Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hIlZsBB2B0OGuE0646Lg9cghfsI.roa
File: hIlZsBB2B0OGuE0646Lg9cghfsI.roa (raw, json)
Hash identifier: td3Wt/K2vW94K3de53Rtz8SGrhY2vn8iWErDelClUKY=
Subject key identifier: 84:89:59:B0:10:76:07:43:86:B8:4D:3A:E3:A2:E0:F5:C8:21:7E:C2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A15595ED3646DC237C99D1AC9D010503C4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hIlZsBB2B0OGuE0646Lg9cghfsI.roa
Signing time: Mon 19 Oct 2026 19:14:11 +0000
ROA not before: Mon 19 Oct 2026 19:14:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.98.0/24 maxlen: 24
31.56.102.0/24 maxlen: 24
31.56.103.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.98.0/24 maxlen: 24
31.57.121.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.57.225.0/24 maxlen: 24
31.57.241.0/24 maxlen: 24
31.58.17.0/24 maxlen: 24
31.58.31.0/24 maxlen: 24
31.58.47.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.59.23.0/24 maxlen: 24
31.59.31.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:95:ed:36:46:dc:23:7c:99:d1:ac:9d:01:05:03:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 19 19:14:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=848959b01076074386b84d3ae3a2e0f5c8217ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:bd:ec:6c:19:a7:34:5d:32:94:94:cd:bd:
aa:dd:16:fa:51:5e:15:60:3f:eb:a2:73:92:77:23:
53:7f:df:cf:93:66:ce:17:34:e1:61:6d:e6:09:5d:
ae:8c:89:00:5b:e1:95:15:71:77:b1:7c:e2:f8:a6:
1b:73:b6:cf:64:0a:dd:15:3f:d8:df:c5:88:57:7b:
00:0a:d0:2d:f0:9e:5d:d5:48:5a:3a:46:e7:c2:4d:
69:08:03:cd:48:e0:c5:62:d9:ea:9d:a1:d6:69:8d:
d4:fe:73:6a:f4:5e:5c:e2:23:33:49:bb:5c:cb:9c:
44:52:c4:21:1a:54:9a:01:f0:16:d0:38:f7:fc:06:
f5:87:67:33:f0:fd:9d:da:3e:1f:ea:3b:e1:27:d2:
76:34:33:c6:a2:7b:5e:e5:e7:f6:12:ce:58:53:6e:
77:72:fb:8e:a4:00:33:8f:b5:91:f2:f5:6e:5c:e5:
51:f7:5a:67:3b:86:ad:f8:77:2d:42:4e:08:3a:3e:
7f:0b:b7:ac:d5:53:c3:b2:ce:2d:42:27:f0:78:04:
87:a7:f1:e2:0c:6b:13:10:95:67:59:fe:c2:b4:c5:
87:af:ec:7c:98:f9:f0:0c:04:e5:77:1a:38:b7:e4:
e0:36:a9:32:ae:94:75:cb:79:81:77:4d:84:b3:0e:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:59:B0:10:76:07:43:86:B8:4D:3A:E3:A2:E0:F5:C8:21:7E:C2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hIlZsBB2B0OGuE0646Lg9cghfsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.98.0/24
31.56.102.0/23
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.35.0/24
31.57.98.0/24
31.57.121.0/24
31.57.206.0/24
31.57.225.0/24
31.57.241.0/24
