Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OA7VwYQok595G4yFO6khnxbHrmU.roa
File: OA7VwYQok595G4yFO6khnxbHrmU.roa (raw, json)
Hash identifier: y1lfRYatUS+DZMF+f2Mye0ItYn8zXN9ttcUF0RKv73E=
Subject key identifier: 38:0E:D5:C1:84:28:93:9F:79:1B:8C:85:3B:A9:21:9F:16:C7:AE:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D1B036F45A8AA0CEEB45B59E26FB4295E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OA7VwYQok595G4yFO6khnxbHrmU.roa
Signing time: Mon 23 Mar 2026 14:05:03 +0000
ROA not before: Mon 23 Mar 2026 14:05:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64439
IP address blocks: 31.56.208.0/24 maxlen: 24
31.56.211.0/24 maxlen: 24
94.183.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:03:6f:45:a8:aa:0c:ee:b4:5b:59:e2:6f:b4:29:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 23 14:05:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=380ed5c18428939f791b8c853ba9219f16c7ae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:d3:c1:55:2f:2e:4b:47:53:d0:0f:ea:22:
d1:d7:db:0e:98:e8:02:c2:08:56:c3:b5:30:94:41:
57:fb:b2:44:bf:07:6d:34:39:dd:12:26:21:eb:36:
84:c0:7a:6d:e9:86:74:d0:28:58:ac:9b:45:11:46:
3e:d1:da:3b:d8:50:69:3b:e7:97:33:ac:9a:eb:22:
e9:a3:02:cf:43:6d:75:e7:52:a8:f5:8c:6f:a6:c7:
c2:84:1c:6c:6d:a2:41:00:25:9f:eb:d6:65:70:48:
fc:03:08:1b:be:24:72:8f:62:92:c4:75:53:2e:dc:
e5:0b:21:09:f2:e7:cc:bf:ec:9a:9a:60:28:84:e0:
9a:29:22:0a:e7:07:f8:fa:37:8a:e2:5f:cc:a4:79:
0b:3e:f8:dd:f7:99:b5:85:39:ba:81:f3:5c:28:e1:
a3:ff:0e:63:91:84:10:7f:82:1d:e6:03:38:e4:97:
95:5e:6c:8e:5a:1c:5d:5a:cf:eb:db:f0:04:f1:34:
46:87:6b:fb:71:88:52:e4:a3:68:6d:76:85:73:0c:
ff:f3:5a:96:70:20:3c:30:e5:c0:ad:17:bc:9f:f5:
7d:14:41:e7:84:92:0b:56:6c:35:ba:67:56:80:d0:
c8:4b:fb:2d:b9:ff:a1:96:d1:a9:b0:af:fd:aa:73:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0E:D5:C1:84:28:93:9F:79:1B:8C:85:3B:A9:21:9F:16:C7:AE:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OA7VwYQok595G4yFO6khnxbHrmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.208.0/24
31.56.211.0/24
94.183.155.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bc:fa:ec:b1:ed:26:29:9f:2d:16:aa:fa:00:72:17:d7:fa:
c2:21:b3:d7:99:6c:71:60:bb:b7:56:2c:38:aa:6b:ec:72:18:
03:5e:d2:f0:bc:f6:19:31:c6:ea:4a:c1:f0:6d:e8:55:17:a8:
2d:cf:b3:83:99:dc:70:b9:93:ce:2d:09:23:20:70:20:84:d7:
a3:d1:9e:76:2a:e0:7f:f4:04:23:6c:56:27:9f:5a:8e:84:bc:
bd:0c:80:9f:ad:fd:33:17:32:18:06:02:e4:6e:e4:08:a1:fd:
a6:55:75:6a:dc:74:5c:5f:78:75:ae:b8:8b:22:89:56:cd:f7:
36:1e:0b:e9:55:77:73:ca:07:bc:3f:2e:db:f3:3d:80:f2:42:
8e:b3:03:2b:9e:76:59:9f:f2:a4:cd:d1:87:5f:36:8e:2a:1c:
80:36:a8:22:7c:51:d0:2c:7d:8b:8a:da:38:d1:03:e0:e3:70:
8d:aa:d8:f2:30:67:68:73:40:28:ec:0a:33:2f:88:39:e2:e8:
ee:13:8f:19:e3:86:08:56:aa:6f:23:de:98:d7:27:68:bd:ef:
52:6e:2d:fb:be:4e:46:a3:e6:d9:e4:18:81:44:22:96:ce:73:
79:7c:80:d1:16:9b:cc:67:a4:51:5f:8a:2a:ad:6e:b2:04:70:
df:16:dc:f9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ0bA29FqKoM7rRbWeJvtCleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMzIzMTQwNTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODBlZDVjMTg0Mjg5MzlmNzkxYjhjODUzYmE5MjE5ZjE2YzdhZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pvTwVUvLktHU9AP6iLR19sOmOgC
wghWw7UwlEFX+7JEvwdtNDndEiYh6zaEwHpt6YZ00ChYrJtFEUY+0do72FBpO+eX
M6ya6yLpowLPQ21151Ko9YxvpsfChBxsbaJBACWf69ZlcEj8AwgbviRyj2KSxHVT
LtzlCyEJ8ufMv+yammAohOCaKSIK5wf4+jeK4l/MpHkLPvjd95m1hTm6gfNcKOGj
/w5jkYQQf4Id5gM45JeVXmyOWhxdWs/r2/AE8TRGh2v7cYhS5KNobXaFcwz/81qW
cCA8MOXArRe8n/V9FEHnhJILVmw1umdWgNDIS/stuf+hltGpsK/9qnMKKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDgO1cGEKJOfeRuMhTupIZ8Wx65lMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvT0E3VndZUW9rNTk1RzR5Rk82a2hueGJIcm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjQAwQA
HzjTAwQAXrebMA0GCSqGSIb3DQEBCwUAA4IBAQBJvPrsse0mKZ8tFqr6AHIX1/rC
IbPXmWxxYLu3Viw4qmvschgDXtLwvPYZMcbqSsHwbehVF6gtz7ODmdxwuZPOLQkj
IHAghNej0Z52KuB/9AQjbFYnn1qOhLy9DICfrf0zFzIYBgLkbuQIof2mVXVq3HRc
X3h1rriLIolWzfc2HgvpVXdzyge8Py7b8z2A8kKOswMrnnZZn/KkzdGHXzaOKhyA
NqgifFHQLH2Lito40QPg43CNqtjyMGdoc0Ao7AozL4g54ujuE48Z44YIVqpvI96Y
1ydove9Sbi37vk5Go+bZ5BiBRCKWznN5fIDRFpvMZ6RRX4oqrW6yBHDfFtz5
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:36:17 2026 by rpki-client