Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uTIJZlF8KHOjb_Bk44AvhwPGh5U.roa
File: uTIJZlF8KHOjb_Bk44AvhwPGh5U.roa (raw, json)
Hash identifier: 0CJcDAFVp8sYYTAk0w0SdgkZaUpSRiKbfUFJvLk/rso=
Subject key identifier: B9:32:09:66:51:7C:28:73:A3:6F:F0:64:E3:80:2F:87:03:C6:87:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019FC139C62A067E874F9D92BFC6611B3952
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uTIJZlF8KHOjb_Bk44AvhwPGh5U.roa
Signing time: Sun 02 Aug 2026 06:46:56 +0000
ROA not before: Sun 02 Aug 2026 06:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.98.0/24 maxlen: 24
31.56.103.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.121.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.57.225.0/24 maxlen: 24
31.58.17.0/24 maxlen: 24
31.58.31.0/24 maxlen: 24
31.58.47.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.59.23.0/24 maxlen: 24
31.59.31.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c1:39:c6:2a:06:7e:87:4f:9d:92:bf:c6:61:1b:39:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 2 06:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9320966517c2873a36ff064e3802f8703c68795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:ae:50:5c:da:aa:c4:9d:cb:01:0a:24:b2:
91:cc:cb:d3:ab:f0:18:2d:64:99:a6:7b:82:61:b3:
44:59:0c:fe:e6:97:f7:97:c3:60:7b:32:4f:fe:c1:
0b:24:36:f2:a1:26:27:f1:51:6d:dd:29:b8:fd:85:
a3:c3:a3:f0:85:fb:9a:6e:72:81:94:27:28:ca:56:
c5:f8:3a:f2:39:d0:11:47:ef:f1:ee:8a:5e:c9:59:
52:32:52:5b:97:7b:69:95:ad:cd:8e:e6:9b:b0:72:
91:3c:26:58:b3:ab:95:14:82:f8:00:3b:15:32:56:
d6:6d:62:b9:86:34:24:98:c3:f4:a5:37:2c:09:7f:
d0:08:45:31:b2:c1:dc:27:55:b0:3d:06:0d:f2:ab:
ca:1a:73:d7:46:77:7f:c4:e1:cc:bf:d7:28:65:4b:
30:73:2e:55:b1:df:9b:64:51:0e:4a:1b:36:7a:14:
76:bd:e7:15:c2:b5:c4:33:3b:1f:70:ab:04:3c:3b:
82:cf:0a:d9:0a:a1:35:75:16:43:15:c4:6d:5f:a0:
5a:09:c6:ab:e7:6d:f8:50:f6:5d:51:25:6d:af:24:
d4:ee:f9:47:e8:b5:0f:80:23:18:5a:7b:87:96:6b:
f3:e8:02:25:d9:11:5a:0f:13:c6:27:2f:4f:a3:97:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:09:66:51:7C:28:73:A3:6F:F0:64:E3:80:2F:87:03:C6:87:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uTIJZlF8KHOjb_Bk44AvhwPGh5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.98.0/24
31.56.103.0/24
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.35.0/24
31.57.121.0/24
31.57.206.0/24
31.57.225.0/24
31.58.17.0/24
31.58.31.0/24
31.58.47.0/24
31.58.90.0/24
31.58.168.0/24
31.59.23.0/24
31.59.31.0/24
31.59.70.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:ac:b2:2d:83:b9:24:5a:03:ff:cb:d6:12:06:3e:46:19:12:
f9:e6:59:0d:7f:4f:f6:d0:24:01:f2:48:e0:a7:e8:fe:1f:63:
1e:a1:09:51:47:28:19:a0:b3:96:e0:09:01:6a:f8:a8:ce:9a:
1f:09:94:c3:91:b3:16:b8:a7:48:ad:a3:59:a6:1f:93:e1:62:
9b:c6:84:75:e5:f0:29:71:16:a4:ea:ba:39:92:24:4d:47:42:
33:f3:61:48:de:2c:1f:ae:88:41:27:bb:ac:fc:82:8e:be:f6:
45:c2:00:a1:0c:c3:f1:47:68:8b:39:a2:18:ca:b9:9d:6d:17:
fa:6e:53:94:79:b6:44:52:ed:ea:ab:ea:6c:30:f4:bd:5d:bf:
23:da:2b:ae:e8:db:5f:e6:e5:bf:47:da:f7:ee:74:35:02:14:
2b:a0:e6:c6:ca:7a:32:53:39:1a:8c:81:28:cc:e0:d4:85:18:
20:5f:7b:fe:df:a6:a1:9b:85:02:ce:62:0a:6c:0c:ca:3e:83:
b4:a4:55:81:1f:15:33:74:aa:b3:be:07:89:ae:8c:bc:ac:33:
c1:f8:9d:1e:29:d1:f1:68:fa:80:55:fc:01:7f:5e:f6:e1:69:
8b:93:62:28:8c:e8:f9:8b:aa:89:2c:a6:c4:a9:c2:9c:be:9d:
c5:90:6a:59
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgISAZ/BOcYqBn6HT52Sv8ZhGzlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwODAyMDY0NjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTMyMDk2NjUxN2MyODczYTM2ZmYwNjRlMzgwMmY4NzAzYzY4Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+muUFzaqsSdywEKJLKRzMvTq/AY
LWSZpnuCYbNEWQz+5pf3l8NgezJP/sELJDbyoSYn8VFt3Sm4/YWjw6PwhfuabnKB
lCcoylbF+DryOdARR+/x7opeyVlSMlJbl3tpla3NjuabsHKRPCZYs6uVFIL4ADsV
MlbWbWK5hjQkmMP0pTcsCX/QCEUxssHcJ1WwPQYN8qvKGnPXRnd/xOHMv9coZUsw
cy5Vsd+bZFEOShs2ehR2vecVwrXEMzsfcKsEPDuCzwrZCqE1dRZDFcRtX6BaCcar
5234UPZdUSVtryTU7vlH6LUPgCMYWnuHlmvz6AIl2RFaDxPGJy9Po5fb0QIDAQAB
o4ICfjCCAnowHQYDVR0OBBYEFLkyCWZRfChzo2/wZOOAL4cDxoeVMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdVRJSlpsRjhLSE9qYl9CazQ0QXZod1BHaDVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQAHzgx
AwQAHzhiAwQAHzhnAwQAHzjSAwQAHzjUAwQAHzjfAwQBHzjqAwQAHzkjAwQAHzl5
AwQAHznOAwQAHznhAwQAHzoRAwQAHzofAwQAHzovAwQAHzpaAwQAHzqoAwQAHzsX
AwQAHzsfAwQAHztGAwQCHzvsMA0GCSqGSIb3DQEBCwUAA4IBAQCjrLItg7kkWgP/
y9YSBj5GGRL55lkNf0/20CQB8kjgp+j+H2MeoQlRRygZoLOW4AkBaviozpofCZTD
kbMWuKdIraNZph+T4WKbxoR15fApcRak6ro5kiRNR0Iz82FI3iwfrohBJ7us/IKO
vvZFwgChDMPxR2iLOaIYyrmdbRf6blOUebZEUu3qq+psMPS9Xb8j2iuu6Ntf5uW/
R9r37nQ1AhQroObGynoyUzkajIEozODUhRggX3v+36ahm4UCzmIKbAzKPoO0pFWB
HxUzdKqzvgeJroy8rDPB+J0eKdHxaPqAVfwBf1724WmLk2IojOj5i6qJLKbEqcKc
vp3FkGpZ
-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:15 2026 by rpki-client