Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JsRewrtgcP8VyExgRXa8JopdodQ.roa
File: JsRewrtgcP8VyExgRXa8JopdodQ.roa (raw, json)
Hash identifier: jckqMRM8u0d4JqEaals4ZXjlfnQWaVFX929umOAcH2c=
Subject key identifier: 26:C4:5E:C2:BB:60:70:FF:15:C8:4C:60:45:76:BC:26:8A:5D:A1:D4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0FBDA1E9318DE48C0E4881D605DDE5591
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JsRewrtgcP8VyExgRXa8JopdodQ.roa
Signing time: Fri 02 Oct 2026 09:02:50 +0000
ROA not before: Fri 02 Oct 2026 09:02:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64439
IP address blocks: 31.56.208.0/24 maxlen: 24
31.56.211.0/24 maxlen: 24
31.59.37.0/24 maxlen: 24
31.59.126.0/24 maxlen: 24
94.183.155.0/24 maxlen: 24
94.183.236.0/24 maxlen: 24
217.60.10.0/24 maxlen: 24
217.60.71.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:da:1e:93:18:de:48:c0:e4:88:1d:60:5d:de:55:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 2 09:02:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26c45ec2bb6070ff15c84c604576bc268a5da1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:c5:87:19:bc:ff:21:08:10:ba:80:2a:1f:
40:48:7e:c3:16:c8:2e:52:ec:a0:60:56:ed:6b:71:
9d:8b:fc:db:0c:e3:43:b6:d9:62:fa:e2:c7:82:05:
60:08:fb:3a:8a:27:33:70:fa:9f:78:c5:ca:f6:23:
58:ce:d0:b7:e0:a2:c3:8d:81:2c:6c:95:fa:13:6f:
1b:84:7b:63:4d:55:03:95:96:b8:09:62:e6:0e:12:
27:81:66:5b:49:cf:65:a0:66:c3:c7:11:8e:8a:b7:
71:a4:c7:e2:12:28:97:55:1c:4f:55:54:a5:7c:31:
21:92:29:87:4e:f9:74:8f:88:80:06:92:7c:d7:58:
f6:d8:a7:8e:42:cc:77:ed:a7:2b:3d:62:28:1c:9c:
f9:3c:16:13:87:d5:3f:0e:ea:96:c3:ad:ae:2b:64:
b5:94:2b:41:ed:c2:0c:15:2a:08:7a:4b:87:b4:fc:
29:2b:e0:98:00:27:41:45:00:2b:ac:42:d1:2f:11:
08:bb:3f:23:6f:72:04:ea:65:7c:02:b5:f1:ff:ad:
8f:99:b6:8f:47:a4:26:43:f4:14:79:cd:63:31:4c:
11:82:30:8b:45:80:56:3d:4a:f9:72:c6:93:f2:02:
ef:3b:9b:84:74:18:98:e7:f3:ab:16:24:f6:33:46:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:5E:C2:BB:60:70:FF:15:C8:4C:60:45:76:BC:26:8A:5D:A1:D4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JsRewrtgcP8VyExgRXa8JopdodQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.208.0/24
31.56.211.0/24
31.59.37.0/24
31.59.126.0/24
94.183.155.0/24
94.183.236.0/24
217.60.10.0/24
217.60.71.0/24
217.60.186.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:5c:ff:90:44:36:45:52:36:78:33:56:f7:6f:f1:44:b8:0d:
41:2e:39:8e:21:db:b5:9d:93:79:db:32:91:27:34:8b:e3:f6:
e6:f3:29:58:b6:f6:db:e4:c0:13:3b:0f:e3:b7:e3:51:7e:8d:
ce:a8:99:96:98:55:fa:a5:88:a3:c4:20:8b:9c:cd:67:30:8a:
9f:20:67:d0:f2:f2:d8:06:09:bb:35:94:9d:3c:8e:5d:7a:db:
8d:25:b5:ef:7a:b7:3f:8b:1c:ef:06:c7:2b:5f:57:d8:20:65:
26:3f:21:a5:be:c5:b2:9f:95:03:5c:d2:62:99:28:fb:c6:7b:
5e:cb:32:43:7f:45:bb:51:ad:cc:fc:8e:bc:6c:38:fd:08:38:
39:c5:3e:01:74:4b:80:e3:52:ab:56:03:b0:c4:27:bf:95:9d:
47:79:25:fa:2a:b2:a6:e8:5e:bd:d7:93:1f:41:51:b4:02:fa:
51:37:da:15:fe:21:d0:e4:ca:5f:64:89:61:a0:1e:a8:90:9f:
d6:d7:45:ea:1e:28:8a:d5:cd:a7:e9:64:44:ee:42:0e:e3:a3:
e3:45:0c:33:d9:18:ae:0a:e2:a7:2c:9f:8a:1e:4b:ea:fe:ad:
3e:93:43:4d:28:54:f0:a5:6f:18:4a:5e:75:3e:f2:7b:5b:a2:
65:05:23:a8
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAaD72h6TGN5IwOSIHWBd3lWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDAyMDkwMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmM0NWVjMmJiNjA3MGZmMTVjODRjNjA0NTc2YmMyNjhhNWRhMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMzFhxm8/yEIELqAKh9ASH7DFsgu
UuygYFbta3Gdi/zbDONDttli+uLHggVgCPs6iiczcPqfeMXK9iNYztC34KLDjYEs
bJX6E28bhHtjTVUDlZa4CWLmDhIngWZbSc9loGbDxxGOirdxpMfiEiiXVRxPVVSl
fDEhkimHTvl0j4iABpJ811j22KeOQsx37acrPWIoHJz5PBYTh9U/DuqWw62uK2S1
lCtB7cIMFSoIekuHtPwpK+CYACdBRQArrELRLxEIuz8jb3IE6mV8ArXx/62PmbaP
R6QmQ/QUec1jMUwRgjCLRYBWPUr5csaT8gLvO5uEdBiY5/OrFiT2M0biAQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFCbEXsK7YHD/FchMYEV2vCaKXaHUMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSnNSZXdydGdjUDhWeUV4Z1JYYThKb3Bkb2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQAHzjQAwQA
HzjTAwQAHzslAwQAHzt+AwQAXrebAwQAXrfsAwQA2TwKAwQA2TxHAwQA2Ty6MA8E
AgACMAkDBwAqFG5AAAEwDQYJKoZIhvcNAQELBQADggEBAKNc/5BENkVSNngzVvdv
8US4DUEuOY4h27Wdk3nbMpEnNIvj9ubzKVi29tvkwBM7D+O341F+jc6omZaYVfql
iKPEIIuczWcwip8gZ9Dy8tgGCbs1lJ08jl16240lte96tz+LHO8GxytfV9ggZSY/
IaW+xbKflQNc0mKZKPvGe17LMkN/RbtRrcz8jrxsOP0IODnFPgF0S4DjUqtWA7DE
J7+VnUd5JfoqsqboXr3Xkx9BUbQC+lE32hX+IdDkyl9kiWGgHqiQn9bXReoeKIrV
zafpZETuQg7jo+NFDDPZGK4K4qcsn4oeS+r+rT6TQ00oVPClbxhKXnU+8ntbomUF
I6g=
-----END CERTIFICATE-----
Generated at Fri Oct 2 17:10:37 2026 by rpki-client