Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g8lQcGfpFL_jCdWolPm4nSx09Gs.roa
File: g8lQcGfpFL_jCdWolPm4nSx09Gs.roa (raw, json)
Hash identifier: tOSy1MM6hmKy5ranKWoIFWmyP17y1RK+nson1MPxk1E=
Subject key identifier: 83:C9:50:70:67:E9:14:BF:E3:09:D5:A8:94:F9:B8:9D:2C:74:F4:6B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C81018BD950F6685FC0E4BB1F538EF809
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g8lQcGfpFL_jCdWolPm4nSx09Gs.roa
Signing time: Sat 21 Feb 2026 16:21:28 +0000
ROA not before: Sat 21 Feb 2026 16:21:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:01:8b:d9:50:f6:68:5f:c0:e4:bb:1f:53:8e:f8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 21 16:21:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83c9507067e914bfe309d5a894f9b89d2c74f46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:e6:d1:5c:ef:b1:89:7b:bd:5c:45:68:46:
01:e4:e3:a9:29:13:29:b5:cf:8b:92:fe:85:28:00:
f0:09:23:80:56:b3:4a:d4:14:ef:23:e3:bc:21:41:
14:7a:24:b3:46:77:69:37:c1:5f:14:80:9e:bc:50:
ab:3d:0c:de:bd:6b:49:11:31:23:6e:f5:d8:82:7a:
69:fb:c3:29:8f:26:ab:2b:27:69:3c:85:18:ec:2c:
4a:82:e5:0a:78:23:f8:8b:3a:c2:d1:c7:e2:fb:f9:
e0:06:b7:50:af:38:08:e5:49:5f:1e:db:9e:46:16:
2b:d5:9a:cf:9b:21:89:3a:9e:90:b7:f2:a3:81:b1:
65:85:f7:76:10:77:bf:24:e2:bb:4f:1f:36:65:5a:
b9:e9:35:98:60:07:cb:45:5a:0e:b0:8e:3f:5b:42:
cf:39:4a:2e:ae:02:e0:14:a1:29:01:e6:c4:6b:c5:
c9:3a:10:45:6c:07:d2:f9:ee:f5:2b:d0:d2:1d:c0:
d9:92:84:07:dc:62:f2:47:ef:be:b7:4f:3d:07:de:
04:6b:ff:af:c7:8a:fa:bc:a3:04:69:00:92:de:a1:
f1:67:cb:b9:86:d5:6f:d0:c8:67:ef:66:85:94:79:
4b:51:43:ff:5c:6a:e0:5e:ff:40:ab:2c:9b:f1:35:
be:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:50:70:67:E9:14:BF:E3:09:D5:A8:94:F9:B8:9D:2C:74:F4:6B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g8lQcGfpFL_jCdWolPm4nSx09Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
90:3e:5e:1e:ad:0e:de:ca:79:40:bd:2a:77:fd:01:62:02:7b:
55:ca:7f:29:b6:08:b5:f4:f3:0e:1c:38:e8:9b:49:1b:5f:48:
48:1c:79:36:81:47:7f:c0:bd:47:d2:1d:78:e8:95:68:23:49:
c9:1c:8d:d4:0d:97:30:5f:97:5d:2e:e2:9c:b1:dc:39:8e:c5:
04:10:8b:3c:a6:3a:12:3c:46:4b:bc:ba:2d:b7:bf:02:5c:ad:
04:20:7a:88:9e:38:a8:f1:2a:c8:f8:b7:0e:9e:8c:55:98:e2:
e7:94:ae:26:f9:37:ab:26:1b:13:0a:64:45:3e:c0:21:b1:22:
57:71:3b:39:80:f0:ba:17:5f:7d:f8:37:22:7d:1f:85:88:81:
65:f3:c6:71:09:ea:80:ab:06:7a:91:5d:d8:1c:27:c4:01:0b:
7e:4a:7d:34:fd:66:55:b6:40:06:53:94:98:8d:5b:2e:1d:1b:
a3:3c:72:0d:15:67:18:6f:49:6b:70:05:f8:27:b9:75:54:7f:
9a:e0:db:34:6a:9f:ad:a2:ea:c2:ed:15:0c:c9:16:f1:a6:8f:
46:5c:7e:29:1f:3b:6c:2c:7e:20:49:cc:ea:06:37:78:cd:e9:
ba:b0:07:b9:03:f6:c3:74:7c:ba:b2:9c:21:f1:97:3c:cb:73:
a4:73:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 14:09:15 2026 by rpki-client