Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qbg0HgcHDCIDjNKFfQDU6Tn0968.roa
File: Qbg0HgcHDCIDjNKFfQDU6Tn0968.roa (raw, json)
Hash identifier: gFQ8S7fQmpFk1h8QdfUZV2kMz89nA2Kaa8oTuGOGGWk=
Subject key identifier: 41:B8:34:1E:07:07:0C:22:03:8C:D2:85:7D:00:D4:E9:39:F4:F7:AF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A16240ED8D1C5687B61D3C92FC3691F159
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qbg0HgcHDCIDjNKFfQDU6Tn0968.roa
Signing time: Thu 22 Oct 2026 06:16:24 +0000
ROA not before: Thu 22 Oct 2026 06:16:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 31.57.131.0/24 maxlen: 24
31.58.18.0/24 maxlen: 24
31.58.22.0/24 maxlen: 24
31.58.28.0/24 maxlen: 24
31.58.32.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.20.0/24 maxlen: 24
31.59.21.0/24 maxlen: 24
31.59.27.0/24 maxlen: 24
31.59.28.0/24 maxlen: 24
31.59.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:40:ed:8d:1c:56:87:b6:1d:3c:92:fc:36:91:f1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 06:16:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41b8341e07070c22038cd2857d00d4e939f4f7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:e8:77:13:7d:10:e2:53:f1:ad:de:5f:b1:
32:b9:d9:3d:d8:0f:94:78:a7:26:c1:49:16:6a:03:
ed:af:c1:ff:41:25:dd:a0:a8:25:27:14:e4:34:6c:
65:87:c8:6e:f0:86:dc:49:e3:1d:26:6f:7f:72:fd:
98:9d:b0:61:35:7b:61:3e:d7:46:07:6d:10:25:f8:
7d:d7:32:e2:a1:a4:51:a7:16:ef:93:86:17:c4:81:
1c:18:92:fd:c2:ab:bf:33:4f:49:68:33:dd:4b:49:
9e:4f:1d:84:b6:2d:76:47:24:60:79:0b:eb:d0:84:
ab:9c:d5:1a:72:61:ad:35:ec:7a:88:f8:72:61:17:
e1:49:98:da:68:ca:21:06:61:32:aa:d0:38:12:6b:
47:a1:02:b3:6a:50:91:c9:74:91:bd:d9:33:7e:30:
f8:cd:8c:42:f1:79:24:04:91:02:bb:f0:8c:a4:36:
77:85:44:61:35:a0:a4:1c:74:68:e9:72:f7:2c:33:
d0:da:2c:92:d9:78:18:f9:db:3c:e7:99:00:45:8b:
86:d3:df:e0:2d:bd:2b:80:de:ad:a8:76:52:48:07:
9d:88:dc:82:8e:71:ea:a2:59:56:12:af:c1:10:14:
db:9e:86:39:9f:75:84:e1:a5:73:63:78:12:05:3c:
0c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:34:1E:07:07:0C:22:03:8C:D2:85:7D:00:D4:E9:39:F4:F7:AF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qbg0HgcHDCIDjNKFfQDU6Tn0968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.131.0/24
31.58.18.0/24
31.58.22.0/24
31.58.28.0/24
31.58.32.0/24
31.59.15.0/24
31.59.20.0/23
31.59.27.0-31.59.28.255
31.59.33.0/24
Signature Algorithm: sha256WithRSAEncryption
58:24:59:86:61:2f:e4:0e:df:7c:da:5b:06:a6:17:c0:59:c7:
42:30:44:23:e7:ca:39:6a:6e:bb:19:27:3a:a1:11:1a:a1:4a:
eb:86:0f:e8:0b:ec:6e:e5:4a:e7:54:3b:5a:50:48:8f:9a:9c:
24:5b:c5:e8:f7:a8:75:60:0a:75:00:5f:05:25:ea:02:16:4e:
88:db:c2:03:5a:c5:10:4d:4b:ef:7d:fe:89:85:7a:35:78:5f:
55:74:5e:29:0e:f3:54:5a:85:87:e1:0b:ad:2d:de:96:fc:e7:
26:7c:7b:ca:2a:32:c3:d6:48:32:34:1f:98:39:2a:54:15:e1:
f3:ba:b1:cc:8a:b8:ff:c2:ef:7e:b1:27:d7:79:5a:68:c1:e9:
d6:8e:d3:f0:07:8f:02:c2:ab:ea:4e:f4:3e:d2:46:19:33:8f:
f7:92:59:c6:09:c6:3c:42:57:77:55:47:6e:bf:0c:05:a3:e7:
f9:c5:f6:6d:08:30:99:56:8e:8b:f6:14:40:e1:5d:05:9e:83:
8d:3b:1c:ec:d3:b2:05:9a:e9:5b:e2:47:5b:ae:35:96:b6:4a:
44:ca:f2:e1:fe:20:9c:03:23:fc:6f:88:bd:cb:42:e9:ad:74:
8a:df:3c:20:0d:90:58:bf:56:56:97:6c:8e:9c:9e:ae:57:52:
50:f9:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:13 2026 by rpki-client