Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hul3ZxOleBSZOhx421vauz6q00Y.roa
File: Hul3ZxOleBSZOhx421vauz6q00Y.roa (raw, json)
Hash identifier: /MGNRUKUVcSK01nbAjQF1d97OgAJXKsakO51Xma4x5Y=
Subject key identifier: 1E:E9:77:67:13:A5:78:14:99:3A:1C:78:DB:5B:DA:BB:3E:AA:D3:46
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FE029EF395D2018356B49F070973C0752
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hul3ZxOleBSZOhx421vauz6q00Y.roa
Signing time: Sat 08 Aug 2026 06:57:52 +0000
ROA not before: Sat 08 Aug 2026 06:57:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209373
IP address blocks: 31.56.209.0/24 maxlen: 24
217.60.102.0/24 maxlen: 24
217.60.103.0/24 maxlen: 24
217.60.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:29:ef:39:5d:20:18:35:6b:49:f0:70:97:3c:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 06:57:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ee9776713a57814993a1c78db5bdabb3eaad346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:7f:43:16:63:e0:04:35:b5:dc:57:ae:0e:
7e:50:ef:b1:1b:b6:60:77:07:2b:2b:86:8b:38:da:
c8:d2:0b:cc:4a:4e:57:55:af:87:64:8c:c5:39:97:
df:f2:cf:7e:04:07:d7:02:0e:aa:84:29:48:d3:f0:
a9:25:10:81:f3:fd:9f:ff:f6:14:c3:fb:b2:40:d4:
30:28:5b:c5:a7:95:78:fb:b4:a1:a9:ce:6c:c7:23:
15:bc:5a:e2:5f:c8:17:d7:99:f5:14:41:09:6f:ca:
56:c8:b8:32:dd:4c:e5:75:23:76:f1:bb:ef:93:6e:
8f:31:42:76:c6:37:4c:e2:e5:33:66:98:84:6d:de:
df:53:a5:f5:6d:9f:84:ec:04:78:b5:79:b9:6f:07:
fe:ee:e9:1e:ab:d0:46:dc:40:9f:72:1f:9c:0b:8f:
e0:a8:2f:76:18:d8:ec:b1:c6:69:c1:82:44:58:02:
a7:e7:a9:72:db:d8:3f:e0:a4:02:ec:c8:c4:e7:ef:
54:41:76:b8:37:39:26:72:82:a1:43:ee:c1:11:3c:
03:30:b3:07:73:76:a2:f7:86:28:6f:f6:ff:ff:3b:
70:a6:ee:f8:ba:38:a4:3b:68:5e:32:7c:e2:e1:73:
70:dc:b5:5c:6a:78:16:26:47:21:c7:54:63:8e:0a:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:77:67:13:A5:78:14:99:3A:1C:78:DB:5B:DA:BB:3E:AA:D3:46
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hul3ZxOleBSZOhx421vauz6q00Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.209.0/24
217.60.102.0/23
217.60.195.0/24
Signature Algorithm: sha256WithRSAEncryption
91:48:11:81:51:ce:bf:ac:b0:9f:b8:71:95:cd:34:b0:0b:8a:
a7:38:b6:94:b1:ab:15:17:84:29:91:1a:7a:a0:54:bb:67:d0:
a6:2a:04:e5:90:9e:ae:0b:28:b1:34:1c:68:b7:11:6b:84:d1:
12:78:5c:f1:79:29:19:51:cd:16:6c:dc:23:4b:3b:3e:56:c5:
f9:99:c6:47:c2:e7:ca:69:01:19:98:8e:a3:ed:ab:ee:d3:53:
14:39:c8:f8:27:e5:61:9f:6e:3f:15:b8:3c:cd:78:43:e2:bd:
2f:75:51:9e:8a:94:6c:1a:49:e8:01:cc:b2:e5:56:e7:14:0f:
28:7f:56:d4:0b:61:bd:a3:78:77:4b:e3:8d:de:b3:0e:d0:79:
dd:e2:5b:63:4c:67:1a:19:2d:00:0a:af:98:7a:16:7e:8c:e1:
50:cf:7b:28:7c:1e:a1:f9:08:59:3d:df:7e:79:a4:69:83:a9:
1a:da:88:23:31:e3:4e:38:20:7e:df:df:b5:92:bf:db:ec:78:
69:6e:b3:42:d7:0f:85:94:ec:4f:52:7f:84:19:1e:64:01:94:
da:5a:a5:d8:d7:6d:15:22:20:5f:0a:38:96:bb:2f:d4:0a:07:
14:7e:0e:2d:1f:c9:78:38:e4:05:eb:7b:f2:34:2c:e0:c6:c1:
94:df:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:10 2026 by rpki-client