Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uWiBMOVVn0i8Zzk7RUoRob269Qs.roa
File: uWiBMOVVn0i8Zzk7RUoRob269Qs.roa (raw, json)
Hash identifier: fUXg3QmzX4279lGv7OXaBYIVmAY03yzf9n7Rpc5PGUY=
Subject key identifier: B9:68:81:30:E5:55:9F:48:BC:67:39:3B:45:4A:11:A1:BD:BA:F5:0B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A13EF36155790242F9653B5BE1263B9173
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uWiBMOVVn0i8Zzk7RUoRob269Qs.roa
Signing time: Thu 15 Oct 2026 09:44:59 +0000
ROA not before: Thu 15 Oct 2026 09:44:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 31.56.2.0/24 maxlen: 24
31.56.8.0/24 maxlen: 24
31.56.9.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.60.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.58.62.0/24 maxlen: 24
31.59.53.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.73.0/24 maxlen: 24
31.59.74.0/24 maxlen: 24
31.59.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:f3:61:55:79:02:42:f9:65:3b:5b:e1:26:3b:91:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 15 09:44:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9688130e5559f48bc67393b454a11a1bdbaf50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:5c:27:6f:10:c9:fb:7b:fc:23:97:67:5e:
e2:a5:ce:a7:bc:41:f5:5b:88:b6:d6:f0:34:cd:ed:
af:e8:89:81:c7:3f:0f:52:8b:20:6e:29:17:ab:85:
20:70:01:6e:ee:78:33:0c:89:9f:ce:b6:f1:e3:78:
6b:6a:9b:e9:05:2d:a7:8b:80:f5:76:10:d2:38:c5:
f9:78:da:40:61:e4:b2:2f:2b:f3:25:42:38:6a:b6:
f2:e5:5a:bd:be:f9:21:cd:db:e1:38:c1:00:68:7b:
79:69:44:5a:30:9d:d7:f4:a3:c1:34:69:fc:b6:2d:
6e:44:63:05:f5:2e:13:7a:7c:f6:79:2e:13:ac:57:
36:62:1c:9a:fa:e8:e3:3b:7d:cf:f2:40:9e:1c:e5:
9d:7e:93:f2:88:eb:c7:d0:be:7a:de:cb:d8:34:6a:
06:ce:06:27:ea:c5:13:f7:00:54:55:a2:05:a1:ed:
70:bf:0c:cc:5f:41:d1:df:0e:17:0e:6f:23:7c:7b:
80:a5:64:42:dd:8b:36:7a:a3:77:7f:4e:c2:9d:4f:
ef:20:9a:9b:a7:78:c6:43:7c:2d:ec:c9:a5:75:75:
3f:1f:a7:72:34:d0:19:fa:3a:2e:c3:42:0c:f0:91:
4f:1a:53:d7:2d:46:6c:d7:f2:90:40:6e:13:95:52:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:81:30:E5:55:9F:48:BC:67:39:3B:45:4A:11:A1:BD:BA:F5:0B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/uWiBMOVVn0i8Zzk7RUoRob269Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.2.0/24
31.56.8.0/23
31.57.4.0/24
31.57.60.0/24
31.57.140.0/24
31.58.62.0/24
31.59.53.0/24
31.59.57.0/24
31.59.73.0-31.59.74.255
31.59.199.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:28:9d:7d:08:c8:8a:c3:3a:51:4f:87:da:ef:d9:3c:4c:58:
d0:c0:cf:11:60:30:6e:61:bc:bf:8b:26:3e:69:c4:8d:ec:a9:
54:e2:23:2f:55:23:90:a8:91:fd:ee:dd:9c:20:0a:9e:ae:31:
d4:c9:50:97:54:87:5d:ad:6e:80:7e:f4:45:fb:3d:70:1a:59:
96:5a:7b:4c:3a:25:5f:47:29:86:7b:64:d7:6f:61:59:17:dd:
cc:8b:f5:00:96:6f:32:8d:d6:10:a0:54:cf:7e:79:72:29:81:
7f:64:72:09:87:04:9e:e0:3b:6d:f0:89:30:89:97:fc:3c:4b:
03:1a:2f:eb:78:f0:69:82:93:45:cc:43:84:0c:c4:a4:5b:56:
b4:09:f9:5f:31:19:9d:f6:9b:90:e9:53:cb:a4:2d:68:23:6a:
5d:55:61:96:f9:4d:70:52:4e:f8:7a:9c:5b:f6:92:e2:7f:b2:
7e:74:1a:61:48:f1:7e:b9:5e:9d:fe:8a:05:36:42:c6:df:c4:
ad:65:69:c5:da:2e:47:5e:b1:bd:92:bf:11:db:c2:c0:e7:21:
ed:11:7c:59:25:b7:01:50:4d:5f:a5:90:3e:61:91:c4:d2:9d:
fa:7d:2b:e4:18:04:b7:a2:54:f0:60:ea:21:5d:22:3f:01:14:
d9:c0:a6:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 26 03:34:59 2026 by rpki-client