Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zMB6xr1j1EvFZMD98oBAQWWwhEE.roa
File: zMB6xr1j1EvFZMD98oBAQWWwhEE.roa (raw, json)
Hash identifier: 7vyfn79CSNLY2NP50d9NM2bulLcVhjzZoPoKiV3MMvg=
Subject key identifier: CC:C0:7A:C6:BD:63:D4:4B:C5:64:C0:FD:F2:80:40:41:65:B0:84:41
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0F6738014A48696E9A0F5AF3A6EBCA37C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zMB6xr1j1EvFZMD98oBAQWWwhEE.roa
Signing time: Thu 01 Oct 2026 07:52:39 +0000
ROA not before: Thu 01 Oct 2026 07:52:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213438
IP address blocks: 31.56.110.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
217.60.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:73:80:14:a4:86:96:e9:a0:f5:af:3a:6e:bc:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 1 07:52:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccc07ac6bd63d44bc564c0fdf280404165b08441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:74:db:94:5e:ad:3e:c3:51:eb:5e:ac:e6:
dc:92:cf:09:ec:81:3d:38:b6:6a:fe:bc:e6:20:6f:
c9:b2:5d:5a:c5:0d:45:3f:c8:c0:a6:3e:ba:33:bd:
95:2f:76:a4:82:d4:b5:0c:d0:a2:f0:37:d1:06:e0:
ea:29:4a:77:72:75:1a:f6:b6:16:d5:88:2b:ca:7b:
0f:85:7b:6c:bb:1a:17:c6:5a:dc:e1:a8:5b:e9:c4:
1a:61:4e:ed:85:2e:9e:8f:64:53:df:a0:9c:0b:8d:
dc:24:61:3e:73:f1:52:ca:50:ad:b2:27:9f:44:3c:
aa:f7:dc:ec:ca:0d:a9:2c:a9:1a:29:05:39:77:0c:
d0:4b:3c:07:4c:ce:57:56:d8:0b:8f:fd:87:5a:6b:
db:bc:72:9c:80:4c:93:ad:3b:90:92:b2:5b:09:05:
1d:ff:29:fe:8d:cd:68:5a:9b:9e:9e:cc:f7:99:fd:
26:69:73:46:e5:12:df:00:7b:2b:61:76:2a:b1:b1:
75:6c:67:b1:1c:44:0b:a3:34:b4:71:29:e9:41:2c:
e6:d4:b6:20:96:4a:60:5b:ae:8f:47:62:4c:56:50:
ae:98:b3:f4:bf:84:75:22:a5:1b:5a:82:49:90:a3:
00:6b:f8:fd:88:69:88:dd:ad:b8:52:31:98:5e:31:
50:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C0:7A:C6:BD:63:D4:4B:C5:64:C0:FD:F2:80:40:41:65:B0:84:41
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zMB6xr1j1EvFZMD98oBAQWWwhEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.110.0/24
31.58.249.0/24
217.60.79.0/24
Signature Algorithm: sha256WithRSAEncryption
22:20:de:ff:23:73:b1:73:8a:01:28:5d:62:31:9a:27:67:fa:
53:96:0f:60:37:b1:ac:e7:29:45:aa:48:c3:e5:f3:ce:1f:b0:
83:b9:98:75:8d:d1:1f:29:db:c8:49:54:f1:43:5b:2d:e1:0a:
f7:16:8c:9c:85:9e:8e:32:ab:c7:64:0a:b1:52:a7:a6:73:95:
66:46:ca:90:b1:a0:b5:b2:9f:b1:2d:47:d2:d1:a7:1f:71:6a:
e2:4c:d4:a0:f2:ff:2a:9b:63:cb:45:d7:fe:2d:c6:cd:34:7a:
a9:84:87:d7:4a:c2:ff:48:2f:e8:39:dd:f9:59:c3:be:28:c1:
af:1f:b3:5c:55:23:13:17:95:d9:27:bf:d1:27:ca:6b:27:39:
e9:ac:48:ba:f5:5a:7c:77:dd:72:7e:fc:d8:0a:d9:cf:38:0c:
3c:94:02:a0:75:fc:1d:c6:96:d9:76:87:97:f8:23:cd:65:27:
a3:51:cc:e2:b4:b1:f8:9f:cf:f1:da:12:31:f7:b3:39:e3:19:
24:20:36:e9:cb:2c:33:e1:3a:7c:98:d5:7b:c0:b8:fe:19:7d:
cc:23:5b:c8:d1:ce:de:b7:a8:61:ee:fe:58:cf:de:0e:34:50:
89:e3:c5:fd:bd:6e:7d:47:ee:67:90:a3:8e:ea:23:ea:01:5f:
05:ba:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:15 2026 by rpki-client