Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mrq4i36ed9ZKLKuZ-Ij4KXljU2Y.roa
File: Mrq4i36ed9ZKLKuZ-Ij4KXljU2Y.roa (raw, json)
Hash identifier: bZKynhp8A4Mz5R7ypO15uf0qbszHAXjRx1RTel5mLdI=
Subject key identifier: 32:BA:B8:8B:7E:9E:77:D6:4A:2C:AB:99:F8:88:F8:29:79:63:53:66
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C55BE337EA2C9A6FD730D7EC720EF5800
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mrq4i36ed9ZKLKuZ-Ij4KXljU2Y.roa
Signing time: Fri 13 Feb 2026 06:44:14 +0000
ROA not before: Fri 13 Feb 2026 06:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216396
IP address blocks: 31.56.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Feb 2026 16:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:be:33:7e:a2:c9:a6:fd:73:0d:7e:c7:20:ef:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 13 06:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32bab88b7e9e77d64a2cab99f888f82979635366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:6d:8e:1a:72:60:b8:99:70:c4:d4:15:37:
d3:0c:1e:8c:45:c7:6f:55:c0:9b:62:17:8c:33:c0:
5c:2c:77:20:95:29:42:aa:21:45:8f:6b:63:ee:81:
de:84:16:a8:9b:c0:9a:cd:eb:9d:2e:83:a4:e7:f8:
5a:f6:e5:e5:0c:1e:26:54:b9:2f:5d:15:78:2e:08:
18:31:db:90:ee:d4:2b:d8:89:ef:a7:08:f9:eb:e3:
10:56:ec:b0:c1:f9:ed:e0:1a:b7:e5:2d:98:0c:33:
6e:81:3d:03:0a:1b:d8:7a:dc:da:a2:b6:92:73:30:
99:ae:27:b1:2c:e8:17:a0:17:18:47:46:83:bd:72:
57:81:8d:c0:9c:f4:db:a0:43:86:02:a6:7c:65:5b:
22:6a:54:8f:ed:c0:f3:4a:d5:2e:b7:b7:b8:82:00:
8e:84:5b:17:d8:77:2f:96:61:41:0b:09:42:f3:76:
24:e2:17:8a:f7:21:77:02:b5:99:34:de:bd:2b:6c:
59:2c:cf:39:05:5a:37:9b:9f:84:8d:4d:64:30:24:
8a:75:30:2f:9c:bb:06:fb:72:8b:70:d5:55:13:46:
59:ae:c4:42:40:fc:e8:df:94:a8:af:d6:69:fd:47:
1d:8b:9f:d5:e8:c2:21:04:cd:3d:1c:86:4e:b7:1f:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BA:B8:8B:7E:9E:77:D6:4A:2C:AB:99:F8:88:F8:29:79:63:53:66
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Mrq4i36ed9ZKLKuZ-Ij4KXljU2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9f:39:4b:44:8a:a3:d9:15:7e:31:2c:41:f3:2e:f8:ea:1e:
7a:6d:c0:b3:de:75:1f:41:be:47:e7:b3:ed:0d:4d:cf:1b:0d:
47:0e:27:cc:ed:9b:ea:0c:c2:57:21:e8:99:e7:00:28:43:e9:
82:18:4c:cf:34:95:90:6a:33:70:45:6f:12:e4:c0:58:70:95:
67:b5:8b:36:ee:f4:a7:82:8a:a7:79:30:62:17:8b:0e:df:ec:
01:b1:c2:a3:2a:a4:6c:4f:14:e3:9d:48:68:cc:f7:a3:b6:ca:
b0:7e:06:6a:9d:b4:98:47:4c:21:cd:1a:ae:e6:f2:b2:8d:27:
a2:0f:e6:12:2f:1e:fb:af:10:49:d7:06:fe:9c:b0:bd:26:e6:
13:2f:40:ae:9b:cc:ca:bf:03:71:74:83:09:0e:e8:eb:18:e9:
ee:4a:52:db:9b:42:c4:8d:66:04:83:e0:e6:ba:0a:e3:40:02:
19:c5:1f:ec:cd:52:6a:39:0d:c0:69:84:da:15:c1:f0:72:60:
ad:7e:9a:d6:b8:b3:2e:db:73:fd:e2:0f:fe:1c:ea:de:65:1f:
35:fc:b9:ab:57:f0:5c:47:59:f6:c7:c3:77:6e:4d:30:27:6a:
c4:b0:b2:99:6b:f0:0b:59:f1:e1:21:66:3c:be:a4:bb:88:ac:
0c:0a:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 17 21:26:03 2026 by rpki-client