Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OYERRzDtskqkIpV1QFIAm6fRSdw.roa
File: OYERRzDtskqkIpV1QFIAm6fRSdw.roa (raw, json)
Hash identifier: IUhkr40gW0M/z5/Wk8nE9644gq2R5CvzT93qhcgumG0=
Subject key identifier: 39:81:11:47:30:ED:B2:4A:A4:22:95:75:40:52:00:9B:A7:D1:49:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F41EE52D387D93470A6ABEEE04D0B606E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OYERRzDtskqkIpV1QFIAm6fRSdw.roa
Signing time: Wed 08 Jul 2026 13:32:45 +0000
ROA not before: Wed 08 Jul 2026 13:32:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 31.56.140.0/24 maxlen: 24
31.56.147.0/24 maxlen: 24
31.57.78.0/24 maxlen: 24
31.57.79.0/24 maxlen: 24
31.57.80.0/24 maxlen: 24
31.57.81.0/24 maxlen: 24
31.57.85.0/24 maxlen: 24
31.57.86.0/24 maxlen: 24
31.57.87.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.58.10.0/24 maxlen: 24
31.58.16.0/24 maxlen: 24
31.58.19.0/24 maxlen: 24
31.58.20.0/24 maxlen: 24
31.58.21.0/24 maxlen: 24
31.58.26.0/24 maxlen: 24
31.58.29.0/24 maxlen: 24
31.58.30.0/24 maxlen: 24
31.58.167.0/24 maxlen: 24
31.58.212.0/24 maxlen: 24
31.59.13.0/24 maxlen: 24
31.59.18.0/24 maxlen: 24
31.59.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 20:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:ee:52:d3:87:d9:34:70:a6:ab:ee:e0:4d:0b:60:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 8 13:32:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3981114730edb24aa42295754052009ba7d149dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:64:3f:ff:01:55:8e:df:a7:97:44:b8:69:
e9:f2:fe:ce:a6:be:ce:9c:02:2c:94:d5:45:6c:c1:
26:6c:e0:18:75:5d:fb:0c:c3:4c:4e:39:1b:5f:89:
b0:0b:cf:79:85:19:2d:97:da:bb:be:a9:5d:78:46:
ff:38:2e:92:2e:aa:72:30:ff:ab:ec:c8:64:9e:2c:
db:ea:78:4c:71:15:b3:20:a9:4c:40:4f:70:f5:c4:
9d:14:96:f5:bf:6e:61:d1:b4:32:e5:06:af:25:48:
48:68:4b:be:ca:43:74:af:9d:a5:cb:69:81:f1:a2:
bc:03:ed:67:a7:85:c5:d3:e8:ac:6d:91:8c:c8:63:
3c:f4:c3:c7:3f:80:13:97:5c:b8:5b:03:53:58:8e:
16:9d:5a:d2:6a:36:f0:2c:d9:23:df:6d:70:5f:a3:
4a:80:1f:7b:14:fa:30:e9:b8:ce:03:64:c1:a5:67:
2a:77:34:64:f4:ef:46:e8:7c:b9:76:b5:94:33:4c:
47:9f:6e:91:b5:77:ca:d8:30:d2:fd:48:e8:e1:11:
ce:2c:b6:7f:a4:02:b7:4e:0a:66:03:52:b5:09:28:
24:b3:f6:47:c3:7b:73:35:18:b5:d3:e9:5b:34:01:
50:ea:7b:6e:e2:ce:f1:55:68:bc:62:91:fe:ac:99:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:11:47:30:ED:B2:4A:A4:22:95:75:40:52:00:9B:A7:D1:49:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OYERRzDtskqkIpV1QFIAm6fRSdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.140.0/24
