Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XNX-vX6Y1FzqwhTLYLyHryE16yc.roa
File: XNX-vX6Y1FzqwhTLYLyHryE16yc.roa (raw, json)
Hash identifier: tR9kmSq7vHrqPxiPV/lifrXjYvHXNDpQCuWzHugsYOg=
Subject key identifier: 5C:D5:FE:BD:7E:98:D4:5C:EA:C2:14:CB:60:BC:87:AF:21:35:EB:27
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E643CAD537047935B247364F7B47F7B03
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XNX-vX6Y1FzqwhTLYLyHryE16yc.roa
Signing time: Tue 26 May 2026 12:22:38 +0000
ROA not before: Tue 26 May 2026 12:22:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.84.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.59.186.0/24 maxlen: 24
31.59.212.0/24 maxlen: 24
217.60.244.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:3c:ad:53:70:47:93:5b:24:73:64:f7:b4:7f:7b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 26 12:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5cd5febd7e98d45ceac214cb60bc87af2135eb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:71:36:29:a1:49:99:9f:a5:f5:be:89:29:
c5:11:df:a3:c3:6f:01:f4:87:81:e8:7e:bd:50:6e:
70:05:95:fc:0b:00:99:76:a0:59:98:07:9e:c5:45:
03:cf:40:77:64:fc:24:4c:ac:08:6e:74:92:c2:aa:
a0:eb:0f:95:d0:e6:c9:c4:10:11:34:11:53:1b:93:
43:08:f1:89:d0:ca:71:77:77:7c:75:38:35:18:ae:
9d:7a:54:93:5d:98:bc:5d:76:c0:4a:b2:59:fb:bf:
5e:3e:80:dc:ae:bf:35:ed:f3:da:30:4b:29:be:a8:
1b:3e:a3:87:9c:fe:df:44:30:8a:5a:b4:90:f1:43:
95:3a:45:09:8c:7c:ee:3c:9f:56:c7:4e:00:39:85:
4d:0b:92:1a:c4:2f:d2:52:36:5b:c8:c3:5f:3f:14:
d5:c1:24:82:1b:67:bc:70:b8:9a:3e:74:92:66:67:
b9:42:93:5c:a1:91:7d:87:d0:0c:00:8e:80:b9:ac:
93:ff:69:86:60:f3:95:44:e5:52:d8:7e:f8:00:94:
65:be:f1:b6:86:f2:3f:08:7e:20:e8:60:3e:6b:be:
9f:18:de:0b:4b:5b:74:8a:ce:9b:e3:af:fb:de:99:
3a:4c:3e:e1:e9:b3:25:d4:ae:af:f4:ed:25:b9:1f:
cc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D5:FE:BD:7E:98:D4:5C:EA:C2:14:CB:60:BC:87:AF:21:35:EB:27
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XNX-vX6Y1FzqwhTLYLyHryE16yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.84.0/24
31.57.104.0/24
31.59.186.0/24
31.59.212.0/24
217.60.244.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c9:c2:b9:12:ab:59:e8:e5:85:3e:0e:0b:0d:91:dd:68:5c:
9c:ec:7f:1c:9c:19:84:f0:c6:a9:3e:2f:80:39:a8:65:35:4c:
53:89:f4:74:31:38:63:58:5a:15:a3:ee:2e:f0:41:a7:c5:09:
96:b4:46:f0:1c:c9:c1:4c:27:c0:ce:d5:b4:3e:2e:0d:83:fb:
92:7c:a9:87:c9:74:70:81:71:60:c3:cf:16:9d:b3:7a:0b:66:
bc:af:55:4b:4a:45:7f:f3:aa:5c:4c:77:7b:4c:84:99:2c:e9:
ca:92:7a:47:dc:9a:7e:7d:ee:41:b8:38:b9:e0:d1:82:2f:52:
2f:74:ca:a5:b4:5a:65:81:92:ee:c2:d0:3a:7d:1b:ca:1e:eb:
3a:c3:2a:d8:66:71:a1:7f:dc:ea:b5:6d:15:7b:0c:85:89:0a:
3a:c9:25:ab:43:0e:62:b8:94:b2:b9:2b:f9:aa:4f:16:a1:82:
49:bc:78:0d:ee:1a:08:38:5f:64:65:77:16:56:7b:08:57:af:
15:99:9e:eb:78:70:8f:29:25:d6:1b:fd:ea:88:34:f2:f2:fb:
39:6a:1b:90:57:99:3b:6c:5c:a9:d3:15:a9:36:20:6b:59:98:
36:2c:92:4b:84:dd:88:49:b5:06:74:ba:af:69:64:95:f0:99:
93:7c:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:59:22 2026 by rpki-client