Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LEruNXjln3ZyvWMWOo5v9cmz5_4.roa
File: LEruNXjln3ZyvWMWOo5v9cmz5_4.roa (raw, json)
Hash identifier: GJjcLzOJ9ZdegA9nmyQUsOQ0eS5bowh/bLKS4gI8lwg=
Subject key identifier: 2C:4A:EE:35:78:E5:9F:76:72:BD:63:16:3A:8E:6F:F5:C9:B3:E7:FE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DC4D10E578F9CA60C8C6460590AD0C6CB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LEruNXjln3ZyvWMWOo5v9cmz5_4.roa
Signing time: Sat 25 Apr 2026 13:25:28 +0000
ROA not before: Sat 25 Apr 2026 13:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.219.0/24 maxlen: 24
31.57.143.0/24 maxlen: 24
31.57.161.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
217.60.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 08:59:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c4:d1:0e:57:8f:9c:a6:0c:8c:64:60:59:0a:d0:c6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 25 13:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c4aee3578e59f7672bd63163a8e6ff5c9b3e7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:d2:07:de:35:5a:61:94:e8:3f:d4:6e:e6:
5b:2b:bc:3d:8d:eb:bc:9d:13:cb:b0:4b:e1:ea:56:
d9:48:2b:3a:d8:96:38:03:15:f6:5d:c2:87:cc:b1:
0f:bb:36:c6:44:8f:6c:4b:2e:bd:09:03:02:4d:bd:
44:3b:15:c8:c1:52:a7:09:ec:d7:45:0a:63:ed:4f:
ee:8d:10:68:db:38:b1:ea:36:a5:d5:64:61:98:e4:
ed:1d:dc:ac:ad:ff:a0:af:2b:d1:47:c6:b0:e9:6e:
28:0b:68:80:fa:a8:04:c6:63:79:bf:04:b1:2c:bf:
df:86:46:e1:1a:d4:de:bf:ba:a7:dc:51:da:d3:f7:
ec:d5:6d:b3:31:74:d4:40:5f:b6:cb:83:aa:68:ba:
ff:dd:39:a1:3c:c8:a8:8e:d9:8b:44:a6:c5:c0:83:
e3:05:94:53:3f:5c:58:96:27:0c:e8:fc:ef:e3:53:
69:e0:a4:b0:77:8e:fd:ff:71:26:d4:b6:d8:ec:a5:
c1:0a:27:1c:cc:46:42:a8:f8:38:98:05:e5:5d:9c:
d4:12:8b:43:e0:b1:12:1f:f9:fb:52:94:ea:a4:5a:
57:73:35:ed:19:14:3b:6c:c1:6a:b0:44:78:5f:5e:
a2:b0:2a:5d:b4:d9:f4:9e:ff:4c:b9:bc:81:bf:21:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:EE:35:78:E5:9F:76:72:BD:63:16:3A:8E:6F:F5:C9:B3:E7:FE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LEruNXjln3ZyvWMWOo5v9cmz5_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.219.0/24
31.57.143.0/24
31.57.161.0/24
31.57.199.0/24
31.59.68.0/24
217.60.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:75:94:ef:29:bf:13:36:57:84:3e:60:07:a9:fa:4d:39:ee:
ea:1e:69:a6:3b:3d:60:51:ae:99:7d:a8:9c:c6:1d:e9:73:18:
c0:34:83:57:91:ce:31:97:50:b5:b4:62:60:9d:60:d3:d3:9e:
34:01:44:33:0c:94:ac:64:eb:91:11:52:e1:5c:ea:21:b5:6f:
70:7c:11:42:a5:d8:f1:ec:6d:54:3a:50:d3:87:d0:72:37:30:
8c:bc:cf:88:e6:84:52:86:0b:75:53:b8:cc:59:0c:ab:a1:98:
2e:47:9d:24:07:23:99:10:69:26:34:25:45:76:52:ea:67:3c:
a6:85:34:89:99:d2:85:d9:e8:f4:e8:aa:11:1e:33:0c:b5:1f:
a9:86:cc:76:3c:00:82:c0:a3:20:5e:e9:6f:1d:31:03:87:dd:
26:05:ae:c3:3a:6b:a9:c1:2d:ce:b7:7f:cd:e4:9d:32:ac:7d:
7a:f1:1d:ef:ee:fa:e1:68:07:55:9b:84:c8:6e:78:97:13:37:
41:b7:8e:b2:e6:57:99:92:f1:6e:0e:df:4c:79:33:4b:d5:d8:
3d:b3:df:43:19:76:d7:a4:70:ce:11:97:76:2d:24:ae:ec:92:
fb:44:a3:ec:1a:fd:d5:e9:ff:43:47:c8:46:2b:8b:07:b6:ed:
9c:58:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:25:43 2026 by rpki-client