Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gN836DDopNAj2DCVGyEPywAmhI4.roa
File: gN836DDopNAj2DCVGyEPywAmhI4.roa (raw, json)
Hash identifier: 4SaYBzmGS8V6fIKrw1G1XujZe9CLx/g5teay4+XEPFA=
Subject key identifier: 80:DF:37:E8:30:E8:A4:D0:23:D8:30:95:1B:21:0F:CB:00:26:84:8E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1312024D3F7223733A8FA581E8768A3C4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gN836DDopNAj2DCVGyEPywAmhI4.roa
Signing time: Mon 12 Oct 2026 17:19:12 +0000
ROA not before: Mon 12 Oct 2026 17:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 31.56.17.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.153.0/24 maxlen: 24
94.183.154.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.166.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:20:24:d3:f7:22:37:33:a8:fa:58:1e:87:68:a3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 12 17:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80df37e830e8a4d023d830951b210fcb0026848e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:66:9a:52:90:be:72:ef:ef:d0:7b:9f:40:
d6:77:de:75:ac:84:03:2c:5a:b8:e0:84:50:8e:b8:
20:2f:52:b2:54:73:5b:e1:7a:9e:83:8a:30:67:c2:
3d:19:63:a6:e1:6d:a9:bb:a5:4d:ed:c3:3c:c0:fb:
4a:76:8b:99:80:28:8b:d5:66:6a:79:af:39:12:4c:
64:e5:75:b1:a3:c0:f8:cb:69:1b:7b:c1:64:2a:10:
d9:61:ae:5b:29:00:b9:68:48:12:f5:0e:e3:52:37:
c1:c2:1b:75:3f:ab:00:1e:f5:64:57:fc:b6:88:e0:
65:c2:b6:6a:39:d5:ac:a0:10:9f:13:7d:3c:3c:cb:
12:b9:63:7a:4a:8c:98:5a:19:90:25:32:97:9b:ee:
12:ce:3c:85:a7:5a:e7:0b:a9:42:da:f6:16:4d:d7:
70:28:b1:37:d1:63:3c:23:c0:4b:26:ec:e6:46:7e:
43:27:c0:96:40:78:2e:3d:c4:ac:5f:e1:59:2e:a9:
65:75:6d:cf:4f:60:b2:91:ec:a0:93:57:0e:9c:9c:
e1:af:73:ff:6c:b4:29:8c:c9:99:10:49:6b:3b:b9:
f5:2c:7b:47:5b:0e:fd:99:15:3a:97:fa:bd:0e:b2:
d1:99:2c:4c:bb:21:f9:9f:78:97:ae:03:2e:f6:b6:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DF:37:E8:30:E8:A4:D0:23:D8:30:95:1B:21:0F:CB:00:26:84:8E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gN836DDopNAj2DCVGyEPywAmhI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.17.0/24
31.56.89.0/24
31.58.237.0/24
94.183.150.0/24
94.183.153.0-94.183.154.255
94.183.162.0/24
94.183.166.0/24
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:39:dc:f4:a0:d5:50:1d:a9:22:0f:19:bb:5f:48:45:3d:4b:
a1:3d:17:01:8b:65:85:bc:48:56:25:9f:ac:4b:b0:6b:f3:45:
4d:6a:b7:5b:ed:c2:b3:12:24:b5:a8:10:b5:3a:69:2a:5b:20:
b7:4e:7d:5b:48:ba:47:f0:cf:78:c8:6e:95:00:94:81:81:ad:
1c:80:d6:ef:dc:d2:38:32:9c:db:9b:dc:e1:db:40:46:87:22:
4f:ed:35:92:e0:8c:55:49:df:00:0f:fc:bf:ae:e6:5c:e2:65:
ba:d2:d1:3f:09:bc:d9:d2:ec:be:88:0d:df:67:dc:ad:a9:b1:
5c:ab:fb:6f:60:57:21:47:e4:fc:a3:66:68:96:99:04:1a:93:
55:cb:9c:26:8e:8c:53:d9:99:74:f1:ab:1d:ea:94:19:78:3f:
ac:46:a3:7c:0d:65:39:aa:7c:b7:d1:e2:4a:82:40:51:84:b6:
36:b4:0e:cc:a4:9a:37:5c:40:6b:7f:60:1d:3e:23:39:1a:70:
ab:94:9b:11:40:25:e1:ce:43:81:78:9f:93:46:e7:60:3c:7c:
b1:d8:a0:3b:2c:f5:25:dd:5b:33:ef:3a:b0:7c:af:1b:79:3f:
db:d6:74:89:f9:81:6e:a9:fd:f5:77:1f:ea:b9:45:47:9d:93:
70:d3:98:be
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAaExICTT9yI3M6j6WB6HaKPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDEyMTcxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGRmMzdlODMwZThhNGQwMjNkODMwOTUxYjIxMGZjYjAwMjY4NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwdmmlKQvnLv79B7n0DWd951rIQD
LFq44IRQjrggL1KyVHNb4Xqeg4owZ8I9GWOm4W2pu6VN7cM8wPtKdouZgCiL1WZq
ea85Ekxk5XWxo8D4y2kbe8FkKhDZYa5bKQC5aEgS9Q7jUjfBwht1P6sAHvVkV/y2
iOBlwrZqOdWsoBCfE308PMsSuWN6SoyYWhmQJTKXm+4SzjyFp1rnC6lC2vYWTddw
KLE30WM8I8BLJuzmRn5DJ8CWQHguPcSsX+FZLqlldW3PT2Cykeygk1cOnJzhr3P/
bLQpjMmZEElrO7n1LHtHWw79mRU6l/q9DrLRmSxMuyH5n3iXrgMu9rbE9wIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFIDfN+gw6KTQI9gwlRshD8sAJoSOMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZ044MzZERG9wTkFqMkRDVkd5RVB5d0FtaEk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAHzgRAwQA
HzhZAwQAHzrtAwQAXreWMAwDBABet5kDBABet5oDBABet6IDBABet6YDBADZPO4w
DQYJKoZIhvcNAQELBQADggEBAKk53PSg1VAdqSIPGbtfSEU9S6E9FwGLZYW8SFYl
n6xLsGvzRU1qt1vtwrMSJLWoELU6aSpbILdOfVtIukfwz3jIbpUAlIGBrRyA1u/c
0jgynNub3OHbQEaHIk/tNZLgjFVJ3wAP/L+u5lziZbrS0T8JvNnS7L6IDd9n3K2p
sVyr+29gVyFH5PyjZmiWmQQak1XLnCaOjFPZmXTxqx3qlBl4P6xGo3wNZTmqfLfR
4kqCQFGEtja0DsykmjdcQGt/YB0+IzkacKuUmxFAJeHOQ4F4n5NG52A8fLHYoDss
9SXdWzPvOrB8rxt5P9vWdIn5gW6p/fV3H+q5RUedk3DTmL4=
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:19 2026 by rpki-client