Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NQ--cYbBJVXfoBvzmCq5V3_TTcI.roa
File: NQ--cYbBJVXfoBvzmCq5V3_TTcI.roa (raw, json)
Hash identifier: ov+UKHVtx8KwfwzRJSqLoRRJDIS/4bV1FChZKhqMVhI=
Subject key identifier: 35:0F:BE:71:86:C1:25:55:DF:A0:1B:F3:98:2A:B9:57:7F:D3:4D:C2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A00F6409B7B2473F29E4F208DFEC5FB5D8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NQ--cYbBJVXfoBvzmCq5V3_TTcI.roa
Signing time: Mon 17 Aug 2026 11:03:29 +0000
ROA not before: Mon 17 Aug 2026 11:03:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:64:09:b7:b2:47:3f:29:e4:f2:08:df:ec:5f:b5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 11:03:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=350fbe7186c12555dfa01bf3982ab9577fd34dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:ab:a3:03:1d:d5:87:53:42:50:57:59:b8:
e1:5f:fd:43:05:ef:47:e1:90:e4:83:14:91:00:56:
83:0f:32:8a:ef:61:c3:49:10:4b:6f:5c:37:12:b5:
e0:d3:2e:cb:7d:c6:30:50:61:50:8c:a8:83:bb:57:
fd:6d:6c:ac:0e:81:31:48:5e:00:ef:ec:cf:05:d1:
14:a3:48:ca:f1:1e:bd:61:cf:59:64:0a:5b:0a:8e:
db:a5:38:c1:92:2e:e9:22:8b:4f:d6:ba:70:28:e5:
93:9a:6b:fd:31:f6:66:12:f2:3e:94:df:2c:c4:40:
1c:8c:3d:d2:7c:19:48:01:54:05:b3:f2:8c:7b:11:
61:89:68:34:15:25:81:c3:f0:53:20:dc:1a:76:65:
88:ce:9b:c1:ff:02:cf:1b:93:03:0e:12:f8:48:07:
31:4c:db:ce:f4:21:c0:c3:06:33:f3:8b:16:cf:65:
8b:91:cd:8b:72:80:8d:fc:45:2e:7e:38:80:4d:73:
18:39:67:ba:a7:75:6b:2f:6b:b6:a9:f4:5a:90:79:
42:b2:dd:9c:84:8e:ce:03:c2:1e:5b:e2:8c:97:1e:
dd:df:97:08:93:e5:83:85:79:bb:c7:1c:a8:66:0d:
28:36:80:5a:c4:91:d2:e8:45:58:96:9a:73:77:4c:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0F:BE:71:86:C1:25:55:DF:A0:1B:F3:98:2A:B9:57:7F:D3:4D:C2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NQ--cYbBJVXfoBvzmCq5V3_TTcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
73:34:dd:f2:c9:e4:01:0f:73:b1:7f:a1:aa:8c:2c:ae:75:21:
48:e8:59:c7:4c:2d:92:19:1f:0b:3f:0a:b8:b0:6b:f4:ac:54:
f7:06:50:f5:74:fe:79:39:b6:4e:a7:b1:81:67:dc:77:2e:8f:
d9:fd:98:c9:cb:8d:f5:2b:00:e3:6d:a0:f4:e0:d3:dc:c0:a6:
1a:71:af:82:8f:56:4e:87:ec:9e:d1:23:18:59:b7:97:25:82:
98:6f:dd:2d:9e:11:da:14:39:13:75:34:4d:fe:da:21:84:5f:
78:81:20:d0:9d:eb:40:fb:4c:77:91:33:f3:b9:6c:e8:08:67:
bd:14:3f:df:63:45:42:26:f6:88:4a:d6:15:3e:fb:c3:5c:13:
28:4d:87:85:72:7e:dc:02:ff:7e:0a:5b:d8:73:48:99:6c:05:
75:3a:2d:10:1d:51:dd:13:72:8b:17:a5:0d:28:8e:24:dd:5f:
0b:1a:13:d6:e1:fc:1c:12:39:2a:b3:a4:5f:bc:b5:9c:45:41:
0a:ef:3e:2c:32:c8:b8:2c:7c:3b:65:15:63:f9:c5:a7:c7:4e:
e7:77:d3:d9:58:9e:fa:d1:8f:fa:24:cd:49:56:a5:93:c1:cb:
13:da:e0:96:2a:b6:47:8c:16:c5:50:45:77:60:fc:98:5d:99:
a4:98:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:02:01 2026 by rpki-client