:07:10:af:
a8:8e:30:1e:cb:13:6a:22:21:f6:19:c3:ce:7e:68:
15:a2:e0:23:d9:17:71:77:25:3a:5e:22:49:74:23:
d7:60:0d:3d:83:39:2f:5e:67:1f:61:6b:9d:5e:9f:
88:68:74:a7:fe:eb:38:27:30:f8:9c:9b:33:20:1f:
20:cf:0d:fe:37:8a:21:08:5f:da:9f:bb:02:8c:5f:
71:ba:20:ad:e6:64:43:59:4b:e7:6c:23:f8:4d:06:
6a:a9:51:6a:53:67:a1:c0:8d:12:41:c5:c0:8c:82:
98:f8:ff:ef:3d:18:c2:be:94:d8:58:c2:0b:50:19:
a9:b4:60:52:75:2f:f6:ed:ef:fc:f7:c3:8f:13:d2:
dc:a1:51:8d:00:fc:a1:52:b8:bb:2f:84:06:df:c6:
ab:fb:3a:9e:13:35:ae:51:8d:d0:38:8d:66:3f:44:
83:2c:3f:0a:e4:fb:88:1f:79:a1:69:70:eb:48:43:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:25:FF:5A:F7:2A:47:B3:FB:82:FB:F3:03:3F:24:99:54:EA:07
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Gqsl_1r3Kkez-4L78wM_JJlU6gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.89.0/24
31.58.237.0/24
94.183.150.0/24
94.183.153.0-94.183.154.255
94.183.162.0/24
94.183.166.0/24
94.183.180.0/24
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
07:20:d5:8e:f4:6a:dc:76:37:ed:e1:50:50:b7:81:14:79:a3:
68:8b:e1:d2:d6:1f:7d:a1:71:71:d8:d4:4b:57:3f:d0:9f:0e:
bd:35:32:ba:0d:4c:7d:3f:25:00:06:04:ae:6a:0f:18:c5:62:
43:b3:75:94:c0:2b:43:55:c1:82:34:39:29:36:69:d9:64:1a:
b0:c9:a5:01:c3:2b:b8:43:8a:34:63:a5:1d:d6:f6:ac:1e:65:
8d:1d:33:da:76:bb:f3:32:60:3c:c6:b1:77:c7:ba:58:83:58:
aa:9a:2c:77:c8:fc:3d:5a:4c:0a:17:c3:eb:8e:e3:ac:eb:25:
9c:1e:31:31:66:63:ac:af:64:eb:68:17:e4:ee:8c:e1:f2:1c:
fa:a2:8a:93:55:c5:d2:d2:a5:00:5a:a4:d9:c0:91:59:fd:0f:
f7:a5:26:fe:0f:58:53:3c:7d:96:ed:35:54:76:e4:82:a0:1c:
6a:53:03:20:f7:27:ac:03:a2:34:5b:37:ec:1b:0d:a3:c2:f7:
bc:f3:39:f7:e3:23:27:34:4b:9d:d2:21:df:6c:2d:40:a8:d3:
12:12:ac:59:4c:01:ef:52:77:10:fc:49:87:5d:5a:5c:75:02:
57:d2:be:0f:c0:28:b8:77:47:9b:95:7b:ec:f9:83:82:a8:28:
32:a1:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:58:13 2026 by rpki-client