Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/browKbv0l2okonDmQpUBp1Qz0Ms.roa
File: browKbv0l2okonDmQpUBp1Qz0Ms.roa (raw, json)
Hash identifier: JqzKAJwlEnY8Gmi34eBYpY5OWgVxVLy8VXtzN98bwkM=
Subject key identifier: 6E:BA:30:29:BB:F4:97:6A:24:A2:70:E6:42:95:01:A7:54:33:D0:CB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0F8658D539499C8520EFF943702443C4E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/browKbv0l2okonDmQpUBp1Qz0Ms.roa
Signing time: Thu 01 Oct 2026 16:56:39 +0000
ROA not before: Thu 01 Oct 2026 16:56:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 31.56.5.0/24 maxlen: 24
31.56.119.0/24 maxlen: 24
31.56.128.0/24 maxlen: 24
31.56.129.0/24 maxlen: 24
31.56.130.0/24 maxlen: 24
31.56.131.0/24 maxlen: 24
31.56.132.0/24 maxlen: 24
31.56.133.0/24 maxlen: 24
31.56.134.0/24 maxlen: 24
31.56.135.0/24 maxlen: 24
31.56.136.0/24 maxlen: 24
31.56.137.0/24 maxlen: 24
31.56.207.0/24 maxlen: 24
31.56.246.0/24 maxlen: 24
31.56.247.0/24 maxlen: 24
31.56.248.0/24 maxlen: 24
31.56.249.0/24 maxlen: 24
31.56.250.0/24 maxlen: 24
31.56.251.0/24 maxlen: 24
31.56.252.0/24 maxlen: 24
31.56.253.0/24 maxlen: 24
31.56.254.0/24 maxlen: 24
31.56.255.0/24 maxlen: 24
31.57.41.0/24 maxlen: 24
31.57.42.0/24 maxlen: 24
31.57.82.0/24 maxlen: 24
31.59.0.0/24 maxlen: 24
31.59.1.0/24 maxlen: 24
31.59.2.0/24 maxlen: 24
31.59.3.0/24 maxlen: 24
31.59.4.0/24 maxlen: 24
31.59.5.0/24 maxlen: 24
31.59.6.0/24 maxlen: 24
31.59.7.0/24 maxlen: 24
31.59.8.0/24 maxlen: 24
31.59.9.0/24 maxlen: 24
31.59.246.0/24 maxlen: 24
31.59.247.0/24 maxlen: 24
217.60.126.0/24 maxlen: 24
217.60.127.0/24 maxlen: 24
217.60.160.0/24 maxlen: 24
217.60.161.0/24 maxlen: 24
217.60.166.0/24 maxlen: 24
217.60.167.0/24 maxlen: 24
217.60.168.0/24 maxlen: 24
217.60.169.0/24 maxlen: 24
217.60.170.0/24 maxlen: 24
217.60.171.0/24 maxlen: 24
217.60.172.0/24 maxlen: 24
217.60.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:65:8d:53:94:99:c8:52:0e:ff:94:37:02:44:3c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 1 16:56:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eba3029bbf4976a24a270e6429501a75433d0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:88:5f:d0:29:6b:f7:13:98:15:47:dd:75:
e0:81:4b:3d:e1:e9:75:f7:c8:0c:3c:10:24:92:1c:
98:9b:dc:ef:bb:a7:a6:23:75:de:11:e7:e5:c3:74:
31:a9:39:5b:2a:93:35:e6:90:a5:7a:a4:c8:c5:b7:
3e:f5:40:b5:c8:7a:43:70:87:8b:37:8b:8d:30:bf:
c5:33:1c:2a:0d:db:64:b5:49:a0:ed:46:f9:4d:90:
c3:10:4b:f0:48:09:52:1a:0c:64:7a:e0:b8:59:7e:
ba:59:bf:b5:e9:04:83:9d:f7:0c:7b:09:af:9b:7f:
0a:ec:d5:ff:18:d2:98:e2:d0:d5:e1:02:f4:af:ea:
ee:6c:e4:c8:34:c3:3c:b1:86:55:14:b1:aa:f3:68:
e6:88:ee:61:32:64:df:b2:06:7f:fe:af:fc:d7:82:
6e:ef:87:0d:a8:42:19:4d:50:fa:a9:d2:be:f6:7a:
c7:ee:70:79:9b:83:a9:c7:b7:ef:15:ca:80:96:31:
92:1b:da:0f:95:65:a6:9a:e3:18:7a:44:9e:ab:df:
51:9a:c3:f2:74:11:d0:93:2b:f7:8c:6f:a4:fd:ca:
1f:3c:bb:27:df:72:d1:34:c6:d5:1b:8d:d2:dd:4b:
37:d8:26:9d:c8:db:fb:60:3b:e5:d9:7a:e5:f5:92:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:30:29:BB:F4:97:6A:24:A2:70:E6:42:95:01:A7:54:33:D0:CB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/browKbv0l2okonDmQpUBp1Qz0Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.5.0/24
31.56.119.0/24
31.56.128.0-31.56.137.255
31.56.207.0/24
31.56.246.0-31.56.255.255
31.57.41.0-31.57.42.255
31.57.82.0/24
31.59.0.0-31.59.9.255
31.59.246.0/23
217.60.126.0/23
217.60.160.0/23
217.60.166.0-217.60.173.255
Signature Algorithm: sha256WithRSAEncryption
3d:4e:26:98:9b:cf:aa:17:01:f9:1d:01:d2:3b:d7:c1:82:e3:
20:51:e3:aa:b0:dd:22:74:2e:92:1b:3c:58:c1:8a:7d:d3:f0:
96:fc:e7:a8:82:03:cb:92:c0:8d:e2:2a:19:38:2e:c8:f1:84:
ac:01:2e:37:05:3f:a1:e3:b0:3d:82:e6:97:47:cf:f9:31:2e:
67:5b:73:f4:b2:d9:94:83:27:a5:81:c3:66:09:75:71:a6:67:
f8:0f:66:cc:76:e3:62:2d:a0:e9:9d:3a:54:5c:5d:51:be:dc:
e5:2e:99:9f:e4:85:82:70:2f:40:8d:76:45:59:1c:35:10:3b:
eb:06:c1:8a:90:55:fa:e0:71:3f:61:79:16:d8:5e:ed:d6:6a:
17:a8:e0:a9:2b:f5:62:18:ab:5e:68:89:e3:dd:25:7b:fb:07:
f7:bf:20:df:20:06:18:1b:e3:70:8d:98:0a:fa:f2:64:06:ad:
38:d6:81:53:c9:df:a3:3e:38:05:c1:6d:bd:52:6d:7f:88:7e:
78:24:fc:a0:a3:76:23:35:3c:cf:4f:87:a9:2f:68:e0:b6:15:
b3:09:9d:92:91:a8:0b:fd:22:d9:31:4c:4b:c7:1d:cd:20:a5:
91:12:64:53:40:7c:56:70:68:33:b9:e1:36:7c:2c:a0:0d:28:
f0:05:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:23 2026 by rpki-client