Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T6f0_coZgGEBi3j5tz5_SfudWRA.roa
File: T6f0_coZgGEBi3j5tz5_SfudWRA.roa (raw, json)
Hash identifier: 4yubgjjXAMuODMWVdAvFtrjNrhNNuxsrlLmPYj9gp74=
Subject key identifier: 4F:A7:F4:FD:CA:19:80:61:01:8B:78:F9:B7:3E:7F:49:FB:9D:59:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A11BDE2AB08E468A05E3B73CC8F0F08773
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T6f0_coZgGEBi3j5tz5_SfudWRA.roa
Signing time: Thu 08 Oct 2026 14:15:07 +0000
ROA not before: Thu 08 Oct 2026 14:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 31.56.8.0/24 maxlen: 24
31.56.9.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.59.53.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.73.0/24 maxlen: 24
31.59.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:de:2a:b0:8e:46:8a:05:e3:b7:3c:c8:f0:f0:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 8 14:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fa7f4fdca198061018b78f9b73e7f49fb9d5910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:8d:bb:95:d1:38:20:c6:26:07:7c:f3:4a:
bb:2f:2f:86:25:7a:1f:6c:dc:93:7c:2f:3e:df:dc:
45:37:41:d0:48:c7:54:73:10:e9:7d:c1:75:46:1d:
6a:51:4d:c4:6d:ee:97:2f:ee:8a:41:56:5d:63:ba:
4e:79:d5:f7:d3:41:be:8f:ee:02:38:97:97:61:44:
00:19:d0:80:2f:52:3d:c4:c0:3c:dd:f4:a6:41:ef:
ef:69:88:3d:b9:e8:c9:4d:67:47:d2:56:59:a1:af:
40:79:fb:eb:13:10:3a:4e:bb:55:8b:74:1f:52:43:
31:a9:9c:1e:d6:4c:31:11:b3:28:7d:f3:2e:6a:05:
cf:8b:c3:75:95:06:d7:62:47:fc:0f:1b:d0:ec:4a:
c5:77:0c:ec:86:34:3d:c5:84:7a:ba:6c:b0:0f:9a:
b5:79:d7:ae:17:0e:5c:fc:72:c9:27:e5:f1:84:5d:
85:c4:23:82:03:3e:4f:1e:3d:6f:ae:d1:ff:9b:9e:
b0:d5:9b:cf:77:a9:fe:af:fe:5d:8b:88:bb:bd:fd:
7e:a3:b0:ac:ce:2a:65:0e:29:dd:61:25:63:d6:14:
52:94:2a:81:00:c3:c4:5b:2b:f3:0e:21:fd:5e:a2:
fd:de:73:43:13:3e:4e:b7:e4:c8:9e:83:e8:63:e3:
d9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A7:F4:FD:CA:19:80:61:01:8B:78:F9:B7:3E:7F:49:FB:9D:59:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T6f0_coZgGEBi3j5tz5_SfudWRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/23
31.57.4.0/24
31.59.53.0/24
31.59.57.0/24
31.59.73.0/24
31.59.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:92:67:f0:f3:a3:98:e6:23:2b:5a:50:4f:e8:42:5d:7b:fa:
d6:99:9d:e0:ad:fa:fd:af:1e:7f:b8:a4:b9:e9:a9:1c:1f:89:
dc:c5:a6:a8:40:12:9e:1f:ee:3a:6e:ff:8c:e5:60:9a:c9:21:
60:0e:de:6d:57:5d:a4:fd:ba:4a:7f:4e:1e:45:f3:b9:2e:a7:
97:0b:9b:42:6b:6e:cf:4e:e1:9b:84:af:a1:70:09:55:e5:e4:
21:76:95:13:4c:40:e1:99:e3:57:e1:bc:27:26:66:50:7e:f4:
9c:7a:aa:18:83:86:7b:d7:5d:c4:57:f4:9c:81:40:5a:bc:db:
37:ce:04:36:53:aa:e8:51:c0:3c:b8:e5:65:56:a5:e4:d6:60:
ea:b4:92:a8:8f:a1:fe:96:04:c2:71:fc:15:29:96:a7:0b:52:
40:be:67:7b:3f:85:8f:9d:f1:c8:0b:7d:4e:3c:d8:65:63:26:
98:48:00:fe:62:41:cb:09:52:be:12:53:66:b6:8c:b4:f1:cb:
a1:90:be:65:04:0f:39:02:1b:91:36:16:4a:3a:c1:2a:4a:58:
eb:99:50:cf:3c:f8:df:a6:30:63:91:f3:0d:44:77:ca:31:ba:
fa:34:46:3a:cc:21:7e:34:3c:04:c6:d1:06:fb:92:65:e7:ad:
ef:2e:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:24:29 2026 by rpki-client