Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gdli1X9O9H1Rc0Hafjph77vMCSI.roa
File: gdli1X9O9H1Rc0Hafjph77vMCSI.roa (raw, json)
Hash identifier: FAtEJ/8wem2fOK0+q1mTMEe/XsJDq/aUy6k+rTnx8+U=
Subject key identifier: 81:D9:62:D5:7F:4E:F4:7D:51:73:41:DA:7E:3A:61:EF:BB:CC:09:22
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F95C92646A8A2286A4C0BB7A8D9CBB368
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gdli1X9O9H1Rc0Hafjph77vMCSI.roa
Signing time: Fri 24 Jul 2026 20:20:15 +0000
ROA not before: Fri 24 Jul 2026 20:20:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 31.56.89.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.153.0/24 maxlen: 24
94.183.154.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.166.0/24 maxlen: 24
94.183.180.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:c9:26:46:a8:a2:28:6a:4c:0b:b7:a8:d9:cb:b3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 20:20:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81d962d57f4ef47d517341da7e3a61efbbcc0922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:c5:50:32:13:d8:b0:e2:60:71:ed:e9:a1:
10:11:15:aa:6d:3f:dd:4c:2a:44:c5:63:85:96:e0:
0d:54:e1:a6:c6:47:74:44:5e:a2:67:77:d5:6f:36:
dc:2c:9e:8b:6e:63:43:1e:40:81:7f:23:ed:d1:16:
a2:35:b0:83:88:50:92:e2:d8:a9:c1:f8:a3:6c:52:
71:70:07:8d:13:d1:d7:84:dd:ff:2b:eb:a1:ba:a8:
a7:86:1a:c6:94:6e:ff:c7:01:59:47:c0:8e:d6:bb:
27:01:df:9b:76:c2:76:e7:87:e8:1a:d9:a4:6a:1b:
12:7f:84:42:11:1b:8e:f2:20:09:b7:29:da:99:19:
e7:5c:48:5f:49:2f:d8:89:46:8c:11:b5:8e:04:ad:
f0:ca:6f:26:64:b5:35:c1:ca:32:89:76:df:74:16:
70:79:95:6d:4d:ac:a4:55:e9:29:b1:a6:13:16:63:
99:07:0f:f5:4c:6b:ec:e4:af:0a:b9:41:b2:c1:39:
c1:47:82:c4:d2:f1:42:f7:df:4f:be:6c:1a:10:cc:
3e:8c:95:86:ff:09:10:4a:97:99:c1:1d:6b:d0:8b:
7b:99:91:0f:dc:c4:d5:b1:3a:d4:3e:9c:87:ca:d9:
3e:fa:ac:cc:97:84:81:a7:7a:4d:39:77:dd:f7:45:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D9:62:D5:7F:4E:F4:7D:51:73:41:DA:7E:3A:61:EF:BB:CC:09:22
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gdli1X9O9H1Rc0Hafjph77vMCSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.89.0/24
31.58.237.0/24
94.183.150.0/24
94.183.153.0-94.183.154.255
94.183.162.0/24
94.183.166.0/24
94.183.180.0/24
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c8:4a:c5:4d:8e:a7:cb:7c:ea:9a:aa:be:4f:14:16:e6:ee:
67:45:fe:00:43:33:c3:5e:e0:bd:67:40:ee:df:25:eb:6d:40:
b2:c8:ed:69:63:0d:23:b3:d7:c2:30:e5:51:91:bf:70:f2:7d:
c0:e4:3d:34:c3:65:fb:00:23:49:5f:a7:c8:21:1b:1f:5a:33:
96:c2:73:e1:38:91:80:1f:7d:ad:26:df:21:af:64:b4:21:1f:
bf:60:9d:d5:0e:94:89:91:66:19:c7:39:8f:fa:07:42:b0:76:
b2:97:60:9c:36:bd:32:03:61:c4:33:37:1d:c6:08:40:44:37:
aa:3b:b8:f9:44:3b:48:0f:95:8d:ba:49:ae:f0:b5:02:11:37:
3e:bb:86:da:c1:5f:f3:61:3a:b4:4c:54:45:49:de:8c:c1:25:
99:46:79:9d:24:5d:98:6a:02:5b:ec:51:60:38:c2:f7:cc:10:
35:e5:0d:85:1c:3e:97:0d:ef:66:85:d9:2a:ee:0c:6e:62:d0:
52:07:ba:b3:0f:3e:d0:d3:b4:6c:8f:f4:65:65:ec:27:d5:d4:
c7:13:8e:83:7b:46:df:35:c1:15:6f:b9:84:ae:ef:40:57:d6:
e8:da:7e:c9:24:29:e2:f2:42:31:99:ef:e3:4e:65:dc:f6:00:
8c:64:06:cb
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZ+VySZGqKIoakwLt6jZy7NoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwNzI0MjAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQ5NjJkNTdmNGVmNDdkNTE3MzQxZGE3ZTNhNjFlZmJiY2MwOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O3FUDIT2LDiYHHt6aEQERWqbT/d
TCpExWOFluANVOGmxkd0RF6iZ3fVbzbcLJ6LbmNDHkCBfyPt0RaiNbCDiFCS4tip
wfijbFJxcAeNE9HXhN3/K+uhuqinhhrGlG7/xwFZR8CO1rsnAd+bdsJ254foGtmk
ahsSf4RCERuO8iAJtynamRnnXEhfSS/YiUaMEbWOBK3wym8mZLU1wcoyiXbfdBZw
eZVtTaykVekpsaYTFmOZBw/1TGvs5K8KuUGywTnBR4LE0vFC999PvmwaEMw+jJWG
/wkQSpeZwR1r0It7mZEP3MTVsTrUPpyHytk++qzMl4SBp3pNOXfd90VQewIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFIHZYtV/TvR9UXNB2n46Ye+7zAkiMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZ2RsaTFYOU85SDFSYzBIYWZqcGg3N3ZNQ1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAHzhZAwQA
HzrtAwQAXreWMAwDBABet5kDBABet5oDBABet6IDBABet6YDBABet7QDBADZPO4w
DQYJKoZIhvcNAQELBQADggEBAITISsVNjqfLfOqaqr5PFBbm7mdF/gBDM8Ne4L1n
QO7fJettQLLI7WljDSOz18Iw5VGRv3DyfcDkPTTDZfsAI0lfp8ghGx9aM5bCc+E4
kYAffa0m3yGvZLQhH79gndUOlImRZhnHOY/6B0KwdrKXYJw2vTIDYcQzNx3GCEBE
N6o7uPlEO0gPlY26Sa7wtQIRNz67htrBX/NhOrRMVEVJ3ozBJZlGeZ0kXZhqAlvs
UWA4wvfMEDXlDYUcPpcN72aF2SruDG5i0FIHurMPPtDTtGyP9GVl7CfV1McTjoN7
Rt81wRVvuYSu70BX1ujafskkKeLyQjGZ7+NOZdz2AIxkBss=
-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:27 2026 by rpki-client