Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZrPb2FF-oPxPsWFFoGCRBxl0Uw4.roa
File: ZrPb2FF-oPxPsWFFoGCRBxl0Uw4.roa (raw, json)
Hash identifier: bRInyMk7l24NkrG4HuqZnS/6MTVzKF0ISc3SADr58Ao=
Subject key identifier: 66:B3:DB:D8:51:7E:A0:FC:4F:B1:61:45:A0:60:91:07:19:74:53:0E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0ED97250BE6840316065B021C4242AC3E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZrPb2FF-oPxPsWFFoGCRBxl0Uw4.roa
Signing time: Tue 29 Sep 2026 14:35:00 +0000
ROA not before: Tue 29 Sep 2026 14:35:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197574
IP address blocks: 31.56.186.0/24 maxlen: 24
31.56.187.0/24 maxlen: 24
31.56.189.0/24 maxlen: 24
31.59.143.0/24 maxlen: 24
31.59.150.0/24 maxlen: 24
217.60.32.0/24 maxlen: 24
217.60.33.0/24 maxlen: 24
217.60.34.0/24 maxlen: 24
217.60.35.0/24 maxlen: 24
217.60.178.0/24 maxlen: 24
217.60.179.0/24 maxlen: 24
217.60.182.0/24 maxlen: 24
217.60.183.0/24 maxlen: 24
2a14:6e40:4::/48 maxlen: 48
2a14:6e40:5::/48 maxlen: 48
2a14:6e40:6::/48 maxlen: 48
2a14:6e40:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:97:25:0b:e6:84:03:16:06:5b:02:1c:42:42:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 29 14:35:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=66b3dbd8517ea0fc4fb16145a06091071974530e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:ed:61:de:81:02:a9:46:19:07:4a:98:ac:
a4:d6:d9:c3:dd:62:99:b2:b1:1b:85:e7:20:e7:91:
7f:30:3f:f0:46:e8:43:d7:04:f4:ac:fd:99:20:5b:
6c:44:f7:9b:7d:33:73:cc:92:fc:3b:12:08:e3:65:
50:80:3f:71:25:31:b6:70:bd:fc:d0:31:53:c8:96:
24:40:6c:f1:1b:a1:c1:42:92:6b:f5:fa:64:7a:f3:
5f:6c:fb:71:ef:84:1d:eb:c2:01:b4:42:78:d1:78:
1a:f7:9f:fe:bc:2e:26:f6:c8:e3:60:3a:a9:2f:c2:
f8:48:a4:f8:4e:24:32:7a:d5:be:ca:d5:3b:7c:b6:
c8:9a:a6:e7:3e:fa:1e:e6:96:e7:3c:e3:84:cd:ac:
3b:03:e2:8a:83:da:b2:7e:f2:d1:97:fb:36:65:ec:
dd:9c:a5:07:3a:13:29:5a:82:b3:b3:b4:85:b0:37:
df:b5:92:f8:2b:b9:39:c1:cd:f2:49:99:a4:db:e4:
55:b3:e8:3c:a4:87:20:a4:1c:1b:e2:cb:11:e3:dd:
89:f2:d7:f3:07:92:fe:a7:18:01:9d:a0:05:f1:b7:
02:83:de:28:15:2f:f3:ca:4f:c7:1f:0c:d5:57:7e:
ab:38:16:ea:b0:88:2f:65:e9:f2:c1:fc:07:a5:53:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B3:DB:D8:51:7E:A0:FC:4F:B1:61:45:A0:60:91:07:19:74:53:0E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ZrPb2FF-oPxPsWFFoGCRBxl0Uw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.186.0/23
31.56.189.0/24
31.59.143.0/24
31.59.150.0/24
217.60.32.0/22
217.60.178.0/23
217.60.182.0/23
IPv6:
2a14:6e40:4::/46
Signature Algorithm: sha256WithRSAEncryption
22:aa:d7:d7:d1:eb:3d:d7:2e:38:c0:1b:50:75:54:fc:65:e1:
37:61:45:3e:f1:ee:c5:92:3d:5a:7b:1d:63:d1:27:74:bb:11:
cc:af:9c:a4:0a:75:c0:2d:ab:9b:b8:5f:34:47:92:8a:89:9a:
c0:17:67:76:a5:b8:da:8a:88:91:d5:5d:ad:89:55:97:65:1c:
37:29:aa:f8:4c:6b:80:b1:56:9b:22:af:e1:f2:06:c0:05:d8:
fc:6d:27:e6:70:61:70:f5:92:88:28:d9:50:a3:50:02:92:ea:
6e:36:e9:c5:bd:43:e2:1c:5e:51:b4:58:7c:de:98:fa:02:3a:
1b:9f:a4:60:e5:91:a8:7d:07:88:e9:97:06:79:7a:e4:39:10:
79:8a:01:86:bc:21:89:91:84:da:67:08:83:b4:c2:f5:27:c5:
dc:d3:ac:08:e7:45:8e:94:82:66:8d:e1:49:bb:af:c4:a2:8c:
02:22:a8:cb:ee:c8:bf:c8:06:38:d0:e3:d6:61:98:97:ba:f7:
fb:89:d9:6b:03:03:ec:1f:5e:f2:33:62:ab:0d:d1:02:bd:9e:
33:b6:12:32:98:82:74:66:61:d3:90:27:db:ec:f3:e5:80:ae:
f1:af:bb:72:6f:35:b1:ab:d5:bf:ea:c7:17:6e:23:07:c2:de:
87:3e:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 19:06:13 2026 by rpki-client