Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x_2eviSnrjBjE8EcPvSB_aPzBXs.roa
File: x_2eviSnrjBjE8EcPvSB_aPzBXs.roa (raw, json)
Hash identifier: IwGA5yd2JUT0fxdEuTfm/XO44Lx/fhQXaJhtS6iwuPI=
Subject key identifier: C7:FD:9E:BE:24:A7:AE:30:63:13:C1:1C:3E:F4:81:FD:A3:F3:05:7B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C4836A304ADDA4727655694B5D852B256
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x_2eviSnrjBjE8EcPvSB_aPzBXs.roa
Signing time: Tue 10 Feb 2026 15:41:06 +0000
ROA not before: Tue 10 Feb 2026 15:41:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27411
IP address blocks: 31.56.116.0/24 maxlen: 24
31.57.192.0/24 maxlen: 24
31.57.233.0/24 maxlen: 24
31.58.145.0/24 maxlen: 24
31.58.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 07:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:48:36:a3:04:ad:da:47:27:65:56:94:b5:d8:52:b2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 10 15:41:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7fd9ebe24a7ae306313c11c3ef481fda3f3057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:da:c4:6f:0e:52:90:f8:3f:bf:65:c9:f2:40:
4e:ed:6a:11:c6:d3:9e:e7:9a:64:8e:41:b8:00:58:
a5:fd:c6:f9:ba:ba:5a:c9:bc:38:9f:5b:85:73:da:
a8:15:33:bc:a2:60:7d:6a:0c:23:9d:69:5d:06:38:
ea:5a:ba:b9:e4:67:60:6a:9a:06:3c:49:27:90:de:
32:db:31:c7:e3:be:10:0a:ea:a5:46:b1:89:f1:97:
26:0c:68:9a:35:46:5f:6a:42:87:7d:47:92:de:87:
dd:b4:86:09:db:f9:3f:78:ee:4c:e9:2a:63:62:4c:
85:cd:da:89:96:49:9c:ea:0b:5c:67:45:46:3b:2c:
b9:2e:57:bb:78:6d:54:d2:b4:88:44:63:bc:0d:79:
eb:85:41:20:e9:c9:0a:88:ed:27:f8:a5:13:50:99:
de:d2:88:ba:35:20:0c:73:82:41:96:69:fb:6b:5a:
33:4f:3c:8b:34:43:22:d9:9e:2c:e8:9b:89:df:3c:
56:7f:60:86:24:f8:2b:8f:0f:39:ec:64:21:4b:a9:
70:b2:c2:08:aa:15:69:75:01:2d:03:8d:49:c9:39:
b5:2c:88:04:52:ac:86:ca:af:43:36:9b:44:40:d3:
16:a3:b2:7c:2f:ad:88:07:d1:47:57:4a:77:8e:d2:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:9E:BE:24:A7:AE:30:63:13:C1:1C:3E:F4:81:FD:A3:F3:05:7B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x_2eviSnrjBjE8EcPvSB_aPzBXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.116.0/24
31.57.192.0/24
31.57.233.0/24
31.58.145.0/24
31.58.149.0/24
Signature Algorithm: sha256WithRSAEncryption
82:52:8f:1b:b9:a9:23:63:cd:36:aa:cd:49:94:95:2e:a1:64:
88:8a:76:bf:82:73:f9:9e:12:c1:f7:be:83:e1:0c:70:8c:d6:
14:27:ad:58:1e:72:c2:ec:87:b4:12:a6:bd:4a:3a:c1:4a:a3:
d6:55:52:3c:0f:4c:ed:72:4b:41:c5:86:7f:f7:a4:20:65:22:
64:32:a3:2d:1c:71:ef:f0:86:88:87:7f:eb:f8:d8:6c:be:6d:
4c:11:c6:28:ff:a5:0a:d7:d5:d8:1d:04:80:50:b1:ee:4e:a9:
c3:e6:b8:68:18:ae:fb:e2:eb:ab:36:e9:b8:6e:28:ca:9a:e3:
eb:60:05:a1:57:e6:97:c4:82:15:5e:94:23:98:3e:9d:93:99:
58:3d:d5:6d:9c:c3:62:91:47:ec:4d:24:ef:0c:3d:cb:f5:4f:
31:e6:83:47:3a:a8:95:1b:d4:45:d6:f5:53:a6:49:60:a0:b2:
3b:5c:59:e9:4e:3c:8a:f6:02:a5:14:0f:8c:3b:08:30:6f:85:
b2:79:d7:0c:b5:78:82:26:17:24:1b:c5:f7:df:37:fe:50:75:
af:eb:5d:9a:5e:ed:69:e9:48:7b:81:20:9a:6c:c4:02:d6:4e:
00:89:58:ce:92:36:c2:ef:0a:da:00:41:8b:b0:d5:c0:83:b4:
72:27:13:25
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZxINqMErdpHJ2VWlLXYUrJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwMjEwMTU0MTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2ZkOWViZTI0YTdhZTMwNjMxM2MxMWMzZWY0ODFmZGEzZjMwNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7trEbw5SkPg/v2XJ8kBO7WoRxtOe
55pkjkG4AFil/cb5urpaybw4n1uFc9qoFTO8omB9agwjnWldBjjqWrq55GdgapoG
PEknkN4y2zHH474QCuqlRrGJ8ZcmDGiaNUZfakKHfUeS3ofdtIYJ2/k/eO5M6Spj
YkyFzdqJlkmc6gtcZ0VGOyy5Lle7eG1U0rSIRGO8DXnrhUEg6ckKiO0n+KUTUJne
0oi6NSAMc4JBlmn7a1ozTzyLNEMi2Z4s6JuJ3zxWf2CGJPgrjw857GQhS6lwssII
qhVpdQEtA41JyTm1LIgEUqyGyq9DNptEQNMWo7J8L62IB9FHV0p3jtIAmwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMf9nr4kp64wYxPBHD70gf2j8wV7MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveF8yZXZpU25yakJqRThFY1B2U0JfYVB6QlhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzh0AwQA
HznAAwQAHznpAwQAHzqRAwQAHzqVMA0GCSqGSIb3DQEBCwUAA4IBAQCCUo8buakj
Y802qs1JlJUuoWSIina/gnP5nhLB976D4QxwjNYUJ61YHnLC7Ie0Eqa9SjrBSqPW
VVI8D0ztcktBxYZ/96QgZSJkMqMtHHHv8IaIh3/r+Nhsvm1MEcYo/6UK19XYHQSA
ULHuTqnD5rhoGK774uurNum4bijKmuPrYAWhV+aXxIIVXpQjmD6dk5lYPdVtnMNi
kUfsTSTvDD3L9U8x5oNHOqiVG9RF1vVTpklgoLI7XFnpTjyK9gKlFA+MOwgwb4Wy
edcMtXiCJhckG8X33zf+UHWv612aXu1p6Uh7gSCabMQC1k4AiVjOkjbC7wraAEGL
sNXAg7RyJxMl
-----END CERTIFICATE-----
Generated at Thu Feb 26 11:55:52 2026 by rpki-client