Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jNR0askxlEk_PiBc8y0XJktkvEo.roa
File: jNR0askxlEk_PiBc8y0XJktkvEo.roa (raw, json)
Hash identifier: 5gdRqRIYbMoT65NOW8t8u+FDEt4wy+aDIf82IQaTR40=
Subject key identifier: 8C:D4:74:6A:C9:31:94:49:3F:3E:20:5C:F3:2D:17:26:4B:64:BC:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A061177344C8026A7B3C6E0F35A683BB5F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jNR0askxlEk_PiBc8y0XJktkvEo.roa
Signing time: Wed 02 Sep 2026 07:48:41 +0000
ROA not before: Wed 02 Sep 2026 07:48:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.219.0/24 maxlen: 24
31.57.161.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
217.60.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:17:73:44:c8:02:6a:7b:3c:6e:0f:35:a6:83:bb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 07:48:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cd4746ac93194493f3e205cf32d17264b64bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:61:15:f4:1a:d8:db:05:90:63:4c:a7:e0:36:
75:89:22:e1:f7:df:3f:d7:f3:3c:2e:94:b1:f5:cd:
3c:27:2c:53:8f:05:40:e7:ad:67:1c:33:df:e6:2f:
7e:08:e8:d0:1c:9d:c1:9d:0c:76:a9:7a:2a:8f:1e:
42:1c:ae:68:b5:4c:5c:d3:f1:8b:0d:9a:25:7b:ed:
77:e8:15:4d:4c:26:21:23:ff:af:6b:71:06:0c:99:
66:27:fd:86:32:ab:04:dc:c2:d5:33:7e:42:32:44:
b4:53:45:1d:17:f4:d2:5b:00:39:e3:fc:0f:23:3e:
47:3d:4b:a0:1b:fe:9e:95:fa:d3:72:62:b1:87:10:
6e:b2:ff:43:81:f3:16:aa:91:f5:db:6f:54:a4:df:
02:d5:c3:fd:44:42:59:ad:8d:10:3f:88:5e:99:d8:
d8:ab:73:74:c3:a6:28:23:a1:7f:ad:3c:84:51:f7:
67:e6:74:85:eb:1b:5b:af:d5:35:54:c7:43:f2:eb:
10:15:f2:8a:4f:c9:1e:d5:fb:56:1a:63:b4:9e:b7:
26:2f:19:48:07:34:91:cd:80:c9:5b:09:8e:e1:c2:
3b:56:8f:c7:86:cd:da:2f:fc:58:31:2c:00:63:6a:
a6:dc:48:4b:ea:b6:51:1e:cb:f0:81:6f:a9:8f:b0:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:74:6A:C9:31:94:49:3F:3E:20:5C:F3:2D:17:26:4B:64:BC:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jNR0askxlEk_PiBc8y0XJktkvEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.219.0/24
31.57.161.0/24
31.57.199.0/24
31.59.68.0/24
217.60.196.0/24
Signature Algorithm: sha256WithRSAEncryption
51:2b:f9:c3:5d:19:2d:34:db:25:cc:2c:50:33:02:54:e9:e9:
92:82:2e:bd:fc:d2:e0:61:64:c8:a4:46:df:06:80:ca:a9:43:
5d:73:59:ab:d4:a1:f8:fe:db:19:13:01:60:44:a0:db:1b:58:
89:b5:e1:dc:19:dc:a7:37:c6:e4:14:32:2f:27:85:f4:0e:bb:
9d:36:98:3f:d5:34:5a:9b:2c:6a:31:a4:35:3e:1e:e3:e3:53:
47:26:0a:eb:f4:45:a1:e2:80:b2:38:19:77:99:88:19:39:65:
be:1b:2d:14:89:9a:51:4b:5b:a0:13:4a:a7:34:47:58:23:4a:
5f:4d:6f:7b:23:34:51:1a:72:ed:46:0c:68:0a:9c:95:45:ed:
78:10:d1:a6:06:0b:18:53:e1:40:02:81:39:a3:ce:ee:c4:8e:
c4:f1:c9:a8:dc:f7:ce:2e:f1:da:02:8e:0d:d7:b7:c7:41:c1:
c9:44:c8:2a:4c:e6:44:fc:da:89:00:10:77:14:0e:91:2b:69:
b7:a0:e6:82:cc:91:02:58:8f:4e:25:01:75:f0:1c:6b:c6:77:
5c:32:b6:f8:79:41:1c:78:aa:52:e0:c8:e6:39:4e:60:20:bf:
16:53:90:01:45:e3:08:d5:01:fd:65:5b:54:51:b4:a4:78:64:
f8:32:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:29:57 2026 by rpki-client