Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qkUMgcdJqV0WVk_wqAWZIHrDP_A.roa
File: qkUMgcdJqV0WVk_wqAWZIHrDP_A.roa (raw, json)
Hash identifier: 346ylYvWtaInDsCKDqYeFSgNU9AYJV78RfsWQT2aINg=
Subject key identifier: AA:45:0C:81:C7:49:A9:5D:16:56:4F:F0:A8:05:99:20:7A:C3:3F:F0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A167DE5E1CF60576ED2D0E454434EBA743
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qkUMgcdJqV0WVk_wqAWZIHrDP_A.roa
Signing time: Fri 23 Oct 2026 08:26:28 +0000
ROA not before: Fri 23 Oct 2026 08:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 31.56.54.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
94.183.192.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
94.183.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:de:5e:1c:f6:05:76:ed:2d:0e:45:44:34:eb:a7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 08:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa450c81c749a95d16564ff0a80599207ac33ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:c9:73:92:37:88:c1:69:c6:c9:46:da:c6:
1f:06:52:e5:bf:40:65:07:8d:23:d6:c3:85:07:81:
ce:d7:fd:67:57:f3:38:15:25:f1:cd:1f:bb:c1:d4:
5b:9e:27:1a:71:90:5a:4e:bc:1a:44:98:09:b6:cc:
8a:34:60:c3:fd:d9:49:55:3c:d4:14:f5:5f:54:46:
0b:50:f3:59:6b:ba:7e:5b:34:80:07:26:9a:01:ab:
c3:98:11:bd:79:73:7a:b0:7a:5c:71:94:b8:03:37:
78:f0:ff:4d:cb:f6:87:1e:e6:33:c0:b0:2f:f5:96:
ad:f1:89:bf:58:8c:2a:f9:d1:36:ec:29:c6:b0:e0:
98:64:63:37:3c:ef:30:78:98:a3:c6:80:75:5a:86:
af:81:59:dd:ed:d5:9f:f0:b4:fc:49:35:72:42:40:
bc:13:a5:11:0f:47:18:20:ad:16:fa:d4:97:a9:8a:
e3:38:d4:2c:37:bc:98:cb:fe:ec:80:7e:48:c3:f2:
a3:63:92:32:ed:fe:33:1f:73:1a:14:b4:fa:d6:df:
50:ce:84:ec:08:a6:94:1d:4b:a3:06:be:26:77:04:
f6:5a:d3:e2:90:6f:98:b6:07:0b:df:c3:1f:fe:8d:
61:82:68:2b:c7:c2:8f:70:ab:4e:2c:08:29:d2:b1:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:0C:81:C7:49:A9:5D:16:56:4F:F0:A8:05:99:20:7A:C3:3F:F0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qkUMgcdJqV0WVk_wqAWZIHrDP_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.54.0/24
94.183.160.0/24
94.183.192.0/24
94.183.216.0/24
94.183.218.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1c:ff:4d:a4:8a:f1:0f:d3:6c:83:f3:2a:dc:34:08:78:19:
d9:cc:f3:6d:1d:df:48:5c:33:51:95:bc:1f:ee:13:af:b0:0b:
6f:ec:69:63:74:41:29:8e:78:10:cd:80:0f:04:0a:36:38:22:
e4:d2:16:5d:52:6b:fa:20:f5:b8:ec:f3:d1:00:c8:4f:e4:67:
e8:d6:19:28:22:c0:6a:6f:7f:34:62:f6:f1:c8:1a:02:07:21:
4b:fe:b0:4d:4d:27:a5:b6:ea:f9:02:07:1c:e4:a1:6a:ae:c4:
0c:3f:21:ce:c5:5e:97:fb:63:13:e4:b2:b2:60:b6:6c:21:b5:
87:24:92:f0:fb:60:d7:28:58:86:40:c8:c1:7c:23:28:cf:d0:
60:c8:50:0e:6a:04:df:7c:c5:5a:62:93:df:d2:1a:7c:ec:16:
37:20:b1:c1:50:ba:b0:4c:10:31:80:83:1d:ea:e6:a6:96:91:
f3:08:bb:02:0b:73:c9:ff:2d:4f:99:73:d0:8f:3b:8f:ab:fd:
73:69:c8:4e:d2:43:18:1c:8d:67:83:bb:9b:d4:92:b3:0f:62:
4a:84:82:3a:ff:1f:df:54:d9:7e:ae:2b:56:bc:4b:f7:66:cf:
a7:f4:28:01:37:7f:03:12:7e:17:65:b1:9d:91:3a:01:fd:3e:
a9:f5:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:36 2026 by rpki-client