Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gNPKMl2-a5owWlm9QgrXl8Gl20A.roa
File: gNPKMl2-a5owWlm9QgrXl8Gl20A.roa (raw, json)
Hash identifier: cdHz+yWSK1KnOgZTzARl51brvaiX5sQIdDLC4yOusoY=
Subject key identifier: 80:D3:CA:32:5D:BE:6B:9A:30:5A:59:BD:42:0A:D7:97:C1:A5:DB:40
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FE023883B0CE2764AC9DF7534A36C095E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gNPKMl2-a5owWlm9QgrXl8Gl20A.roa
Signing time: Sat 08 Aug 2026 06:50:52 +0000
ROA not before: Sat 08 Aug 2026 06:50:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 31.57.37.0/24 maxlen: 24
31.57.185.0/24 maxlen: 24
94.183.174.0/24 maxlen: 24
217.60.197.0/24 maxlen: 24
217.60.241.0/24 maxlen: 24
217.60.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:23:88:3b:0c:e2:76:4a:c9:df:75:34:a3:6c:09:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 06:50:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80d3ca325dbe6b9a305a59bd420ad797c1a5db40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:be:02:a2:13:7f:46:3d:26:54:df:17:d0:
88:74:30:5b:00:1d:54:77:fd:cb:38:eb:5b:ea:ca:
0a:b8:7f:5b:fa:91:ad:7d:88:3b:15:e1:33:8f:48:
1b:7e:21:46:f4:2e:bd:7f:4f:c8:49:c7:ce:7b:89:
28:a6:8d:07:35:8e:44:6f:bb:5e:3c:bd:35:47:d4:
cd:8e:12:6f:f1:4b:ee:60:59:5f:8c:75:f8:29:15:
e9:ff:3f:9c:29:68:e0:48:4d:99:f4:8e:17:4f:19:
60:e5:58:f3:b3:10:cf:a5:4f:40:9d:3a:b7:c6:b5:
6e:57:6e:fe:2a:62:2e:23:32:c0:76:58:a1:f2:d3:
6c:77:ca:2d:ef:42:cc:00:a1:92:86:b4:7b:b7:f9:
51:d0:d6:68:f5:ac:3c:ca:40:b7:a3:a6:1f:af:37:
c8:06:8c:45:2f:86:12:82:3b:59:e6:6f:25:d5:53:
72:55:b8:f3:69:47:53:1d:78:53:ee:c0:d1:01:5e:
ed:c3:06:7d:05:25:cc:26:fd:5c:a9:d4:57:ed:17:
f2:af:b1:e6:2b:3f:6b:db:cc:72:d7:f8:93:a8:ad:
5f:7f:ce:cd:94:71:74:0d:95:c1:ac:7f:80:9b:74:
6f:7b:a6:f6:66:06:f1:8d:70:c7:8b:d1:96:95:a2:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:CA:32:5D:BE:6B:9A:30:5A:59:BD:42:0A:D7:97:C1:A5:DB:40
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gNPKMl2-a5owWlm9QgrXl8Gl20A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.37.0/24
31.57.185.0/24
94.183.174.0/24
217.60.197.0/24
217.60.241.0/24
217.60.250.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5e:37:82:6a:bd:fc:d5:8f:d1:24:33:d8:97:f7:3c:68:c0:
af:e9:19:e1:60:e9:ec:f3:51:19:7d:03:d6:78:63:d0:b6:40:
dd:1e:13:c1:39:e6:eb:b6:d4:5d:92:66:e5:fb:1f:fa:19:46:
90:9a:1b:a7:51:4e:63:9f:88:71:b8:14:5f:77:9b:b2:53:73:
6f:54:2d:7e:58:04:cd:40:76:d4:8d:4d:29:f0:97:a9:8a:09:
92:03:d2:4c:5d:54:94:f7:cc:9a:ae:ca:d1:cd:45:2c:7a:f8:
a9:30:b9:cb:ab:2f:a6:b8:cb:e3:61:0d:9a:d5:41:77:a5:45:
84:88:50:9d:94:1c:bd:bb:b6:44:96:c4:10:04:0e:be:08:35:
a5:fe:a3:59:16:09:69:72:fd:73:48:ee:36:3d:66:fa:6f:87:
e6:f5:26:5d:02:53:88:bd:24:71:69:d0:b3:79:88:81:0e:aa:
84:56:ad:b3:d6:e0:00:ed:b3:12:68:96:e8:c7:1f:0f:7d:46:
38:14:22:87:77:9c:4f:25:3c:14:70:fa:14:84:2f:c5:b8:67:
22:11:77:ae:75:65:b6:64:de:24:77:e8:95:a3:26:c3:18:30:
4d:f8:fa:0c:5a:f1:ae:0f:df:f7:f9:d1:bf:4a:7f:e9:ee:37:
f8:cf:26:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 13:41:20 2026 by rpki-client