31.58.17.0/24
31.58.31.0/24
31.58.47.0/24
31.58.90.0/24
31.58.168.0/24
31.59.23.0/24
31.59.31.0/24
31.59.70.0/24
31.59.173.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
14:77:cf:bf:cc:56:36:99:82:54:3c:2a:04:7c:b3:7d:77:d1:
b8:d3:9d:2d:f8:78:d3:b9:0c:af:42:11:a8:19:d4:3f:dc:00:
b2:0d:b5:d3:d3:e2:73:f3:00:7b:2b:2d:92:03:4e:e1:7e:38:
7c:c1:12:fb:90:7f:f5:2c:6f:40:01:b2:b6:9f:90:7a:6f:f3:
5a:da:f9:ba:22:da:a0:96:3a:05:5e:6f:f7:b9:af:b3:f3:93:
bf:6c:a4:3b:85:cf:d4:2e:ee:b6:5c:bb:19:7f:2a:fb:49:e6:
8a:7f:c0:e2:7f:59:f9:dd:46:21:b3:ac:a1:54:1c:87:cb:8f:
b5:33:6b:8c:07:d0:2b:a9:be:a9:d3:ff:c4:46:d9:4c:81:60:
25:eb:31:f8:91:9d:b9:2c:f0:74:4d:b9:ff:94:9f:46:e7:e3:
20:53:21:71:2b:02:5d:98:2d:74:74:e8:a7:f7:7b:71:96:2f:
a1:69:c8:33:e7:7f:79:34:50:b3:82:bf:33:bc:5c:07:8c:9d:
1f:f1:2a:7b:5d:f6:f8:28:d9:1f:97:2a:ab:6d:75:6f:c8:ae:
87:01:1c:9d:bf:e3:17:c5:45:c9:e5:42:60:1e:42:00:87:91:
bd:71:55:54:2e:2d:2e:b6:33:42:eb:f9:d3:8a:4a:8b:6a:4e:
d5:ae:af:f3
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgISAaFVle02RtwjfJnRrJ0BBQPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDE5MTkxNDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDg5NTliMDEwNzYwNzQzODZiODRkM2FlM2EyZTBmNWM4MjE3ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cK97GwZpzRdMpSUzb2q3Rb6UV4V
YD/ronOSdyNTf9/Pk2bOFzThYW3mCV2ujIkAW+GVFXF3sXzi+KYbc7bPZArdFT/Y
38WIV3sACtAt8J5d1UhaOkbnwk1pCAPNSODFYtnqnaHWaY3U/nNq9F5c4iMzSbtc
y5xEUsQhGlSaAfAW0Dj3/Ab1h2cz8P2d2j4f6jvhJ9J2NDPGonte5ef2Es5YU253
cvuOpAAzj7WR8vVuXOVR91pnO4at+HctQk4IOj5/C7es1VPDss4tQifweASHp/Hi
DGsTEJVnWf7CtMWHr+x8mPnwDATldxo4t+TgNqkyrpR1y3mBd02Esw7+7QIDAQAB
o4ICkjCCAo4wHQYDVR0OBBYEFISJWbAQdgdDhrhNOuOi4PXIIX7CMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaElsWnNCQjJCME9HdUUwNjQ2TGc5Y2doZnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAAf
ODEDBAAfOGIDBAEfOGYDBAAfONIDBAAfONQDBAAfON8DBAEfOOoDBAAfOSMDBAAf
OWIDBAAfOXkDBAAfOc4DBAAfOeEDBAAfOfEDBAAfOhEDBAAfOh8DBAAfOi8DBAAf
OloDBAAfOqgDBAAfOxcDBAAfOx8DBAAfO0YDBAAfO60DBAIfO+wwDQYJKoZIhvcN
AQELBQADggEBABR3z7/MVjaZglQ8KgR8s3130bjTnS34eNO5DK9CEagZ1D/cALIN
tdPT4nPzAHsrLZIDTuF+OHzBEvuQf/Usb0ABsrafkHpv81ra+boi2qCWOgVeb/e5
r7Pzk79spDuFz9Qu7rZcuxl/KvtJ5op/wOJ/WfndRiGzrKFUHIfLj7Uza4wH0Cup
vqnT/8RG2UyBYCXrMfiRnbks8HRNuf+Un0bn4yBTIXErAl2YLXR06Kf3e3GWL6Fp
yDPnf3k0ULOCvzO8XAeMnR/xKntd9vgo2R+XKqttdW/IrocBHJ2/4xfFRcnlQmAe
QgCHkb1xVVQuLS62M0Lr+dOKSotqTtWur/M=
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:09 2026 by rpki-client