Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VxEsJ6NF00fEKLVoaWMrBGjP6eo.roa
File: VxEsJ6NF00fEKLVoaWMrBGjP6eo.roa (raw, json)
Hash identifier: KfwMYglcXFZ74yu2TMZqS0EKBXmPN6t3r1YmTk6+NjE=
Subject key identifier: 57:11:2C:27:A3:45:D3:47:C4:28:B5:68:69:63:2B:04:68:CF:E9:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E63B0196998B69C0067DD0D5DC980D7B4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VxEsJ6NF00fEKLVoaWMrBGjP6eo.roa
Signing time: Tue 26 May 2026 09:49:05 +0000
ROA not before: Tue 26 May 2026 09:49:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64439
IP address blocks: 31.56.208.0/24 maxlen: 24
31.56.211.0/24 maxlen: 24
94.183.155.0/24 maxlen: 24
217.60.10.0/24 maxlen: 24
217.60.11.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:b0:19:69:98:b6:9c:00:67:dd:0d:5d:c9:80:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 26 09:49:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57112c27a345d347c428b56869632b0468cfe9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:6d:42:b1:67:9e:3d:1e:f8:d4:02:84:86:
b7:40:5c:25:ee:36:22:65:58:03:8a:2d:73:96:32:
7c:5b:11:aa:87:f4:7b:1c:41:fc:00:0c:a3:0a:4b:
fb:09:c0:54:4d:69:41:56:be:7c:7e:d2:c2:ef:1a:
3e:3f:17:a1:39:fe:d6:b7:3f:80:3e:48:86:5b:50:
9a:25:af:9d:02:80:2f:22:a1:c5:0a:5e:54:99:de:
c8:3a:f9:41:86:51:05:9e:66:d4:f2:e4:6e:4f:a1:
18:70:57:72:c1:1c:9b:2a:06:24:c2:18:58:ac:55:
1f:6d:f5:0a:ca:96:e2:6b:9d:5f:13:00:d3:8a:5e:
0c:d2:c9:9d:6b:8e:2f:8c:90:e6:3d:77:aa:7c:44:
c9:ae:d5:20:67:4e:4f:d5:0a:90:e4:17:16:03:a1:
83:e9:a9:09:f4:ef:5d:db:71:35:a1:6c:33:b6:25:
de:9b:69:93:e0:1a:0e:3b:4a:c2:23:a0:32:c3:89:
3c:5f:48:b6:a6:76:46:d8:99:dd:04:59:ec:6f:8f:
17:3c:f7:55:dc:8e:00:a9:d6:5a:86:5e:2d:63:2d:
f2:de:b6:38:96:e4:4f:24:5d:8c:f7:ac:41:18:5e:
c3:8e:04:db:1c:2a:3e:55:64:55:76:77:54:93:6f:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:11:2C:27:A3:45:D3:47:C4:28:B5:68:69:63:2B:04:68:CF:E9:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VxEsJ6NF00fEKLVoaWMrBGjP6eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.208.0/24
31.56.211.0/24
94.183.155.0/24
217.60.10.0/23
217.60.186.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d2:6b:8b:4e:2d:b4:04:db:cc:43:61:8a:bb:55:b0:48:99:
3c:d3:aa:58:d2:76:1b:45:00:fc:04:c3:82:ab:43:bd:49:2d:
89:ba:78:eb:8c:be:2c:0e:36:38:31:23:a3:b9:a0:90:3f:48:
11:85:65:a5:3f:a6:20:6b:e5:4b:d2:87:38:14:a0:15:02:ea:
2b:e7:78:80:81:1f:34:a7:23:d6:2f:6f:e8:ff:83:fc:d6:c4:
0e:21:35:55:75:8e:e5:9c:07:e1:9d:98:53:40:79:90:2e:6c:
7b:8e:71:a9:f3:a5:07:7e:24:fb:c7:76:cd:83:ef:32:be:a8:
5f:e9:28:d3:1b:73:bd:6d:69:03:67:4d:c9:d2:7c:b8:b1:0b:
23:ca:d5:c5:d8:14:c0:5d:e2:50:fc:7e:87:eb:89:37:bd:63:
5c:9f:77:ec:00:90:81:5a:db:0e:b5:f1:65:4e:ba:c0:e6:ed:
8c:11:34:bf:f4:33:ea:6e:ec:d1:03:ee:83:16:e0:24:be:fa:
89:f0:eb:04:28:61:d8:92:c9:5b:0a:8b:99:b5:17:b3:d5:a5:
59:7a:73:49:69:9f:af:9f:cf:66:be:87:d1:88:d9:3c:b1:11:
91:8c:28:66:59:2c:f0:d9:62:47:64:ae:d4:d3:3d:59:77:2e:
e6:32:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:56:31 2026 by rpki-client