Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LQRsW5jsoqZGpglB4avNYuREMO4.roa
File: LQRsW5jsoqZGpglB4avNYuREMO4.roa (raw, json)
Hash identifier: TeQ3vgZ/lzLesdx6gGanIFsHtSEZ/IruiYAugYzS3Nw=
Subject key identifier: 2D:04:6C:5B:98:EC:A2:A6:46:A6:09:41:E1:AB:CD:62:E4:44:30:EE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A15EC3DD3AFB0B199250E2885024AE54D3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LQRsW5jsoqZGpglB4avNYuREMO4.roa
Signing time: Wed 21 Oct 2026 14:00:56 +0000
ROA not before: Wed 21 Oct 2026 14:00:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219506
IP address blocks: 31.57.210.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.59.188.0/24 maxlen: 24
31.59.190.0/24 maxlen: 24
31.59.191.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
94.183.167.0/24 maxlen: 24
94.183.206.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:c3:dd:3a:fb:0b:19:92:50:e2:88:50:24:ae:54:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 21 14:00:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d046c5b98eca2a646a60941e1abcd62e44430ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:06:9c:c7:be:a6:a2:c3:85:6a:36:77:c0:
51:fb:e6:03:5e:fa:3e:5d:14:ad:eb:4c:ce:9c:7b:
77:62:f9:ac:fb:48:72:22:ed:87:63:f3:3b:f8:3d:
21:af:49:94:63:b2:5e:8a:fb:93:5f:21:75:26:13:
54:24:58:9a:f1:03:39:60:c7:be:d1:54:32:90:20:
9f:a8:ad:0b:cb:e0:b4:88:46:1e:bf:a9:2b:92:d8:
39:13:11:ee:b7:23:a7:3d:d7:6c:ba:db:f6:d5:8b:
1d:6e:6c:1e:4b:e7:e3:e0:86:fe:97:6e:f0:a7:aa:
7f:34:71:39:51:ea:55:c8:34:6e:b8:64:71:0e:cb:
03:77:5b:7d:e7:02:71:2b:f0:b4:aa:17:55:91:02:
e5:8c:a7:25:db:50:44:f8:57:72:67:24:fb:e4:a9:
23:a4:f0:aa:08:c2:49:96:47:af:f3:a0:e1:63:07:
86:eb:04:4d:01:f8:bb:36:fe:b8:35:73:44:95:e2:
38:63:4e:e6:15:ad:c1:74:4d:3e:e9:e3:4c:63:97:
7b:36:75:92:9e:f3:37:ed:e4:7a:b1:dd:e6:34:a8:
1f:82:9e:40:ce:ef:eb:2a:7c:19:b3:27:e7:c2:71:
aa:e7:eb:f9:77:89:7b:74:6c:63:bd:54:64:c6:01:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:6C:5B:98:EC:A2:A6:46:A6:09:41:E1:AB:CD:62:E4:44:30:EE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LQRsW5jsoqZGpglB4avNYuREMO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.210.0/24
31.58.241.0/24
31.59.188.0/24
31.59.190.0/23
31.59.209.0-31.59.210.255
31.59.222.0/24
94.183.164.0/24
94.183.167.0/24
94.183.206.0/24
94.183.226.0/24
217.60.22.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9f:cf:01:f2:07:8f:0c:76:dc:51:57:10:09:b7:26:f8:fe:
d4:8c:78:60:a6:00:0d:2c:0b:ee:9e:f0:ef:0f:dd:bd:9a:01:
1b:f7:f9:df:73:8d:7e:92:18:4f:3c:1d:fe:22:4e:d3:70:1b:
75:79:39:82:81:ab:1f:dd:f3:5e:cc:1d:b8:27:27:8e:98:1b:
a5:c2:e3:a5:b4:71:b3:42:0e:17:85:d7:6b:88:44:b2:41:fa:
40:cc:2e:8c:57:e7:a4:9b:b3:5b:65:c2:59:c2:8b:fb:1a:2d:
ae:3e:67:16:e4:5a:93:1d:7b:f0:09:64:bb:d3:82:6b:08:a1:
89:67:dd:8e:bd:ab:cf:40:0a:41:1c:54:41:1e:d1:02:9a:66:
fc:f5:03:b4:21:1f:13:8a:89:ca:0d:32:58:14:cd:fa:04:6e:
02:37:f0:50:82:2c:44:87:a8:df:13:1a:3b:17:72:91:d6:d2:
ca:e1:40:c5:b8:c8:c0:8b:32:74:38:7a:bf:75:87:23:e2:d9:
c5:94:6e:74:91:06:00:f2:71:2f:73:dc:c3:6a:e8:35:5a:f4:
f5:c6:db:2e:88:a6:e0:27:12:2e:5a:be:6a:31:05:9c:98:78:
ce:4e:0e:64:ba:1f:c6:53:fd:cd:1e:c7:2d:89:1a:3f:b6:fb:
2d:5c:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:06 2026 by rpki-client