Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TyQ5t326AH_oMoO-Wo0PL4JB3t0.roa
File: TyQ5t326AH_oMoO-Wo0PL4JB3t0.roa (raw, json)
Hash identifier: OQzP8LQ8TFyP7duKbc73oGZkOlElYF9cGcczjNI7uDw=
Subject key identifier: 4F:24:39:B7:7D:BA:00:7F:E8:32:83:BE:5A:8D:0F:2F:82:41:DE:DD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1627F89FA1A9819E1471F1EED89FD84EB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TyQ5t326AH_oMoO-Wo0PL4JB3t0.roa
Signing time: Thu 22 Oct 2026 07:24:47 +0000
ROA not before: Thu 22 Oct 2026 07:24:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.35.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:7f:89:fa:1a:98:19:e1:47:1f:1e:ed:89:fd:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 07:24:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f2439b77dba007fe83283be5a8d0f2f8241dedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:0c:13:b2:e9:d3:d2:e6:87:bb:e4:18:a0:
c5:57:c9:5f:74:43:30:eb:9b:63:32:40:8f:ed:94:
1f:83:ac:39:9c:3e:61:9d:f3:1e:0f:b0:60:d8:5b:
6c:79:ef:d8:4c:81:19:a1:81:a4:50:87:03:de:56:
04:82:40:1f:02:56:12:82:8a:7b:fc:d3:ff:f7:0f:
bd:0a:0e:a4:4b:73:2c:04:d4:60:50:2b:8f:13:c5:
58:55:73:c1:25:06:c5:47:fa:1c:19:1a:c8:cd:7f:
4b:1f:af:fa:7c:b9:30:96:40:1e:d4:d0:c0:6f:39:
3e:9e:7b:6c:28:64:3b:ec:c9:d0:a7:ae:86:5f:7b:
ed:04:f3:6d:eb:98:aa:21:c3:c7:61:f7:12:9e:8e:
57:6b:b6:e3:5f:df:6b:b2:d2:74:f1:9a:2a:b8:a9:
ba:87:63:52:cf:89:64:6b:64:fa:16:c9:56:1d:23:
6c:d6:a5:4c:1b:d5:cd:3f:11:06:68:94:97:ec:1a:
39:b2:88:9a:ec:dd:1b:0c:83:70:67:2e:4b:ae:1a:
26:98:36:95:50:8b:8d:f7:7c:50:be:2c:79:43:0a:
82:e0:0b:e5:da:98:9f:6f:a5:4c:6a:63:4b:22:6a:
44:01:31:4a:15:44:ac:62:04:e3:4f:b4:0c:b0:4e:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:39:B7:7D:BA:00:7F:E8:32:83:BE:5A:8D:0F:2F:82:41:DE:DD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TyQ5t326AH_oMoO-Wo0PL4JB3t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.56.107.0/24
31.56.126.0/24
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
02:01:1e:4b:5f:e1:cd:10:9c:31:05:9f:5f:6c:c3:99:06:88:
a8:06:50:78:e7:ef:a6:a4:a1:14:be:35:c2:05:a6:14:59:61:
b0:44:3f:5e:e8:9d:ae:2f:1a:45:72:1b:b5:c1:f8:20:ee:77:
43:55:80:53:c0:70:36:e6:59:3e:b1:9e:3d:bb:46:f8:df:19:
21:4d:59:da:ce:5f:c6:37:62:ab:60:1b:21:48:16:95:1b:5b:
6a:f1:0a:ac:08:7e:ce:b6:6a:0e:09:92:07:32:5b:30:91:c3:
2b:71:77:81:e6:cf:ee:50:d3:36:af:f9:04:6e:93:7b:d4:79:
67:1e:c9:5c:eb:f6:ea:3f:85:18:97:92:db:fd:8b:a0:f7:eb:
26:e2:ee:6e:1a:ee:a6:e2:19:6c:6e:c1:23:87:93:3a:8b:65:
b9:91:43:25:f9:2a:b5:54:bb:29:75:5a:34:d8:53:cd:40:df:
03:18:e8:34:ad:44:6d:62:5c:54:4a:9e:aa:5a:32:ed:e4:02:
b7:de:df:57:2c:2f:22:00:e7:e1:2f:39:58:40:17:a1:e9:ca:
e4:73:82:43:03:f8:b3:b5:a0:d9:0d:f7:48:97:87:3c:cc:f1:
7e:c9:70:79:2c:7c:15:53:e3:a3:31:19:8f:2f:85:25:fb:a7:
89:3b:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:01 2026 by rpki-client