Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ddvVr-cOU7bbT2MQZgmwPdGXSOc.roa
File: ddvVr-cOU7bbT2MQZgmwPdGXSOc.roa (raw, json)
Hash identifier: xy096GDUHr1hRQnPGnZP4VA4xyoyZC1wCpQAWxzhr8Q=
Subject key identifier: 75:DB:D5:AF:E7:0E:53:B6:DB:4F:63:10:66:09:B0:3D:D1:97:48:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1627F8AA305A24AC91A916B4EE8285F29
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ddvVr-cOU7bbT2MQZgmwPdGXSOc.roa
Signing time: Thu 22 Oct 2026 07:24:48 +0000
ROA not before: Thu 22 Oct 2026 07:24:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.35.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:7f:8a:a3:05:a2:4a:c9:1a:91:6b:4e:e8:28:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 22 07:24:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75dbd5afe70e53b6db4f63106609b03dd19748e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:6f:4c:bf:f5:ce:d0:d8:53:28:ba:95:0f:
95:52:98:e0:fa:52:48:dd:1d:75:5f:74:1a:d0:c1:
b4:b0:c4:9f:fd:72:09:79:50:fe:e2:f6:0f:c4:27:
00:06:20:d4:9f:0b:e4:b8:ee:28:d5:d9:e2:ec:b3:
6c:21:d6:81:de:80:c5:77:c0:57:10:c2:77:e8:48:
53:f2:80:57:18:6c:a4:46:b8:fb:95:20:b1:34:6a:
62:d7:ca:4c:e6:25:ac:1d:38:af:f2:c5:0e:b1:93:
79:e2:3a:ee:e4:ba:60:25:71:46:25:bd:d8:ad:55:
9c:fa:65:47:32:47:13:78:bb:13:e4:65:67:1e:99:
a3:6c:75:2d:fc:eb:d9:da:6b:ae:33:78:6e:05:7c:
61:da:38:ba:68:c5:b0:71:5a:0f:1f:6a:fe:6d:65:
f0:6d:a3:ce:fe:9f:e9:b9:2c:8c:6a:c6:9c:78:cd:
de:15:c5:1f:5b:f1:12:dc:bc:4e:ba:c7:f4:66:7c:
a4:a7:eb:d3:19:9f:46:f6:6a:68:50:cb:1c:2c:63:
72:40:b5:5e:37:a0:9a:71:7b:4c:3b:b5:c3:7c:bd:
23:e0:f5:bc:b8:47:c6:5e:91:4b:ae:f5:d5:20:52:
a9:3f:9f:5a:b2:ce:06:b9:a9:93:7e:61:5b:14:65:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DB:D5:AF:E7:0E:53:B6:DB:4F:63:10:66:09:B0:3D:D1:97:48:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ddvVr-cOU7bbT2MQZgmwPdGXSOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.35.0/24
31.56.107.0/24
31.56.126.0/24
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
70:58:9a:01:40:d7:6a:ae:75:34:98:99:54:63:18:63:f2:a2:
de:13:e5:d4:75:4e:ae:ab:99:af:8d:11:f9:9b:a0:2a:f7:49:
a9:f9:81:d2:b1:78:9c:82:d5:b0:a0:24:82:c2:15:2b:8a:9c:
74:ea:a5:03:9c:47:01:91:0b:c4:20:cb:fb:20:92:8d:38:43:
a8:2d:b2:83:4f:2e:6d:60:66:3f:f4:9b:87:41:b5:29:60:aa:
2b:26:7a:45:94:2e:04:21:fc:80:f2:6f:76:f4:b1:4e:c7:78:
d0:bc:9c:fd:69:3a:85:31:00:41:64:a7:87:6f:08:77:a5:cc:
7f:93:b4:4b:70:1f:a7:59:10:78:97:7b:e5:48:2d:21:46:e7:
ed:92:be:96:77:a1:fa:4f:97:8a:ed:37:10:42:cd:bc:08:f1:
89:56:a6:fe:ec:91:6f:df:5f:a8:cb:7a:ea:cd:cf:5b:56:fe:
35:90:32:53:d3:09:15:eb:6c:06:c5:35:f7:4a:83:5a:69:a9:
ce:45:f4:de:6b:98:1b:97:c7:6c:f2:ea:40:fe:c9:7e:d1:41:
76:ca:cd:20:96:22:7e:99:62:e6:df:58:be:f0:b8:aa:37:d3:
60:09:96:ef:32:1f:dc:19:4c:ea:c5:5f:61:c6:3b:ca:4f:56:
8e:c4:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:49:58 2026 by rpki-client