Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iwpqno1BuNgLDiUzif-MPX_9ivY.roa
File: Iwpqno1BuNgLDiUzif-MPX_9ivY.roa (raw, json)
Hash identifier: Kvn1AJaTYzfo8+7QpnjbCynCLkMujQCNFn4Yctp3JL8=
Subject key identifier: 23:0A:6A:9E:8D:41:B8:D8:0B:0E:25:33:89:FF:8C:3D:7F:FD:8A:F6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A00C2ECD4D8794CD58E3BB4191624204DA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iwpqno1BuNgLDiUzif-MPX_9ivY.roa
Signing time: Sun 16 Aug 2026 20:06:28 +0000
ROA not before: Sun 16 Aug 2026 20:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197574
IP address blocks: 31.56.186.0/24 maxlen: 24
31.56.187.0/24 maxlen: 24
31.56.189.0/24 maxlen: 24
31.59.143.0/24 maxlen: 24
31.59.150.0/24 maxlen: 24
217.60.32.0/24 maxlen: 24
217.60.33.0/24 maxlen: 24
217.60.34.0/24 maxlen: 24
217.60.35.0/24 maxlen: 24
217.60.182.0/24 maxlen: 24
217.60.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0c:2e:cd:4d:87:94:cd:58:e3:bb:41:91:62:42:04:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 16 20:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=230a6a9e8d41b8d80b0e253389ff8c3d7ffd8af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:16:10:81:e3:62:3f:f0:af:69:60:99:02:
dd:b2:d5:71:20:17:77:13:c2:ea:5e:4f:e1:37:b7:
f4:d1:f6:23:e6:cd:74:8f:d0:01:b1:8b:da:85:8a:
39:b2:12:1c:94:56:98:3d:9f:10:80:53:38:ba:8c:
43:92:8b:2d:6c:ee:c7:fa:68:24:86:42:d4:d0:18:
5b:10:a9:74:f4:c5:3b:cb:0c:de:4a:23:68:86:b0:
33:77:3d:c9:cc:93:a4:5b:3d:a6:20:f1:f7:7d:0a:
e9:fe:4f:f6:85:2e:77:5f:d7:7c:0b:5a:f4:70:80:
ac:91:56:62:4a:05:26:0b:63:6e:90:72:79:67:77:
63:d0:52:08:d4:73:ea:7e:08:de:92:c4:58:dc:e5:
5c:14:38:82:75:c5:7f:01:5f:e7:3c:ef:5b:96:ec:
0a:6b:77:96:d2:07:ac:0e:d1:93:c9:9e:9c:c0:dd:
f6:a9:f0:0e:c7:11:83:83:78:c2:56:66:99:93:4d:
df:e3:0b:14:d5:28:37:af:52:d6:40:40:5e:47:71:
01:b2:1b:23:61:89:6f:0d:e8:82:4e:f9:9f:d7:7b:
51:a2:43:64:e1:20:1f:dd:be:6f:de:6e:69:06:32:
20:df:27:75:e2:5f:cd:94:8f:f2:1c:7b:18:25:6b:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0A:6A:9E:8D:41:B8:D8:0B:0E:25:33:89:FF:8C:3D:7F:FD:8A:F6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Iwpqno1BuNgLDiUzif-MPX_9ivY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.186.0/23
31.56.189.0/24
31.59.143.0/24
31.59.150.0/24
217.60.32.0/22
217.60.182.0/23
Signature Algorithm: sha256WithRSAEncryption
04:6f:69:d3:42:ef:b6:a0:a5:d0:dc:e0:2e:5d:ea:82:27:0f:
5a:44:fa:f5:2a:ce:8e:5f:cf:ca:49:1f:c6:b6:44:cf:2b:03:
02:27:4d:91:87:df:26:80:66:a8:16:7c:ea:97:2e:5f:4f:1e:
0a:f6:1e:5d:af:b6:c6:ef:2a:cb:6b:6b:1e:1c:88:c2:c8:54:
38:5e:a2:97:ea:08:1a:87:c6:91:95:73:0b:74:90:61:28:b1:
57:7c:24:d4:c0:94:c1:e4:c8:89:49:f0:92:6a:5d:20:f7:18:
06:0d:43:ce:a1:b4:56:5a:67:8b:ea:9e:e3:1c:d1:8c:0b:ae:
9c:86:71:fc:25:aa:74:fe:2b:f1:3d:56:5e:2b:8b:71:ab:12:
86:2c:cd:0b:cd:4f:33:10:ba:1b:08:cc:35:82:1c:62:ee:a6:
12:1e:85:e0:82:3b:71:3a:98:7d:67:4a:63:a3:51:69:6e:8d:
26:87:74:90:cd:5a:69:2c:7f:2d:e3:23:51:f4:bb:9d:cb:e7:
da:c0:a8:61:11:9b:02:15:81:43:d1:9a:00:e5:b3:a7:3f:2a:
65:24:e9:2a:11:08:28:65:a5:5f:91:f3:ea:10:ab:bb:34:86:
b0:7a:ce:83:43:20:9d:63:e1:34:3a:8e:60:c5:de:7f:62:0f:
12:67:d2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:03 2026 by rpki-client