Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Npmj8sJIKZQDZzSuKMU1_qdMVP0.roa
File: Npmj8sJIKZQDZzSuKMU1_qdMVP0.roa (raw, json)
Hash identifier: JDdGTI3/YZyRr6FwShAL6favQ43aV0LoOMvRoXyIj9c=
Subject key identifier: 36:99:A3:F2:C2:48:29:94:03:67:34:AE:28:C5:35:FE:A7:4C:54:FD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A126E26D912E6BF13B7BA66F3050EA9979
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Npmj8sJIKZQDZzSuKMU1_qdMVP0.roa
Signing time: Sat 10 Oct 2026 17:35:35 +0000
ROA not before: Sat 10 Oct 2026 17:35:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402931
IP address blocks: 31.58.178.0/24 maxlen: 24
31.58.217.0/24 maxlen: 24
31.58.219.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.64.0/24 maxlen: 24
31.59.65.0/24 maxlen: 24
31.59.66.0/24 maxlen: 24
31.59.67.0/24 maxlen: 24
31.59.80.0/24 maxlen: 24
31.59.81.0/24 maxlen: 24
31.59.82.0/24 maxlen: 24
31.59.83.0/24 maxlen: 24
31.59.84.0/24 maxlen: 24
31.59.85.0/24 maxlen: 24
31.59.86.0/24 maxlen: 24
31.59.87.0/24 maxlen: 24
31.59.204.0/24 maxlen: 24
31.59.205.0/24 maxlen: 24
31.59.206.0/24 maxlen: 24
31.59.207.0/24 maxlen: 24
217.60.52.0/24 maxlen: 24
217.60.53.0/24 maxlen: 24
217.60.54.0/24 maxlen: 24
217.60.55.0/24 maxlen: 24
217.60.144.0/24 maxlen: 24
217.60.145.0/24 maxlen: 24
217.60.146.0/24 maxlen: 24
217.60.148.0/24 maxlen: 24
217.60.149.0/24 maxlen: 24
217.60.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:e2:6d:91:2e:6b:f1:3b:7b:a6:6f:30:50:ea:99:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 10 17:35:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3699a3f2c2482994036734ae28c535fea74c54fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:8d:46:15:55:33:bc:a2:4b:6e:28:46:f8:
94:96:d4:4b:81:32:1f:c5:3f:46:7b:1b:08:72:12:
86:92:36:4e:a2:8e:02:4f:0c:58:6a:96:81:72:17:
a1:85:f2:fc:e4:39:88:de:a1:4a:7d:f5:5a:4b:04:
3f:44:fe:25:e6:cb:21:ac:a6:e5:ed:a8:36:f6:7c:
09:0b:a9:5f:65:b9:68:c6:65:1b:ce:f7:6c:f5:61:
9d:cb:f3:dc:c7:f6:34:38:e1:ba:bc:07:b2:22:59:
8d:2d:d3:4c:82:d0:11:40:a8:45:86:74:34:2f:cf:
88:d3:0e:d7:ec:cc:85:45:71:55:95:cb:2e:8b:2f:
1b:ab:07:93:28:24:c1:b1:f6:89:ce:82:83:29:ff:
06:ae:ff:80:23:97:28:60:3a:d5:c2:ef:73:e0:e1:
ac:af:40:7f:8b:c1:13:5b:37:67:3c:48:65:69:10:
d4:37:f2:ae:15:e6:8d:d5:0a:f1:d0:4e:2d:94:b7:
0f:40:d2:a1:4a:b1:02:c4:22:e9:19:54:f7:e6:27:
3e:13:42:88:57:86:23:bb:71:64:57:6d:c7:63:b4:
2e:26:a2:ae:23:c4:47:56:14:a1:5c:28:f8:1b:1b:
14:56:51:aa:d8:a8:ad:3e:fd:76:6c:f9:a4:9e:5b:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:A3:F2:C2:48:29:94:03:67:34:AE:28:C5:35:FE:A7:4C:54:FD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Npmj8sJIKZQDZzSuKMU1_qdMVP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.178.0/24
31.58.217.0/24
31.58.219.0/24
31.59.64.0/22
31.59.80.0/21
31.59.204.0/22
217.60.52.0/22
217.60.144.0-217.60.146.255
217.60.148.0-217.60.150.255
Signature Algorithm: sha256WithRSAEncryption
5d:8f:e3:c2:42:f1:10:f2:b1:80:f3:33:b6:d7:2a:ed:b9:0f:
b0:03:f5:41:d0:db:ee:6e:36:24:bb:05:07:ec:66:31:d9:9d:
04:b3:6e:73:87:3a:d3:cc:88:fb:11:38:6b:db:58:b3:fd:c1:
75:be:32:40:7a:73:c4:f9:1e:ff:fd:42:ee:b0:b3:42:56:d8:
06:8a:61:bc:84:91:92:ce:f6:22:81:ad:2a:0f:ae:b4:b7:0c:
a4:a7:2d:52:b0:b2:7c:d4:a0:8c:9a:24:ea:1e:d1:86:fa:29:
90:e5:e8:05:42:27:88:ad:7f:0b:d6:1b:81:9a:cb:e4:47:d0:
f6:f6:ea:22:25:22:7c:55:1f:c6:06:d9:2e:29:f2:d4:22:4b:
52:b9:df:92:a2:bb:0e:80:3c:3e:cd:45:66:d4:70:fa:ed:c3:
e0:44:7c:c8:43:d9:4e:37:09:13:01:35:e7:e3:b0:a9:06:30:
44:ae:3e:5d:b6:6c:fa:8e:62:12:76:41:50:3b:c9:35:0f:24:
28:d1:5c:ee:8c:6a:ef:7f:d6:2b:6c:13:6f:8d:db:26:e7:81:
fc:82:eb:0a:ae:4f:60:54:0c:5f:96:ec:da:59:f0:44:99:ae:
ce:90:de:49:38:18:6d:55:ef:fb:f3:66:29:f5:89:08:09:8f:
12:54:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:22 2026 by rpki-client