Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UMkBDQs5514uG567QjyaZa29uLs.roa
File: UMkBDQs5514uG567QjyaZa29uLs.roa (raw, json)
Hash identifier: hu43xh/YdDL3r9fdvi/psdiG3Kj2jVaMl4RiDkADvkw=
Subject key identifier: 50:C9:01:0D:0B:39:E7:5E:2E:1B:9E:BB:42:3C:9A:65:AD:BD:B8:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F15034B7D01B366C23BD9BB5D72128580
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UMkBDQs5514uG567QjyaZa29uLs.roa
Signing time: Mon 29 Jun 2026 20:12:45 +0000
ROA not before: Mon 29 Jun 2026 20:12:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.138.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.197.0/24 maxlen: 24
31.57.202.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:03:4b:7d:01:b3:66:c2:3b:d9:bb:5d:72:12:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 29 20:12:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50c9010d0b39e75e2e1b9ebb423c9a65adbdb8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:d9:b1:a5:b0:8a:b1:81:66:cf:17:eb:94:
9c:7b:9d:47:2d:88:cb:72:28:ef:c9:50:58:94:7f:
95:43:4d:bc:75:4e:b3:1e:2a:4e:7f:5b:df:e3:dd:
50:57:87:03:fa:bf:9d:19:75:d3:d8:4a:ad:c6:09:
72:46:1b:15:1f:33:c4:ae:6d:72:53:28:98:5c:e9:
16:97:1a:1f:ed:cb:1c:af:d4:7c:f2:a9:75:7f:62:
91:6c:d4:e1:13:02:64:29:cf:ab:ba:2e:c7:95:f5:
42:de:4c:74:f8:89:77:52:d7:63:03:74:d8:d4:c8:
64:ff:a7:d2:bd:30:cc:80:55:32:8e:2f:d0:78:9c:
32:3f:9e:aa:b3:ad:97:7c:70:00:37:be:0d:d3:8c:
75:83:32:64:9d:45:4c:23:54:26:03:bb:fe:ad:bf:
38:c2:4f:81:3c:19:29:e2:fa:95:86:c5:09:1b:88:
10:26:b2:2a:78:b4:c2:84:90:85:90:90:1e:c5:3d:
9a:57:d3:b4:2a:80:c7:e8:d6:3b:39:f3:45:ff:14:
5d:c4:71:1d:6a:2d:36:6d:44:8b:95:f0:ba:65:e8:
96:93:cc:f3:77:dc:73:d7:68:79:b4:fd:c9:0a:1a:
be:59:cb:9e:05:1b:45:75:dd:81:a2:67:7a:4a:b7:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:01:0D:0B:39:E7:5E:2E:1B:9E:BB:42:3C:9A:65:AD:BD:B8:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UMkBDQs5514uG567QjyaZa29uLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.138.0/24
31.57.191.0/24
31.57.197.0/24
31.57.202.0/24
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:67:6a:b4:95:c1:4c:aa:b7:c7:af:ff:d2:3a:ba:1a:75:60:
24:4f:3f:9b:bc:ed:6f:cf:ae:77:e6:a4:eb:3f:c4:52:91:ed:
29:bc:06:d1:f5:42:dd:0c:17:a4:3c:bf:c5:27:48:22:eb:06:
8b:58:1c:16:6d:f6:69:f3:7f:f2:aa:eb:ab:14:41:3f:a0:8f:
12:69:44:32:1a:6d:5f:a3:68:43:b5:64:96:86:b4:e8:cb:99:
01:73:0f:fe:89:b4:ea:49:98:ea:4e:35:ad:ea:63:95:a8:86:
c6:c2:af:96:50:23:dc:ba:c8:88:1f:66:14:7d:21:b9:b2:14:
5e:a9:6f:e5:85:50:96:cb:c7:fa:2a:df:7c:77:41:6f:77:f7:
41:c6:45:ca:79:4b:95:25:79:8a:16:d1:83:49:f7:05:5f:8d:
10:aa:c9:dc:e9:c1:78:48:29:c8:b4:85:1a:68:a7:2e:92:b6:
8b:e4:f4:42:bc:36:5a:dd:61:ed:2c:70:af:b4:98:6c:43:db:
fc:a9:57:b9:79:ce:46:e0:07:4d:c0:aa:a0:d6:de:5d:43:c9:
20:e4:bd:be:f3:5c:ce:50:63:85:ee:40:5b:ad:94:bc:39:31:
59:84:58:52:17:a4:57:83:08:18:80:28:6b:13:52:ba:0a:ff:
c0:10:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:01 2026 by rpki-client