Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SAQAWcqJz440hA6P3BEoPlLoasQ.roa
File: SAQAWcqJz440hA6P3BEoPlLoasQ.roa (raw, json)
Hash identifier: w6iYD08GOgFx7WjaljHSuYXELzFfYX6pZal2tpudEHE=
Subject key identifier: 48:04:00:59:CA:89:CF:8E:34:84:0E:8F:DC:11:28:3E:52:E8:6A:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A015CCA7D8A5444C48A08FF0DFDD42CB60
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SAQAWcqJz440hA6P3BEoPlLoasQ.roa
Signing time: Tue 18 Aug 2026 16:55:28 +0000
ROA not before: Tue 18 Aug 2026 16:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.183.0/24 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.178.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.184.0/21 maxlen: 24
31.58.192.0/20 maxlen: 24
31.58.249.0/24 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.161.0/24 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.204.0/22 maxlen: 24
31.59.208.0/22 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.156.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
94.183.167.0/24 maxlen: 24
94.183.169.0/24 maxlen: 24
94.183.192.0/21 maxlen: 24
94.183.212.0/24 maxlen: 24
94.183.213.0/24 maxlen: 24
94.183.214.0/24 maxlen: 24
94.183.252.0/24 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.71.0/24 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.128.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
217.60.148.0/22 maxlen: 24
217.60.152.0/22 maxlen: 24
217.60.156.0/22 maxlen: 24
217.60.176.0/22 maxlen: 24
217.60.185.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:cc:a7:d8:a5:44:4c:48:a0:8f:f0:df:dd:42:cb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 18 16:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48040059ca89cf8e34840e8fdc11283e52e86ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:b9:55:90:d9:8b:70:6c:70:38:bc:fe:89:
4e:28:85:8c:1b:0d:81:b7:e9:dd:db:9e:2a:2b:d2:
4e:1e:dc:fc:8e:c2:c2:6f:67:8f:c5:df:2b:6f:ba:
cc:81:fa:6f:47:71:ff:97:d0:b3:27:8e:f9:a3:14:
53:61:53:97:77:48:c9:b4:2d:be:83:b1:fe:a8:fa:
a6:cf:1c:78:54:bf:f6:ad:aa:a2:6f:4c:0a:62:6d:
4c:1d:40:37:c5:45:e5:f0:a6:6a:c4:28:85:ff:1f:
8f:16:bc:5c:b8:93:a5:ad:84:a2:b0:74:8b:91:ee:
2f:b3:3e:ad:ce:8b:a3:0e:b4:91:e7:95:4e:ff:34:
08:82:f6:7c:99:71:69:be:10:b9:05:ae:d6:87:20:
53:fe:07:48:27:7a:52:82:12:2b:d5:86:f6:9e:c8:
59:12:6a:fc:79:d1:8b:37:c0:e3:aa:15:c9:50:70:
b1:3a:1c:da:f2:a0:d9:f3:70:a9:61:6d:56:cf:85:
b8:64:b7:03:bd:57:9b:06:b3:cc:ba:2c:73:bc:88:
2d:94:ec:43:1b:bf:c1:51:77:0f:58:7c:c5:5e:ac:
ff:7d:d5:c2:f0:7d:5b:ef:36:be:67:43:5e:db:56:
c5:03:7a:f5:04:eb:b8:c7:33:86:e4:37:fd:8d:51:
f2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:00:59:CA:89:CF:8E:34:84:0E:8F:DC:11:28:3E:52:E8:6A:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/SAQAWcqJz440hA6P3BEoPlLoasQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.183.0/24
31.57.16.0/21
31.57.200.0/24
31.58.178.0/24
31.58.180.0/24
31.58.184.0-31.58.207.255
31.58.249.0/24
31.59.64.0/22
31.59.80.0/21
31.59.90.0/23
31.59.152.0/21
31.59.161.0/24
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.204.0-31.59.211.255
94.183.152.0/24
94.183.156.0/24
94.183.160.0/24
94.183.167.0/24
94.183.169.0/24
94.183.192.0/21
94.183.212.0-94.183.214.255
94.183.252.0/24
217.60.12.0/24
217.60.28.0/22
217.60.52.0-217.60.59.255
217.60.71.0/24
217.60.108.0-217.60.115.255
217.60.128.0/19
217.60.176.0/22
217.60.185.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
b5:7b:78:9a:80:81:56:ca:82:6c:50:39:66:7b:a7:b1:3d:33:
51:a9:bc:60:ea:69:e8:1b:bf:44:98:16:10:35:d1:25:4b:2e:
96:b8:04:2f:78:e1:ef:62:b4:c6:af:f4:05:bc:a0:fb:66:33:
b2:17:1a:ae:de:b3:30:6e:6f:b5:99:da:b9:bb:86:21:49:86:
3e:12:21:a2:ea:a3:3b:24:6e:a1:14:2a:04:92:2b:a5:0a:0b:
52:f6:06:eb:0e:b0:39:8e:88:7a:3a:71:10:4b:97:e0:6c:e6:
25:a8:29:07:fc:a1:55:36:8e:95:91:df:80:cd:68:14:bc:6f:
f7:9d:84:d6:f6:0d:4c:a7:34:c2:1b:c9:4f:a1:b7:11:8f:25:
f3:0a:d5:75:41:c4:cf:62:6c:59:05:ef:cc:d0:73:78:c8:4a:
1e:38:9c:27:46:d4:12:88:ca:01:36:37:3d:93:49:78:8a:fd:
3d:3c:5f:f7:e3:49:b1:1d:d7:47:91:21:8f:d1:43:54:ac:21:
f9:09:81:b5:d1:51:73:a4:8d:ed:dd:b9:a4:f1:14:11:90:18:
e1:6d:31:97:03:20:66:2a:7d:ef:e5:fd:39:75:34:8d:56:0d:
45:26:02:97:0f:90:bc:87:a4:01:b6:ee:17:a5:c4:7f:66:00:
b9:54:39:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:54 2026 by rpki-client