Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QNaUkeDA4Ts0p-SBzTzs2byze6k.roa
File: QNaUkeDA4Ts0p-SBzTzs2byze6k.roa (raw, json)
Hash identifier: bfC4VpxTl61rva5vFgS7QQRaSC2SXshioB+4KM2fT9Q=
Subject key identifier: 40:D6:94:91:E0:C0:E1:3B:34:A7:E4:81:CD:3C:EC:D9:BC:B3:7B:A9
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A070B76593CB361D346765015C7D5F2148
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QNaUkeDA4Ts0p-SBzTzs2byze6k.roa
Signing time: Sat 05 Sep 2026 08:37:42 +0000
ROA not before: Sat 05 Sep 2026 08:37:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.56.16.0/22 maxlen: 24
31.56.188.0/24 maxlen: 24
31.58.92.0/24 maxlen: 24
31.58.93.0/24 maxlen: 24
31.58.176.0/24 maxlen: 24
31.58.177.0/24 maxlen: 24
31.58.218.0/23 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.124.0/24 maxlen: 24
31.59.125.0/24 maxlen: 24
31.59.126.0/24 maxlen: 24
31.59.127.0/24 maxlen: 24
31.59.142.0/24 maxlen: 24
31.59.149.0/24 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.216.0/22 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/23 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.200.0/24 maxlen: 24
94.183.201.0/24 maxlen: 24
94.183.202.0/24 maxlen: 24
94.183.204.0/24 maxlen: 24
94.183.205.0/24 maxlen: 24
94.183.217.0/24 maxlen: 24
94.183.219.0/24 maxlen: 24
94.183.220.0/22 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.221.0/24 maxlen: 24
94.183.222.0/24 maxlen: 24
94.183.223.0/24 maxlen: 24
94.183.228.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
94.183.236.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
94.183.253.0/24 maxlen: 24
94.183.255.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.16.0/22 maxlen: 24
217.60.16.0/24 maxlen: 24
217.60.17.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.21.0/24 maxlen: 24
217.60.23.0/24 maxlen: 24
217.60.64.0/24 maxlen: 24
217.60.65.0/24 maxlen: 24
217.60.66.0/24 maxlen: 24
217.60.68.0/24 maxlen: 24
217.60.69.0/24 maxlen: 24
217.60.74.0/24 maxlen: 24
217.60.75.0/24 maxlen: 24
217.60.80.0/24 maxlen: 24
217.60.81.0/24 maxlen: 24
217.60.82.0/24 maxlen: 24
217.60.83.0/24 maxlen: 24
217.60.176.0/24 maxlen: 24
217.60.181.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:b7:65:93:cb:36:1d:34:67:65:01:5c:7d:5f:21:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 5 08:37:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40d69491e0c0e13b34a7e481cd3cecd9bcb37ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:35:db:f2:36:81:26:c0:e8:22:e8:e6:61:
9e:e1:7a:36:d3:42:0e:17:b5:08:92:4f:3c:7b:e3:
16:c3:cd:e7:11:65:02:d9:df:d2:a2:e1:be:55:a0:
b1:f3:cd:1f:80:55:e0:bb:cf:84:c9:9a:8e:f5:28:
a3:60:6e:3d:6e:1b:3e:97:15:4d:c8:8b:d0:c8:03:
5f:6d:91:b0:40:5b:19:76:31:78:5e:0b:7f:f0:2d:
7f:10:ee:12:31:52:35:bb:55:13:78:19:b2:a2:f5:
9a:1a:78:0e:88:b1:0d:1b:ef:23:52:f0:99:2f:be:
75:3f:6c:fc:89:d5:5d:ed:71:a5:3d:29:67:08:bc:
f3:a0:7e:c9:a5:c8:19:6b:0e:58:10:5c:b6:30:34:
4b:f4:87:a1:51:2c:aa:d6:27:53:59:79:39:8d:27:
7f:cd:ad:ae:bd:ce:a7:ff:99:05:21:d5:b4:28:01:
21:c7:9d:f3:f9:5e:86:b2:ba:b1:e6:f8:11:05:80:
37:47:72:27:f2:9f:4b:27:ef:dc:d3:38:8a:e5:f6:
05:87:54:4c:a6:66:90:fc:30:44:6f:70:42:63:2e:
fa:27:64:6f:2b:cb:bd:02:89:43:2b:71:26:97:c9:
6b:4f:0f:e7:08:5e:0b:b2:57:e1:20:18:55:5c:53:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D6:94:91:E0:C0:E1:3B:34:A7:E4:81:CD:3C:EC:D9:BC:B3:7B:A9
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QNaUkeDA4Ts0p-SBzTzs2byze6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.56.188.0/24
31.58.92.0/23
31.58.176.0/23
31.58.218.0/23
31.58.240.0/22
31.59.36.0/24
31.59.124.0/22
31.59.142.0/24
31.59.149.0/24
31.59.208.0/24
31.59.216.0/21
94.183.152.0/24
94.183.157.0/24
94.183.200.0-94.183.202.255
94.183.204.0/23
94.183.217.0/24
94.183.219.0-94.183.223.255
94.183.228.0/23
94.183.236.0/24
94.183.241.0/24
94.183.253.0/24
94.183.255.0/24
217.60.13.0/24
217.60.16.0-217.60.21.255
217.60.23.0/24
217.60.64.0-217.60.66.255
217.60.68.0/23
217.60.74.0/23
217.60.80.0/22
217.60.176.0/24
217.60.181.0/24
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4b:ae:d8:4d:31:f2:9b:e8:c7:98:35:af:41:3c:9d:ff:05:
84:c3:a4:3d:bb:eb:f4:ea:5d:62:0f:1d:dc:df:37:4a:60:03:
44:d2:4a:ec:63:d8:01:69:71:0d:dc:8a:a8:b5:84:da:f5:0a:
ee:06:7c:72:c8:89:d2:db:23:7a:64:77:76:b1:74:bb:4a:ed:
75:22:98:6c:e7:aa:97:c9:36:fb:30:29:6f:fe:11:30:d2:c8:
44:a1:78:d4:62:9e:3f:e0:72:bc:c2:33:38:bc:80:bc:80:c7:
e4:cd:71:79:85:8e:ab:9c:01:12:ad:2f:ac:4c:31:e7:0c:c5:
48:48:53:d0:12:ef:67:77:6e:0d:4e:09:8e:ee:f9:02:d0:06:
ff:23:bc:72:b2:72:94:7d:5b:76:d8:37:30:4d:38:2b:c0:6d:
5a:1c:1d:9a:45:f6:0e:2c:d9:e6:26:6f:f1:9d:1c:0d:43:99:
7d:7b:a4:4f:7e:a6:c3:12:3e:43:71:2f:07:21:86:4a:51:97:
9b:5b:4b:eb:36:78:45:5f:68:d6:be:ed:6c:86:6e:27:8b:b7:
5a:94:d3:97:f2:07:28:be:56:bb:1a:f1:05:ba:84:f7:15:b1:
6c:41:72:77:ae:3c:8e:57:df:c2:c8:30:be:25:e5:1d:96:4e:
ed:ab:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:16 2026 by rpki-client