Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qdga2QWO-jlfgltFOBB8F8byhqg.roa
File: Qdga2QWO-jlfgltFOBB8F8byhqg.roa (raw, json)
Hash identifier: QEw7TdIqjRlnWs+33ijzHAYzIz12Z8HpjdANsbBsck4=
Subject key identifier: 41:D8:1A:D9:05:8E:FA:39:5F:82:5B:45:38:10:7C:17:C6:F2:86:A8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F027E16F5D1298B2812D7A72D0F0EA9D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qdga2QWO-jlfgltFOBB8F8byhqg.roa
Signing time: Fri 26 Jun 2026 05:54:05 +0000
ROA not before: Fri 26 Jun 2026 05:54:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.57.30.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.57.210.0/23 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.94.0/23 maxlen: 24
31.58.160.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:7e:16:f5:d1:29:8b:28:12:d7:a7:2d:0f:0e:a9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 26 05:54:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41d81ad9058efa395f825b4538107c17c6f286a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:eb:85:9b:29:3f:b3:40:ef:ab:db:1b:38:
8c:8b:31:7b:b7:ba:9f:58:d3:c9:1d:ea:93:fd:38:
cb:22:f2:60:5d:87:59:f7:fe:f3:d8:2a:14:bc:79:
9b:2f:81:f7:f6:7e:3d:e0:ed:67:f3:e5:6d:60:ef:
c4:14:b8:ad:c3:6b:81:44:cd:18:67:2f:ee:4d:0f:
6c:fe:f2:26:2b:4e:89:2a:e6:8f:73:3e:41:32:14:
99:77:98:80:4f:6a:c9:35:4a:6b:80:a6:15:86:5e:
86:7f:4b:b3:67:a8:00:2f:4f:1f:b5:57:8d:7b:a2:
7c:ca:98:d4:bd:40:e6:f5:a0:21:89:37:03:12:bf:
19:fe:76:af:0c:55:20:04:4d:0d:e8:11:06:24:35:
d4:a9:2b:72:fc:e7:94:48:de:a5:88:4a:9f:d9:4a:
ff:69:ad:a1:fd:b5:b3:6d:18:56:eb:0f:d3:a1:fa:
12:c7:19:75:85:8a:18:cb:d8:96:33:f0:3d:8d:67:
d2:6f:4e:9d:b0:29:74:f9:3d:a6:26:2c:db:99:00:
31:8d:8a:75:ff:f8:a7:a0:8c:c3:12:7f:2a:3e:d2:
af:e0:8a:14:c9:68:cb:d1:3e:e3:bb:3b:ab:41:2a:
8f:e3:3a:c6:d8:cc:06:a3:4e:58:65:45:c3:f3:1f:
8e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:1A:D9:05:8E:FA:39:5F:82:5B:45:38:10:7C:17:C6:F2:86:A8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qdga2QWO-jlfgltFOBB8F8byhqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.57.30.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.57.210.0/23
31.58.71.0/24
31.58.94.0/23
31.58.160.0/24
31.59.14.0/24
31.59.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a8:65:e6:f9:30:28:3d:19:1c:1d:fc:25:c5:b2:52:15:80:
bb:73:a3:64:bb:28:42:bb:e6:9e:1f:f3:c9:6a:bb:4d:ee:43:
d1:ac:4a:54:c0:2c:61:68:11:ac:fe:a6:75:21:82:10:df:e8:
2d:c1:05:a1:b8:b2:84:32:e0:34:0c:8a:d4:28:cf:4e:98:4d:
47:23:7e:15:9c:51:47:7d:a6:ea:45:c9:c9:e5:fc:6e:ad:5b:
3e:fa:eb:b4:8e:a9:16:49:05:cd:e4:a9:d2:70:02:ca:1c:bb:
81:9c:f5:57:cf:06:1c:d1:05:9c:18:08:41:4e:99:78:3c:11:
47:cb:95:41:41:0b:18:87:21:e1:0f:8a:42:05:99:7a:c8:bd:
a0:5c:d7:c5:99:c4:c5:48:7c:5c:fb:f6:20:b4:42:78:98:02:
50:b8:81:58:80:18:f4:15:e3:82:08:34:99:6f:65:96:d1:cc:
e2:76:c6:7c:dc:4a:52:f0:a1:48:bf:b9:a4:21:77:e4:10:cc:
1d:67:38:d6:87:2e:ce:48:d0:7a:59:0c:68:c1:0f:c3:d1:6c:
5f:97:62:b4:5e:7a:38:d0:a5:7d:77:b4:92:c3:9f:34:62:2b:
1f:a3:66:eb:4f:41:2d:a1:37:8e:54:f3:f5:19:11:72:f0:a2:
32:82:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 17:05:07 2026 by rpki-client