Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KdbtWjKmFln2ET-yfygwuU4KiF0.roa
File: KdbtWjKmFln2ET-yfygwuU4KiF0.roa (raw, json)
Hash identifier: 6lh/FF1YEDPSBueCqysYxa9RKpSO02uoxljd/IT/azY=
Subject key identifier: 29:D6:ED:5A:32:A6:16:59:F6:11:3F:B2:7F:28:30:B9:4E:0A:88:5D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F9AEE996E42374781EDDD7B673DB6B770
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KdbtWjKmFln2ET-yfygwuU4KiF0.roa
Signing time: Sat 25 Jul 2026 20:19:15 +0000
ROA not before: Sat 25 Jul 2026 20:19:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.202.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9a:ee:99:6e:42:37:47:81:ed:dd:7b:67:3d:b6:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 25 20:19:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29d6ed5a32a61659f6113fb27f2830b94e0a885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:95:01:af:a9:ad:40:7d:aa:85:05:62:aa:
b1:58:82:f8:d5:33:78:5e:c3:61:ec:9d:82:cc:78:
ca:72:5b:31:56:d5:9a:7a:88:eb:82:c6:0a:21:d8:
70:68:0c:b4:29:dc:a6:74:34:c0:ac:d5:b0:5c:bc:
7d:57:75:c7:64:20:ec:e7:fa:cb:76:26:ff:ac:86:
6d:f7:6a:56:f5:07:81:2c:ca:c4:08:26:ba:b8:d4:
60:18:76:16:3b:e3:e2:89:22:ee:48:5d:b9:be:fb:
8a:c2:77:8a:a7:af:26:f0:c3:e5:c6:c4:4f:08:39:
e1:df:e6:60:80:da:05:20:d0:d8:44:cd:e5:1c:99:
35:dc:98:5c:7c:51:52:fb:35:d3:d2:12:a2:0f:51:
d1:63:f6:c2:e2:af:4f:0b:9d:ec:f5:1e:b5:30:45:
de:c2:86:9b:9e:08:a5:1d:4a:9f:3f:52:38:d9:48:
0b:3f:bb:eb:a1:77:57:bd:a9:16:22:74:f6:49:03:
32:56:54:d6:8b:6b:56:1d:fb:76:15:2e:21:6d:16:
50:86:1a:67:af:5a:8f:47:9b:d2:d9:82:7e:38:31:
27:62:d6:06:29:09:4e:1a:32:32:a9:48:b0:95:7b:
ff:69:c1:4f:e8:42:c3:40:4c:a1:ba:b0:26:af:d4:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D6:ED:5A:32:A6:16:59:F6:11:3F:B2:7F:28:30:B9:4E:0A:88:5D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KdbtWjKmFln2ET-yfygwuU4KiF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.191.0/24
31.57.197.0/24
31.57.202.0/24
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
07:31:1a:1c:0e:2d:1b:d2:77:02:70:0b:73:bb:70:d2:fb:d2:
87:11:22:49:7a:62:1b:0c:4a:2b:1a:0a:ff:76:3b:c0:ed:de:
9e:34:2d:ed:a2:94:45:03:88:ff:28:8a:db:39:62:1d:8b:e2:
29:0c:01:65:6f:72:38:55:64:9b:0a:81:66:c7:85:d5:54:d6:
05:9c:39:21:85:f6:cf:ee:2a:20:a0:11:b8:7c:d8:a6:46:ff:
4f:3d:a9:e4:57:30:12:6e:28:b6:8a:b1:b5:6b:65:f9:16:98:
06:39:b0:d7:0e:e9:35:64:e4:60:ac:b3:63:92:94:05:71:a6:
32:28:e5:8e:e8:1c:a7:c5:b7:ef:1f:37:81:83:b6:ff:61:aa:
ce:d8:7f:75:9d:7b:3b:12:2f:2f:4c:d5:78:c0:d5:04:67:31:
57:bd:89:79:ba:d7:13:52:95:1a:3a:e1:96:b6:de:bd:95:f8:
48:47:b0:09:81:28:48:48:8e:d6:54:45:e8:32:fe:6d:12:aa:
1b:ec:aa:c4:57:d7:d1:7f:43:68:a4:e7:6d:12:ab:f1:10:d4:
93:f6:f6:25:92:6b:66:50:81:70:c0:f7:b1:f9:b3:60:3a:9e:
0e:af:23:38:8b:ca:e8:75:42:58:ce:fe:03:52:6a:2e:fe:e2:
ab:f5:13:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:33 2026 by rpki-client