Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e_4-OvFc3-wpW_Ex1of3vXyx9B0.roa
File: e_4-OvFc3-wpW_Ex1of3vXyx9B0.roa (raw, json)
Hash identifier: csnvRVkS9+sAwD8r0BpIm5mHzk8lElODbJCvGVl1ru8=
Subject key identifier: 7B:FE:3E:3A:F1:5C:DF:EC:29:5B:F1:31:D6:87:F7:BD:7C:B1:F4:1D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A169D870879480864A577BE042AF22BF15
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e_4-OvFc3-wpW_Ex1of3vXyx9B0.roa
Signing time: Fri 23 Oct 2026 17:39:14 +0000
ROA not before: Fri 23 Oct 2026 17:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.56.16.0/24 maxlen: 24
31.56.55.0/24 maxlen: 24
31.56.188.0/24 maxlen: 24
31.56.214.0/24 maxlen: 24
31.57.16.0/24 maxlen: 24
31.57.17.0/24 maxlen: 24
31.57.18.0/24 maxlen: 24
31.57.19.0/24 maxlen: 24
31.57.22.0/24 maxlen: 24
31.57.23.0/24 maxlen: 24
31.58.92.0/24 maxlen: 24
31.58.93.0/24 maxlen: 24
31.58.116.0/24 maxlen: 24
31.58.117.0/24 maxlen: 24
31.58.118.0/24 maxlen: 24
31.58.119.0/24 maxlen: 24
31.58.176.0/24 maxlen: 24
31.58.177.0/24 maxlen: 24
31.58.184.0/24 maxlen: 24
31.58.185.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.254.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.124.0/24 maxlen: 24
31.59.125.0/24 maxlen: 24
31.59.127.0/24 maxlen: 24
31.59.142.0/24 maxlen: 24
31.59.149.0/24 maxlen: 24
31.59.181.0/24 maxlen: 24
31.59.183.0/24 maxlen: 24
31.59.194.0/24 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.200.0/24 maxlen: 24
94.183.201.0/24 maxlen: 24
94.183.202.0/24 maxlen: 24
94.183.204.0/24 maxlen: 24
94.183.205.0/24 maxlen: 24
94.183.217.0/24 maxlen: 24
94.183.219.0/24 maxlen: 24
94.183.221.0/24 maxlen: 24
94.183.228.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
94.183.230.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
94.183.253.0/24 maxlen: 24
94.183.255.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.23.0/24 maxlen: 24
217.60.64.0/24 maxlen: 24
217.60.65.0/24 maxlen: 24
217.60.68.0/24 maxlen: 24
217.60.94.0/24 maxlen: 24
217.60.95.0/24 maxlen: 24
217.60.176.0/24 maxlen: 24
217.60.181.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:d8:70:87:94:80:86:4a:57:7b:e0:42:af:22:bf:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 17:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bfe3e3af15cdfec295bf131d687f7bd7cb1f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:14:d4:77:90:ea:16:d9:5c:56:f1:57:d6:08:
a3:f3:89:33:a0:80:9d:5f:81:3c:84:1f:2f:8f:c0:
da:20:ce:29:cf:89:f9:82:1e:9c:3e:50:ef:ed:10:
0f:6a:fc:43:47:87:ed:8a:3b:a8:6c:83:1c:d4:34:
16:55:d8:27:8f:d9:a8:5a:af:a5:00:5e:46:4e:53:
25:31:a0:7b:fe:51:e8:91:84:e7:d3:6d:63:a0:62:
f9:a6:f9:ab:2f:83:dc:62:25:ef:a4:a6:67:48:78:
90:45:93:10:73:bc:4e:62:7d:b5:c5:b6:59:db:0a:
18:3c:ed:8d:76:7d:b5:4d:70:62:b3:ec:83:4e:ce:
12:d6:b4:5d:73:04:c8:a7:c3:ff:ac:80:c3:ab:84:
c7:4e:e4:6d:63:2e:b0:2c:15:dc:ba:09:be:fd:d3:
1c:fa:9d:8c:79:73:ef:c7:dc:27:36:57:ef:a2:99:
ef:09:af:59:20:bc:d9:c7:e8:0a:29:a9:6f:4b:51:
9f:b3:0e:59:d4:8f:04:f0:45:eb:d4:d0:6b:10:2e:
e4:7b:11:54:98:2e:40:33:70:97:09:d8:60:4c:c6:
10:4e:ed:79:c9:cc:b0:c7:0f:f4:c2:e9:44:61:9f:
31:0b:74:71:7c:cd:28:51:5f:50:2f:73:6f:97:f5:
e5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FE:3E:3A:F1:5C:DF:EC:29:5B:F1:31:D6:87:F7:BD:7C:B1:F4:1D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e_4-OvFc3-wpW_Ex1of3vXyx9B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/24
31.56.55.0/24
31.56.188.0/24
31.56.214.0/24
31.57.16.0/22
31.57.22.0/23
31.58.92.0/23
31.58.116.0/22
31.58.176.0/23
31.58.184.0/23
31.58.240.0/24
31.58.252.0/22
31.59.36.0/24
31.59.124.0/23
31.59.127.0/24
31.59.142.0/24
31.59.149.0/24
31.59.181.0/24
31.59.183.0/24
31.59.194.0/24
31.59.208.0/24
31.59.221.0/24
94.183.152.0/24
94.183.157.0/24
94.183.200.0-94.183.202.255
94.183.204.0/23
94.183.217.0/24
94.183.219.0/24
94.183.221.0/24
94.183.228.0-94.183.230.255
94.183.241.0/24
94.183.253.0/24
94.183.255.0/24
217.60.13.0/24
217.60.23.0/24
217.60.64.0/23
217.60.68.0/24
217.60.94.0/23
217.60.176.0/24
217.60.181.0/24
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:8f:2a:5d:b4:4d:80:93:52:eb:0b:3f:b6:db:15:f1:2e:fd:
d4:b1:ff:c8:52:6d:8c:9c:3c:d9:65:e9:ae:94:25:4d:f6:72:
bd:1d:5e:d1:aa:d7:1b:4e:e3:dd:87:fb:bc:fd:fc:21:ab:1e:
9d:12:49:31:c4:f6:e9:d4:0b:4a:7b:61:4f:29:8e:93:fe:28:
cd:54:ca:d2:57:84:9d:63:af:da:5a:7e:b0:15:d2:24:2a:7f:
62:12:72:2b:37:bf:02:8d:53:c6:9f:97:56:3e:48:04:45:43:
18:43:dc:f0:ba:53:af:b4:f6:11:e1:5c:2a:34:30:a3:29:e7:
b0:d5:e9:be:85:29:1d:46:ba:a4:86:00:e1:e6:57:a8:04:51:
c9:73:08:c1:5b:df:3e:73:f5:9c:bf:7d:2b:e2:71:9f:0e:c5:
9e:46:02:7c:4b:f2:be:1f:e0:83:82:e0:4d:b9:c2:56:b1:ac:
24:a4:a5:ad:fc:b1:d1:52:7c:8e:63:67:78:13:ee:27:1d:84:
e9:dd:36:40:4e:17:7b:3b:02:f8:84:fd:fb:09:22:7a:ae:24:
cf:67:b4:59:da:24:7c:e6:5c:13:ed:80:93:0f:ac:3c:60:5f:
32:12:9b:34:be:ee:b1:ed:1b:f5:7e:bc:da:5f:d9:34:a8:43:
e6:71:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:03 2026 by rpki-client