Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hoU1WOw4j8-5LUGrtjou-L2rFNI.roa
File: hoU1WOw4j8-5LUGrtjou-L2rFNI.roa (raw, json)
Hash identifier: h76D2Ib/VO5NLgHx+6OAgKxqIy28rscjsXNudOyRJMU=
Subject key identifier: 86:85:35:58:EC:38:8F:CF:B9:2D:41:AB:B6:3A:2E:F8:BD:AB:14:D2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1274951C804DE18291459F87AA9FC8888
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hoU1WOw4j8-5LUGrtjou-L2rFNI.roa
Signing time: Sat 10 Oct 2026 19:27:58 +0000
ROA not before: Sat 10 Oct 2026 19:27:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 984
IP address blocks: 31.56.163.0/24 maxlen: 24
31.56.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:49:51:c8:04:de:18:29:14:59:f8:7a:a9:fc:88:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 10 19:27:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86853558ec388fcfb92d41abb63a2ef8bdab14d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:38:7d:fd:c8:1e:62:69:e4:51:e9:65:aa:
44:a9:8c:c7:5b:fa:3c:a9:1b:41:47:23:5c:c8:c7:
d4:c7:37:e1:a0:06:88:b2:b3:a3:3b:44:b1:ad:2b:
24:a8:d9:27:c9:26:3e:48:e7:46:b1:0e:25:c5:bd:
b1:bc:5f:1d:97:80:74:d3:b2:e9:a8:a9:53:ec:8f:
44:be:f0:5d:3e:0b:c0:8d:2e:21:0b:3a:e9:8d:ad:
06:37:99:f3:4d:2c:6a:6b:da:f4:11:a9:58:58:e9:
6d:33:65:81:69:37:4d:e4:92:be:60:3b:2c:87:1d:
86:e6:8f:8d:ab:fb:e6:d0:ae:a8:ef:dc:8a:8c:a8:
3b:fc:ef:52:1f:9d:8e:39:d7:5a:dc:8c:a2:fd:39:
04:98:07:82:99:f0:bb:51:d4:0f:f2:20:8a:b0:df:
c5:e0:b0:f1:eb:64:05:b3:9c:d9:12:17:8c:78:80:
62:81:28:dc:ea:cf:e0:c0:48:60:19:d7:85:5b:dc:
36:08:18:4b:de:65:eb:62:9a:44:be:b5:ac:67:b8:
4a:36:a9:d9:3b:44:26:21:b0:4e:bd:1b:63:80:8d:
1d:bc:43:cf:03:59:bc:4a:8d:d4:89:d8:fa:f0:9f:
e2:72:a3:f8:3d:3c:9c:5b:6e:62:cf:0b:7b:54:62:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:85:35:58:EC:38:8F:CF:B9:2D:41:AB:B6:3A:2E:F8:BD:AB:14:D2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hoU1WOw4j8-5LUGrtjou-L2rFNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.163.0/24
31.56.194.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c6:ec:fe:b3:4e:d7:f3:45:ef:b1:b6:d3:9d:80:94:ad:af:
d6:7f:1a:df:73:0b:cd:8b:00:d7:99:97:04:26:f3:05:10:56:
4a:e6:56:1d:ca:8a:db:4f:0a:9f:e1:bd:0a:8b:04:98:9d:11:
56:1e:3a:ac:86:62:be:e9:27:18:be:61:32:71:49:88:01:23:
16:f0:17:4d:11:89:12:99:28:ac:8e:70:11:7f:6f:f6:9b:4d:
4f:c3:4d:a7:20:ad:9d:3b:d3:aa:e2:90:64:11:5c:e6:19:39:
6c:80:d0:4f:ee:a9:e3:8b:d6:5b:31:d1:57:52:38:71:36:fb:
02:00:d7:1b:9b:7a:a4:4e:13:b2:17:60:4e:53:b1:c4:80:9a:
43:55:d8:14:10:57:bf:6b:e1:e2:9f:7d:ee:4d:29:d6:7e:76:
eb:32:d1:23:5e:d2:09:3e:b3:e2:b6:41:65:4c:9f:7a:d1:d0:
6a:bb:57:4b:bf:f3:ce:a8:78:ba:59:3f:50:47:c9:8a:49:a7:
9e:88:78:65:1d:62:24:7c:92:78:8e:ed:02:b4:3e:41:03:35:
a1:b7:2a:d7:39:2a:3c:60:18:0b:ae:6c:56:fa:a1:f7:a7:f5:
83:8e:9a:e8:eb:bb:fa:e5:35:a5:c0:b4:cd:22:98:c5:5e:7e:
5e:8f:23:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEnSVHIBN4YKRRZ+Hqp/IiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDEwMTkyNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Njg1MzU1OGVjMzg4ZmNmYjkyZDQxYWJiNjNhMmVmOGJkYWIxNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtro4ff3IHmJp5FHpZapEqYzHW/o8
qRtBRyNcyMfUxzfhoAaIsrOjO0SxrSskqNknySY+SOdGsQ4lxb2xvF8dl4B007Lp
qKlT7I9EvvBdPgvAjS4hCzrpja0GN5nzTSxqa9r0EalYWOltM2WBaTdN5JK+YDss
hx2G5o+Nq/vm0K6o79yKjKg7/O9SH52OOdda3Iyi/TkEmAeCmfC7UdQP8iCKsN/F
4LDx62QFs5zZEheMeIBigSjc6s/gwEhgGdeFW9w2CBhL3mXrYppEvrWsZ7hKNqnZ
O0QmIbBOvRtjgI0dvEPPA1m8So3Uidj68J/icqP4PTycW25izwt7VGKK8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIaFNVjsOI/PuS1Bq7Y6Lvi9qxTSMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvaG9VMVdPdzRqOC01TFVHcnRqb3UtTDJyRk5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzijAwQA
HzjCMA0GCSqGSIb3DQEBCwUAA4IBAQBxxuz+s07X80XvsbbTnYCUra/WfxrfcwvN
iwDXmZcEJvMFEFZK5lYdyorbTwqf4b0KiwSYnRFWHjqshmK+6ScYvmEycUmIASMW
8BdNEYkSmSisjnARf2/2m01Pw02nIK2dO9Oq4pBkEVzmGTlsgNBP7qnji9ZbMdFX
UjhxNvsCANcbm3qkThOyF2BOU7HEgJpDVdgUEFe/a+Hin33uTSnWfnbrMtEjXtIJ
PrPitkFlTJ960dBqu1dLv/POqHi6WT9QR8mKSaeeiHhlHWIkfJJ4ju0CtD5BAzWh
tyrXOSo8YBgLrmxW+qH3p/WDjpro67v65TWlwLTNIpjFXn5ejyOd
-----END CERTIFICATE-----
Generated at Sat Oct 17 10:50:53 2026 by rpki-client