Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T4aCv0Zi7PkdzcEUW2iz-XCJgDM.roa
File: T4aCv0Zi7PkdzcEUW2iz-XCJgDM.roa (raw, json)
Hash identifier: AfC5eLy2wQL9Od4jTG5NGVFJJlGLK1NoKdgapbRezRM=
Subject key identifier: 4F:86:82:BF:46:62:EC:F9:1D:CD:C1:14:5B:68:B3:F9:70:89:80:33
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A15529B69835B87FBB64DE914E757AECB7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T4aCv0Zi7PkdzcEUW2iz-XCJgDM.roa
Signing time: Mon 19 Oct 2026 17:15:59 +0000
ROA not before: Mon 19 Oct 2026 17:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197574
IP address blocks: 31.56.186.0/24 maxlen: 24
31.56.187.0/24 maxlen: 24
31.56.189.0/24 maxlen: 24
31.59.143.0/24 maxlen: 24
31.59.150.0/24 maxlen: 24
217.60.32.0/24 maxlen: 24
217.60.33.0/24 maxlen: 24
217.60.34.0/24 maxlen: 24
217.60.35.0/24 maxlen: 24
217.60.151.0/24 maxlen: 24
217.60.178.0/24 maxlen: 24
217.60.179.0/24 maxlen: 24
217.60.182.0/24 maxlen: 24
217.60.183.0/24 maxlen: 24
2a14:6e40:4::/48 maxlen: 48
2a14:6e40:5::/48 maxlen: 48
2a14:6e40:6::/48 maxlen: 48
2a14:6e40:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:29:b6:98:35:b8:7f:bb:64:de:91:4e:75:7a:ec:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 19 17:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f8682bf4662ecf91dcdc1145b68b3f970898033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:d6:d5:90:8f:10:48:4d:b8:36:6f:3e:ea:
c0:ae:d7:1f:2d:f6:85:37:0e:74:90:79:06:03:f9:
7c:14:36:9b:39:2f:2a:f9:a7:41:fb:ea:8c:62:ff:
23:98:67:ff:9d:b8:e0:d0:85:61:a9:f2:41:c5:d3:
46:ff:7d:d9:ea:2a:7f:40:89:91:92:dd:f9:07:76:
ef:6a:ca:71:5a:c5:a3:b8:ef:0f:13:16:45:8e:e0:
a4:aa:7d:3b:59:6a:f1:65:54:e6:a4:f5:d8:ac:8d:
45:b9:55:68:89:46:5c:d0:c4:65:15:a6:69:ca:7f:
2b:b6:2f:ee:0f:d8:9e:a4:9c:a8:af:da:92:0e:e0:
cd:34:de:c9:0a:4f:88:22:91:85:46:22:de:b2:47:
2a:c8:1f:71:98:11:45:e0:aa:44:8b:bf:ad:47:d1:
bb:fc:40:5a:36:a4:14:1f:64:1a:d7:90:cb:f6:3c:
76:54:37:4c:35:04:fa:d9:60:f2:09:ed:93:d4:1a:
1c:93:33:a5:cd:93:87:43:bc:9a:60:b1:a0:fb:cc:
7e:90:cd:1c:7b:59:61:ac:63:2e:dd:86:8c:c4:be:
42:2c:51:0b:cb:31:43:5e:a3:f2:59:04:8a:84:b1:
f2:6a:0a:c6:81:96:37:6c:77:73:8c:08:20:f9:ec:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:82:BF:46:62:EC:F9:1D:CD:C1:14:5B:68:B3:F9:70:89:80:33
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T4aCv0Zi7PkdzcEUW2iz-XCJgDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.186.0/23
31.56.189.0/24
31.59.143.0/24
31.59.150.0/24
217.60.32.0/22
217.60.151.0/24
217.60.178.0/23
217.60.182.0/23
IPv6:
2a14:6e40:4::/46
Signature Algorithm: sha256WithRSAEncryption
4f:d2:85:01:52:61:69:73:24:c1:62:0a:28:3d:2a:8d:69:40:
f7:9f:12:20:1b:df:33:51:68:f8:2a:18:ae:1e:3e:22:9e:99:
7a:62:9e:86:cb:bf:99:c1:5b:0b:d5:56:60:bd:29:55:93:c7:
bd:f1:dd:e7:08:60:d5:01:a8:b7:68:51:7c:b6:3d:bc:98:1c:
38:51:43:dc:db:53:4d:81:37:9b:7e:04:2f:cb:ee:a3:25:88:
c8:98:72:15:c1:e3:5c:9f:c0:78:bb:88:c7:53:fb:3b:0a:c6:
ce:e7:b9:50:0c:25:e7:69:65:f5:d2:b0:cd:d4:f5:c2:13:7a:
b8:6a:08:13:64:65:8e:13:98:f9:fe:d5:cb:12:65:d8:b5:c2:
44:b9:af:bb:a3:f9:94:14:19:9a:63:fa:db:59:5f:a3:ee:6b:
f3:64:29:65:5a:e4:75:12:4d:1d:b3:34:0a:23:a2:3d:1e:f8:
3d:3d:5f:db:7a:1d:38:bf:e5:55:37:ce:10:ae:b2:7a:3d:9f:
d2:d4:c4:55:d6:0c:34:11:6c:23:ef:a1:52:e9:14:8a:3e:a5:
72:d4:49:3d:9e:77:ea:cd:f4:ec:dc:7a:ad:94:e4:71:41:30:
a7:db:8e:b0:af:47:34:1b:29:68:99:61:c0:df:c2:86:25:dd:
a2:a2:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:21:57 2026 by rpki-client