Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/abnaEmfncoJJ9k0LJWjsh6t9k1A.roa
File: abnaEmfncoJJ9k0LJWjsh6t9k1A.roa (raw, json)
Hash identifier: B00AaClLSgkgQInWxFqddB5oM+nkfPvuvIMb6S6PjGc=
Subject key identifier: 69:B9:DA:12:67:E7:72:82:49:F6:4D:0B:25:68:EC:87:AB:7D:93:50
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A015CCA82F3D950881A37F86C7B1268AFF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/abnaEmfncoJJ9k0LJWjsh6t9k1A.roa
Signing time: Tue 18 Aug 2026 16:55:29 +0000
ROA not before: Tue 18 Aug 2026 16:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.79.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
2a14:6e40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:cc:a8:2f:3d:95:08:81:a3:7f:86:c7:b1:26:8a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 18 16:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b9da1267e7728249f64d0b2568ec87ab7d9350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:83:4c:3c:f4:e4:13:1f:ce:94:8c:6a:31:68:
57:59:2d:e8:ed:c6:c7:39:e3:04:5f:7d:e5:ed:ad:
db:ac:2e:50:a7:a2:57:9f:61:1d:30:69:1a:56:4f:
9d:17:8d:86:18:b2:99:85:78:cd:6b:77:9b:37:6d:
1a:d8:e7:c6:6f:dc:91:01:91:2b:d5:be:fa:ef:3b:
28:84:8e:df:2e:03:d9:68:97:c9:f9:cd:67:83:cd:
b7:3d:54:75:54:51:39:49:e2:8d:e5:4d:3f:6e:04:
59:85:ab:fa:5d:71:1a:ba:38:40:20:fc:75:67:da:
6f:f1:ba:e5:f9:e1:f0:7c:b5:70:9f:fc:00:f4:d7:
ce:8e:98:bd:37:6f:0c:a1:30:36:4d:7d:63:26:00:
10:f4:00:c7:2a:fc:54:1d:e7:3d:da:07:14:91:cb:
84:fd:31:cb:ec:a4:f1:bb:1a:58:ed:c4:06:0a:0a:
26:b4:23:47:f6:bd:53:d5:f0:34:2e:b3:a5:8c:d9:
b2:76:ec:27:aa:cc:58:88:6d:75:96:27:3b:4d:42:
4f:ba:ae:1d:95:53:f8:8b:c7:d5:5d:ee:f6:52:94:
9c:5a:8f:5d:ab:35:1f:a0:c9:f4:b2:42:ed:02:8c:
31:ab:b6:32:e2:b5:3c:f3:a6:88:cd:e6:c7:2f:41:
44:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B9:DA:12:67:E7:72:82:49:F6:4D:0B:25:68:EC:87:AB:7D:93:50
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/abnaEmfncoJJ9k0LJWjsh6t9k1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.79.0/24
31.56.107.0/24
31.56.126.0/24
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
IPv6:
2a14:6e40:2::/48
Signature Algorithm: sha256WithRSAEncryption
0a:92:65:1b:86:6c:dc:a0:a0:04:49:3f:fb:8c:bb:58:5f:09:
99:77:fd:c3:99:84:01:f4:16:09:b0:d0:aa:77:92:cf:f4:a2:
7d:19:cb:a1:dc:09:37:b2:10:32:8a:15:55:14:1c:45:7e:ce:
74:ca:3b:f6:5a:5f:77:82:11:20:94:28:a4:c9:35:b0:67:49:
13:81:55:1d:1b:2e:a2:10:00:32:32:6c:a9:c0:6f:2d:4a:0b:
d8:b9:fa:3a:b0:bf:36:96:49:99:d7:47:45:ec:5c:12:0e:54:
03:b8:a5:70:64:e6:20:10:1b:5b:de:c4:85:0c:c3:d0:6d:ef:
b6:aa:37:44:70:e3:ff:b7:71:4c:d5:3b:7e:39:88:f8:14:2b:
4c:12:f2:c0:ba:60:22:a6:ad:60:1d:07:c1:fb:e1:3c:c2:50:
12:f4:0f:7b:93:81:cc:d9:42:e8:2b:6a:bd:18:8d:e9:43:47:
28:6d:c8:02:e4:15:f3:b1:41:89:23:e4:84:f5:66:4c:d3:5e:
04:86:2e:a7:86:82:78:af:1d:d8:6e:f5:9f:17:90:9a:ed:ac:
30:33:04:9f:32:ed:37:ad:15:80:3a:d2:f7:92:a9:ef:b4:25:
92:21:48:ed:af:43:c7:d4:51:a6:05:be:96:3c:b0:7f:ae:c2:
5e:3c:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:07 2026 by rpki-client