31.56.147.0/24
31.57.78.0-31.57.81.255
31.57.85.0-31.57.87.255
31.57.203.0/24
31.58.10.0/24
31.58.16.0/24
31.58.19.0-31.58.21.255
31.58.26.0/24
31.58.29.0-31.58.30.255
31.58.167.0/24
31.58.212.0/24
31.59.13.0/24
31.59.18.0/24
31.59.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:11:fd:f5:1d:23:dc:f2:92:da:04:19:1d:ad:f2:7d:3e:da:
5c:f5:31:4a:57:c2:05:2d:ed:00:16:31:6b:47:ee:17:42:4a:
ea:60:73:2a:1e:93:fb:9c:ec:e8:98:2d:fd:1e:56:16:8a:21:
1e:e9:b2:5d:7f:58:33:8c:b6:cb:c1:37:cb:7a:2c:21:8d:1b:
22:f0:3b:be:56:c7:ca:69:a9:69:12:dc:0d:2d:7e:cd:0b:46:
c1:49:c7:28:83:81:74:24:68:bf:c4:d5:7b:63:f5:cf:71:f0:
d0:36:64:f6:f1:99:09:7a:1d:11:d7:74:14:f3:75:eb:b0:ad:
56:9a:50:68:72:c5:34:49:76:73:2f:3d:7e:fc:4c:ea:16:a6:
68:2f:a7:35:bf:14:37:82:36:ef:1a:75:56:8d:14:1b:3a:fc:
8b:9a:02:c4:55:2c:87:b3:39:01:ac:ac:16:ad:eb:ba:ee:99:
5e:3e:8d:a2:74:36:5c:7d:6c:24:c5:38:46:be:e5:01:83:33:
30:2b:9e:ea:7b:17:aa:eb:db:28:46:2c:4c:88:7f:a3:b5:05:
68:15:f3:c3:31:ae:09:ca:47:32:95:1f:37:97:83:d3:1b:8c:
2f:c3:1a:a9:84:5c:7c:3c:c3:9a:f4:69:6b:02:7c:6c:87:84:
24:e7:95:5f
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAZ9B7lLTh9k0cKar7uBNC2BuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzA4MTMzMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTgxMTE0NzMwZWRiMjRhYTQyMjk1NzU0MDUyMDA5YmE3ZDE0OWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMJkP/8BVY7fp5dEuGnp8v7Opr7O
nAIslNVFbMEmbOAYdV37DMNMTjkbX4mwC895hRktl9q7vqldeEb/OC6SLqpyMP+r
7Mhknizb6nhMcRWzIKlMQE9w9cSdFJb1v25h0bQy5QavJUhIaEu+ykN0r52ly2mB
8aK8A+1np4XF0+isbZGMyGM89MPHP4ATl1y4WwNTWI4WnVrSajbwLNkj321wX6NK
gB97FPow6bjOA2TBpWcqdzRk9O9G6Hy5drWUM0xHn26RtXfK2DDS/Ujo4RHOLLZ/
pAK3TgpmA1K1CSgks/ZHw3tzNRi10+lbNAFQ6ntu4s7xVWi8YpH+rJmacQIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFDmBEUcw7bJKpCKVdUBSAJun0UncMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvT1lFUlJ6RHRza3FrSXBWMVFGSUFtNmZSU2R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAB84
jAMEAB84kzAMAwQBHzlOAwQBHzlQMAwDBAAfOVUDBAMfOVADBAAfOcsDBAAfOgoD
BAAfOhAwDAMEAB86EwMEAR86FAMEAB86GjAMAwQAHzodAwQAHzoeAwQAHzqnAwQA
HzrUAwQAHzsNAwQAHzsSAwQAHzsYMA0GCSqGSIb3DQEBCwUAA4IBAQC2Ef31HSPc
8pLaBBkdrfJ9Ptpc9TFKV8IFLe0AFjFrR+4XQkrqYHMqHpP7nOzomC39HlYWiiEe
6bJdf1gzjLbLwTfLeiwhjRsi8Du+VsfKaalpEtwNLX7NC0bBSccog4F0JGi/xNV7
Y/XPcfDQNmT28ZkJeh0R13QU83XrsK1WmlBocsU0SXZzLz1+/EzqFqZoL6c1vxQ3
gjbvGnVWjRQbOvyLmgLEVSyHszkBrKwWreu67plePo2idDZcfWwkxThGvuUBgzMw
K57qexeq69soRixMiH+jtQVoFfPDMa4JykcylR83l4PTG4wvwxqphFx8PMOa9Glr
Anxsh4Qk55Vf
-----END CERTIFICATE-----
Generated at Thu Jul 9 05:42:55 2026 by rpki-client