Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TQf62B_3OCDJixQo7S-wj5K6I1o.roa
File: TQf62B_3OCDJixQo7S-wj5K6I1o.roa (raw, json)
Hash identifier: Bq7vnHpt4taOHNI3HTm8DKAjlOX73BQtNS4v8OYHWzg=
Subject key identifier: 4D:07:FA:D8:1F:F7:38:20:C9:8B:14:28:ED:2F:B0:8F:92:BA:23:5A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EAD48DA023A7D67B79CD29D3DF5A194BF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TQf62B_3OCDJixQo7S-wj5K6I1o.roa
Signing time: Tue 09 Jun 2026 16:48:13 +0000
ROA not before: Tue 09 Jun 2026 16:48:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 31.56.89.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.153.0/24 maxlen: 24
94.183.154.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.166.0/24 maxlen: 24
94.183.180.0/24 maxlen: 24
94.183.218.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:48:da:02:3a:7d:67:b7:9c:d2:9d:3d:f5:a1:94:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 16:48:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d07fad81ff73820c98b1428ed2fb08f92ba235a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:7e:ca:50:ba:f6:63:b0:f7:07:69:b8:88:
f6:7d:7e:d0:b0:b7:af:f5:fd:c4:0d:d7:7d:4a:a5:
b7:c3:26:63:32:63:46:5c:58:1f:a3:c9:db:15:31:
18:08:b3:60:92:70:c4:ac:ba:25:01:62:3a:cd:a6:
af:da:c8:1c:d4:23:93:60:34:34:0a:33:c4:4f:00:
50:30:7a:75:eb:e5:ae:e3:27:94:c4:bc:4c:ba:f5:
9a:a3:ca:34:d3:95:f6:f0:b7:29:9f:0e:e2:a2:3e:
df:d5:f2:a9:3d:81:80:ba:4a:49:66:1f:da:54:f2:
eb:df:62:58:66:d8:3b:20:5e:ba:6b:75:99:9d:96:
67:cb:63:6a:ad:6d:08:e0:fa:ff:ce:b8:26:44:3c:
19:08:24:8d:a5:16:a0:5e:87:87:38:fe:cd:ea:f6:
16:96:fc:90:37:e4:2d:2e:f2:e6:f6:f8:05:46:9a:
6a:a5:f3:c4:cc:7e:ae:b0:aa:b0:a5:f9:fd:ea:47:
3a:5d:b8:48:79:12:f6:a2:da:22:b4:ec:5f:16:43:
67:d6:da:73:7a:76:9a:42:ce:2d:75:21:db:a0:71:
40:87:1a:9b:2c:7a:41:f6:c5:e7:78:2f:79:43:3b:
10:4e:a9:37:12:c3:f3:e5:93:69:64:b4:4a:91:a2:
a6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:FA:D8:1F:F7:38:20:C9:8B:14:28:ED:2F:B0:8F:92:BA:23:5A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TQf62B_3OCDJixQo7S-wj5K6I1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.89.0/24
31.58.237.0/24
94.183.150.0/24
94.183.153.0-94.183.154.255
94.183.162.0/24
94.183.166.0/24
94.183.180.0/24
94.183.218.0/24
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5e:6c:4a:6e:2b:21:5a:fb:c5:05:a2:5f:4e:eb:7d:60:44:
42:40:cd:b8:4a:93:53:bd:5e:07:bd:0f:5a:5b:14:f9:5b:71:
aa:88:8c:24:37:f6:84:2f:59:5b:8b:8d:3d:04:22:e4:b5:79:
dc:30:3b:41:fb:7d:b2:8b:57:39:8f:52:df:a3:9b:11:cd:a9:
50:c7:22:49:b4:9e:e7:60:f4:ea:38:45:c4:37:b2:bb:61:28:
f0:b0:02:ab:67:b9:72:9a:29:b7:42:b6:56:8a:88:0d:5f:20:
e9:c3:9d:96:81:c5:cb:3b:06:52:1a:3e:c7:8d:a3:0f:49:7d:
5a:a3:0b:30:36:8e:78:ba:35:2d:93:5c:12:bd:be:69:99:16:
f6:77:1f:d9:b8:88:0e:e7:b4:bf:90:f6:6b:6f:e4:28:e1:ba:
5f:1c:f6:c7:8d:12:d3:c3:21:7f:dc:2e:6d:be:aa:05:e9:2e:
19:b0:31:3d:44:5a:c2:7a:41:73:20:8b:ca:df:ea:3e:96:1c:
11:c7:85:7a:0c:9e:6c:db:cc:08:6a:4b:a1:6b:da:c0:57:78:
43:07:ef:f4:af:7e:72:ba:74:f0:eb:7b:12:1e:75:f4:10:b9:
77:a7:17:4c:1f:01:53:3d:3d:ef:1b:13:a6:ec:f7:11:b4:a0:
5e:84:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:09:16 2026 by rpki-client