Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/er9Eas_dc9yqp1UEHemATwpBJ0Y.roa
File: er9Eas_dc9yqp1UEHemATwpBJ0Y.roa (raw, json)
Hash identifier: ya2b5sVlQ+B8ZwaUyWyDFEs33mddrFQevsJ0pOtwSqQ=
Subject key identifier: 7A:BF:44:6A:CF:DD:73:DC:AA:A7:55:04:1D:E9:80:4F:0A:41:27:46
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A16ED6B1E5630136086CD434BE665F4CD4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/er9Eas_dc9yqp1UEHemATwpBJ0Y.roa
Signing time: Sat 24 Oct 2026 16:55:26 +0000
ROA not before: Sat 24 Oct 2026 16:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:d6:b1:e5:63:01:36:08:6c:d4:34:be:66:5f:4c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 24 16:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7abf446acfdd73dcaaa755041de9804f0a412746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:7d:ec:a0:e6:64:6d:9c:4c:da:f2:ca:c1:
ac:8c:ad:9a:f7:18:61:db:cf:74:d9:0c:a6:fc:2e:
c8:58:f9:fe:3b:04:75:07:0d:cf:77:66:17:e8:27:
ea:84:36:17:55:13:86:0e:ad:b9:7e:0e:48:88:b6:
3c:84:b4:3c:46:c9:39:b0:a2:af:16:8f:80:d4:4a:
dc:31:5a:b6:20:ef:f4:a8:87:c7:a6:20:a6:56:03:
33:00:9f:38:4f:a4:94:36:0a:d6:96:47:08:18:a0:
33:cd:f5:36:36:18:6c:2e:36:29:2e:b4:8c:91:63:
9b:a4:99:97:8b:d1:be:15:77:ab:58:6d:b3:ab:61:
02:4a:0c:f9:47:83:97:53:2d:5e:b9:5a:42:15:d4:
22:b9:ae:3f:53:79:d7:7f:52:4a:a1:a0:05:7c:5a:
18:03:11:8a:71:b9:af:b3:99:a8:32:e3:69:34:17:
72:c8:69:20:3e:0c:17:a9:d3:e4:84:b8:1d:45:ab:
d5:d5:26:dd:2a:d7:4c:b3:74:f2:2d:8f:1e:24:8f:
c6:63:99:02:51:7b:fc:bc:1a:f7:ab:64:52:45:a7:
ac:8e:6d:4d:50:49:38:80:2e:8b:09:f8:3c:33:f5:
f3:fb:d7:44:c4:be:58:6d:0e:b2:10:10:aa:1e:0d:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BF:44:6A:CF:DD:73:DC:AA:A7:55:04:1D:E9:80:4F:0A:41:27:46
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/er9Eas_dc9yqp1UEHemATwpBJ0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.115.0/24
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
06:4e:85:43:73:97:8f:80:fb:05:ab:47:96:68:12:8a:4c:77:
1d:b2:c6:1e:5f:3c:4e:27:d9:a1:71:6d:c0:d8:40:5f:72:4b:
66:3a:5e:11:fa:b2:4b:08:6b:e0:f8:d4:83:f9:b4:05:f9:5c:
d9:f0:0c:c0:0f:d7:27:cf:10:47:0b:b8:1d:05:39:82:3f:4c:
90:60:21:e1:0b:47:3e:dc:73:97:44:14:58:21:5a:03:4b:36:
c6:17:94:73:93:5a:99:a7:99:14:19:b9:c6:fd:5a:76:cf:40:
b9:d2:c5:8e:20:31:62:81:2b:d2:42:8a:5e:94:19:f2:eb:37:
a8:52:70:28:92:1b:ea:66:bd:76:f6:de:cb:1f:7e:6f:e9:f0:
6a:dd:44:fc:8e:ee:d9:58:dd:53:33:14:e1:b6:69:e8:92:4a:
21:fa:9d:38:60:e8:ad:94:ad:b5:66:70:f7:cd:86:31:06:e3:
2b:dd:39:e5:51:95:1c:85:a6:b9:34:9f:fb:cd:8f:81:ab:10:
6f:31:42:6d:e1:a2:40:d1:ac:37:f8:f3:43:f9:77:ca:8f:76:
a9:7d:18:ab:63:f8:78:35:38:df:9b:23:ad:46:f8:26:2b:24:
d4:2f:3e:b8:69:2f:e3:67:c0:3a:6c:b0:e1:93:c0:9f:d8:51:
67:7b:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:15 2026 by rpki-client