Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dE5JgeV4D1e_BmiS_JbHn4CmicQ.roa
File: dE5JgeV4D1e_BmiS_JbHn4CmicQ.roa (raw, json)
Hash identifier: UTo9YBMR448nfNDr1gRvAMRs5Yxx0iK/T9l4oUyOV54=
Subject key identifier: 74:4E:49:81:E5:78:0F:57:BF:06:68:92:FC:96:C7:9F:80:A6:89:C4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A10C687E41BE99E06BB8652CFAD53F37F5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dE5JgeV4D1e_BmiS_JbHn4CmicQ.roa
Signing time: Mon 05 Oct 2026 14:12:17 +0000
ROA not before: Mon 05 Oct 2026 14:12:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.17.0/24 maxlen: 24
31.56.182.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.192.0/20 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.219.0/24 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
31.59.223.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
94.183.179.0/24 maxlen: 24
94.183.194.0/24 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.222.0/24 maxlen: 24
94.183.223.0/24 maxlen: 24
94.183.230.0/24 maxlen: 24
217.60.16.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.21.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.64.0/24 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:68:7e:41:be:99:e0:6b:b8:65:2c:fa:d5:3f:37:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 5 14:12:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=744e4981e5780f57bf066892fc96c79f80a689c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:b4:1a:a1:a6:0b:ef:f2:ab:7d:02:43:f8:
e6:4c:cc:81:4c:38:7c:89:f1:6c:2c:08:b6:6f:da:
20:f8:0e:01:59:6a:4f:79:8e:b7:3d:bf:98:24:45:
e8:26:46:75:18:7a:70:5c:8e:dd:43:dc:ef:79:56:
89:16:27:78:bf:8f:1f:6b:17:36:82:d5:2c:04:1b:
8a:9f:77:82:08:de:a5:c8:ac:e1:01:d9:86:0a:9a:
4a:e8:e7:9e:24:ea:10:4d:e2:28:2c:65:ed:c6:b5:
2e:5d:1b:27:f3:93:43:d4:82:d9:02:a7:b5:82:fd:
59:c9:fe:cf:56:64:3c:2c:9a:65:b2:b2:d8:78:89:
e1:20:91:f9:de:c6:6f:2f:55:75:3d:25:91:3b:03:
ec:97:38:cc:54:94:16:2a:ea:5d:1d:48:f5:ce:4b:
bd:a8:18:21:ee:36:cc:fb:83:4c:94:74:b6:10:52:
af:df:41:01:cf:cc:fd:30:4c:39:fa:4d:a8:5a:a1:
04:cf:90:46:40:ae:cf:00:9a:8c:51:b0:40:97:f6:
7e:5a:ce:17:ca:bd:04:15:fc:cf:41:95:10:3b:2e:
1d:14:39:b8:03:bb:d6:02:5a:76:e2:37:b1:52:d5:
9e:ef:7c:9c:5a:c3:7a:fb:a2:6e:cd:05:41:1b:ac:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:49:81:E5:78:0F:57:BF:06:68:92:FC:96:C7:9F:80:A6:89:C4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dE5JgeV4D1e_BmiS_JbHn4CmicQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.17.0/24
31.56.182.0/24
31.57.200.0/24
31.58.180.0/24
31.58.192.0/20
31.58.252.0/22
31.59.90.0/23
31.59.152.0/21
31.59.192.0/22
31.59.219.0-31.59.223.255
94.183.164.0/24
94.183.179.0/24
94.183.194.0/24
94.183.220.0/24
94.183.222.0/23
94.183.230.0/24
217.60.16.0/24
217.60.18.0-217.60.22.255
217.60.28.0/22
217.60.52.0/22
217.60.64.0/24
217.60.108.0-217.60.115.255
217.60.132.0-217.60.147.255
Signature Algorithm: sha256WithRSAEncryption
8b:10:f5:25:23:b4:be:3d:9f:85:ba:f0:92:85:12:22:e2:77:
9c:bb:91:93:45:dc:2a:f5:35:c5:1b:a8:7e:10:29:f9:b7:e7:
08:80:35:d9:93:77:18:0c:14:de:03:49:06:a4:09:bc:90:7f:
d0:b3:e1:47:f6:cf:6b:da:d5:b7:f2:88:7e:84:d3:ce:a5:3e:
e2:e8:6a:eb:0d:50:07:f3:c1:60:12:b5:65:84:89:cf:c3:77:
59:af:20:36:77:36:7f:6f:78:e8:5b:fe:7c:ab:37:c3:38:82:
c2:51:e6:06:3a:9d:43:6c:b4:24:87:1d:f2:78:e2:f2:66:de:
57:52:3b:5c:cb:cf:78:9f:91:9a:87:16:cb:97:68:22:f3:2a:
b0:56:df:54:11:71:de:e5:3c:72:2c:9e:41:6a:86:be:bf:c5:
86:70:cf:99:3e:b8:ae:47:57:b3:1e:23:57:67:bf:c1:ef:f0:
f6:ea:b4:d3:28:f6:ff:27:1d:8a:cf:f2:13:8e:2c:2e:20:a3:
ee:a6:21:2f:07:55:d9:56:9b:bc:dc:8e:7a:75:9a:fb:87:89:
fc:cc:93:30:42:b2:d0:fe:90:71:46:4f:9f:62:f8:b6:5f:6f:
6b:31:a7:69:7f:6a:64:69:de:bc:fd:03:68:c2:14:a6:3d:8b:
49:bb:82:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:11:57 2026 by rpki-client