Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dQbqB-djDIcsJDrmuENMTN3P6RM.roa
File: dQbqB-djDIcsJDrmuENMTN3P6RM.roa (raw, json)
Hash identifier: AGlup1NYhM5lVGxB/Ss/h5ZitjFf+qO3XjWD3t+JIfg=
Subject key identifier: 75:06:EA:07:E7:63:0C:87:2C:24:3A:E6:B8:43:4C:4C:DD:CF:E9:13
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0AB1757C694A5A507122DDFA7E0C4022C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dQbqB-djDIcsJDrmuENMTN3P6RM.roa
Signing time: Wed 16 Sep 2026 16:40:28 +0000
ROA not before: Wed 16 Sep 2026 16:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.98.0/24 maxlen: 24
31.56.102.0/24 maxlen: 24
31.56.103.0/24 maxlen: 24
31.56.150.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.121.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.57.225.0/24 maxlen: 24
31.58.17.0/24 maxlen: 24
31.58.31.0/24 maxlen: 24
31.58.47.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.59.23.0/24 maxlen: 24
31.59.31.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:17:57:c6:94:a5:a5:07:12:2d:df:a7:e0:c4:02:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 16 16:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7506ea07e7630c872c243ae6b8434c4cddcfe913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:b3:89:55:b4:e8:83:c2:3b:0a:af:30:48:
d5:19:8e:a9:cb:83:e2:2b:52:67:b1:6a:04:45:25:
48:2b:86:ea:cd:a9:66:6f:59:4c:68:3b:16:1a:6f:
26:34:79:ee:44:47:f6:1e:41:4a:76:79:50:fc:3f:
ef:71:a3:83:bf:53:9b:ab:fb:ef:12:18:3b:e8:bd:
28:46:7c:1c:c0:6f:4b:c9:36:0f:8f:28:ee:df:9c:
d8:18:79:51:27:7d:7f:37:f8:3b:32:64:00:18:2c:
71:f2:de:cb:1e:ae:f3:b2:49:e8:a6:cb:08:14:41:
f7:d6:7e:d0:74:7d:69:bc:c5:6b:a4:00:74:18:bd:
90:58:e9:bd:5a:22:26:d6:8e:d4:11:be:91:a8:d2:
8c:35:11:84:4c:f7:85:53:8b:4f:8d:0c:29:2d:3c:
ba:51:35:aa:13:ad:c8:69:e2:98:9b:9d:94:8c:52:
12:f3:f6:5b:e4:a3:ab:46:44:15:c6:99:58:02:53:
a5:6c:5e:cd:e7:8e:ab:cf:29:62:c9:93:2f:3c:db:
96:36:ad:c1:06:02:0b:88:87:7a:f9:7a:16:30:4b:
90:ef:1a:81:01:30:79:24:81:ea:f8:9a:12:bf:fd:
16:87:3a:21:10:aa:5e:c0:40:79:17:08:8c:ff:e7:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:06:EA:07:E7:63:0C:87:2C:24:3A:E6:B8:43:4C:4C:DD:CF:E9:13
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dQbqB-djDIcsJDrmuENMTN3P6RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.98.0/24
31.56.102.0/23
31.56.150.0/24
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.35.0/24
31.57.121.0/24
31.57.206.0/24
31.57.225.0/24
31.58.17.0/24
31.58.31.0/24
31.58.47.0/24
31.58.90.0/24
31.58.168.0/24
31.59.23.0/24
31.59.31.0/24
31.59.70.0/24
31.59.173.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
84:7f:a5:ef:f6:76:19:31:48:d0:58:66:56:a0:ef:fb:68:11:
c6:82:80:b7:35:be:86:b7:bd:4e:fc:09:88:89:a2:aa:46:4d:
fd:de:72:b4:7f:40:e8:f1:e3:60:33:f8:cb:f4:e9:b2:72:e4:
34:25:53:a4:c3:72:6e:ed:b1:22:f2:70:5a:2d:b0:09:eb:a0:
f5:e8:a0:75:fc:21:5f:2b:e3:2c:d6:34:38:20:82:86:3c:50:
e2:e1:64:67:27:d5:de:ed:34:a3:47:9c:c5:d6:6f:e2:fa:ed:
4f:f9:bd:c5:ac:4e:cf:5a:6b:9d:1b:8b:a6:c0:d5:29:3f:2d:
41:ba:be:56:ee:83:6b:ef:08:e4:31:02:b8:05:8a:83:40:25:
4c:ec:14:8c:31:ed:92:c7:8d:93:7e:2a:8e:58:2a:0d:68:fc:
dc:9d:e3:c2:6a:fd:16:53:63:bb:e1:27:3c:c9:4c:83:8a:10:
77:23:24:02:83:a9:3c:25:0b:43:54:95:01:e5:bd:0e:b4:f0:
6d:b7:43:1f:ae:fc:ef:81:17:2a:20:02:2d:d4:52:37:f9:c4:
37:20:f3:66:ca:9c:d7:db:c5:4e:db:f5:fe:a9:50:4a:f5:8a:
f4:34:fa:bb:b4:f4:64:bf:da:3d:15:78:f0:f7:d1:85:4d:d4:
9e:06:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:15:40 2026 by rpki-client