Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kQWH59L_GuUFjhVfiXmRnlba_mY.roa
File: kQWH59L_GuUFjhVfiXmRnlba_mY.roa (raw, json)
Hash identifier: jWU8NiGmGr9ZKDdD6j6Hi839t3Me2yGo5d8jvHIqLrE=
Subject key identifier: 91:05:87:E7:D2:FF:1A:E5:05:8E:15:5F:89:79:91:9E:56:DA:FE:66
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FC6EE0BB73DD193278F341491A4B58AA0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kQWH59L_GuUFjhVfiXmRnlba_mY.roa
Signing time: Mon 03 Aug 2026 09:21:56 +0000
ROA not before: Mon 03 Aug 2026 09:21:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215242
IP address blocks: 31.56.213.0/24 maxlen: 24
31.56.214.0/24 maxlen: 24
31.58.211.0/24 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
217.60.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Aug 2026 13:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:ee:0b:b7:3d:d1:93:27:8f:34:14:91:a4:b5:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 3 09:21:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=910587e7d2ff1ae5058e155f8979919e56dafe66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:84:c3:2a:f8:ac:91:44:93:bc:94:e4:c8:c9:
c3:cd:00:d2:9a:df:ab:31:db:b2:81:6b:82:8a:f2:
0b:16:f4:c7:bb:13:0d:b2:4c:02:be:0a:05:16:20:
28:f2:98:6e:bf:79:6a:56:43:68:17:89:ee:97:f3:
12:e1:19:f5:31:80:23:d8:c5:30:a8:21:8f:96:e9:
9d:07:68:dd:46:f5:c8:6e:e9:51:88:12:46:87:9b:
3e:6b:48:4d:56:0f:c2:f4:6b:a3:1a:42:7d:9d:87:
26:e1:a4:5a:8c:4a:8c:c0:7d:6e:27:d7:54:87:d3:
ba:a4:12:2b:d1:fa:72:ca:5d:6e:5e:97:92:78:e0:
2c:d8:c0:fb:cc:bb:eb:4a:57:90:4d:b7:09:da:51:
e2:b2:19:54:78:db:85:6f:2b:53:ac:f9:bb:b8:17:
a4:45:bb:55:f2:a6:8e:7f:a1:68:98:14:4a:f3:3b:
01:d3:4e:60:c2:48:a9:68:93:a0:8a:a7:9f:e1:d5:
4c:68:83:1b:62:48:43:93:e1:af:d1:a4:f7:c0:e5:
ce:77:34:c6:ce:e3:dc:e3:c1:3b:f1:ec:68:bc:f5:
98:9a:bd:df:a4:f8:38:9a:3a:a1:58:d7:08:9e:1b:
59:fe:41:8f:29:db:96:6e:b0:ef:f8:7b:ed:0c:dd:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:87:E7:D2:FF:1A:E5:05:8E:15:5F:89:79:91:9E:56:DA:FE:66
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kQWH59L_GuUFjhVfiXmRnlba_mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.213.0-31.56.214.255
31.58.211.0/24
31.58.235.0-31.58.236.255
31.58.246.0/23
31.58.250.0/23
217.60.254.0/24
Signature Algorithm: sha256WithRSAEncryption
40:39:6e:f9:bb:09:d1:96:36:14:43:24:14:34:bc:4a:a5:25:
03:f2:cf:46:15:d1:ef:5a:c7:c0:c7:59:79:99:01:96:3e:c3:
5e:c8:c8:7d:f0:4c:ec:59:9b:ff:be:c9:26:49:a1:85:7e:70:
d4:d5:a3:66:d1:1c:9d:32:0c:de:47:01:ed:1d:fb:c6:0e:14:
2e:86:cb:01:ba:c6:c9:1f:88:4c:5e:bc:19:9c:4a:95:8d:8a:
9a:ce:1a:48:0d:45:f5:98:2f:72:01:f2:48:cf:c8:a5:af:45:
7d:d9:c5:7f:bb:89:dc:94:3a:ac:5f:2a:2a:27:df:91:ad:5a:
3b:bd:27:94:fb:18:19:d5:0a:4a:e6:b8:60:2d:55:65:68:7a:
46:e9:a0:d2:34:d8:b4:a1:22:9e:f4:8e:81:ed:6a:a2:6a:e9:
6e:d1:07:3d:30:31:d8:78:89:26:69:d4:24:9b:e7:a1:af:11:
fe:e5:a2:98:97:f8:8e:06:c7:c2:72:88:91:fe:17:d7:7f:44:
09:6b:3d:22:83:b4:93:4e:7c:99:f7:4a:d0:1b:f6:8b:b6:b9:
0d:da:f0:b9:53:55:1b:2f:4d:1e:71:fc:8b:3c:73:00:e5:3f:
0e:97:a5:d4:ba:8a:74:c2:c7:1a:5c:c7:a7:3f:a4:4c:9e:1b:
c0:7a:d4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 22:14:46 2026 by rpki-client