Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zPNd3pg_PI0FItjLfONFwHgdJWw.roa
File: zPNd3pg_PI0FItjLfONFwHgdJWw.roa (raw, json)
Hash identifier: v2IEyIh5aZZ3T5om1wclKjJIUp6IJxPZMUJH9DFgwcc=
Subject key identifier: CC:F3:5D:DE:98:3F:3C:8D:05:22:D8:CB:7C:E3:45:C0:78:1D:25:6C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F95CCD02770815D301E02805C65CD76EF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zPNd3pg_PI0FItjLfONFwHgdJWw.roa
Signing time: Fri 24 Jul 2026 20:24:15 +0000
ROA not before: Fri 24 Jul 2026 20:24:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.79.0/24 maxlen: 24
31.56.183.0/24 maxlen: 24
31.57.36.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/24 maxlen: 24
31.57.217.0/24 maxlen: 24
31.58.178.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.192.0/20 maxlen: 24
31.58.249.0/24 maxlen: 24
31.59.37.0/24 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.161.0/24 maxlen: 24
31.59.176.0/21 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
94.183.169.0/24 maxlen: 24
94.183.236.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.71.0/24 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.128.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
217.60.148.0/22 maxlen: 24
217.60.152.0/22 maxlen: 24
217.60.156.0/22 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.242.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:cc:d0:27:70:81:5d:30:1e:02:80:5c:65:cd:76:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 20:24:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccf35dde983f3c8d0522d8cb7ce345c0781d256c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:a0:92:45:35:02:43:75:43:a2:09:15:65:
d1:d4:b7:69:06:a6:ed:1f:c8:56:32:b6:9d:d1:40:
c4:19:75:f4:25:e8:b5:59:4a:e2:eb:d2:51:a1:28:
b0:58:03:7b:97:7a:87:f1:c3:29:1e:9f:00:31:2e:
d6:05:bb:13:af:af:7b:0d:4c:38:ec:5b:c6:ce:71:
b4:f3:06:98:14:01:53:2c:c9:e2:1b:fd:80:2f:6a:
b4:b3:53:dd:f3:2d:20:53:99:95:6b:41:d7:84:b9:
19:ae:12:72:67:3a:cc:58:08:a8:34:db:a6:b6:c8:
9f:e9:ce:39:c8:68:a7:5b:ec:29:93:53:dc:24:f2:
47:1c:58:95:df:2f:c1:e6:95:3a:83:f7:77:d0:e1:
4c:c6:a8:b6:11:56:06:88:ca:ee:0c:0c:e1:99:54:
98:b3:70:54:65:88:3d:f1:44:f3:28:95:08:eb:23:
84:6e:55:05:d2:d6:e0:65:eb:d7:39:52:9c:c5:c7:
e5:e8:68:5e:b7:f7:a3:73:91:b5:f5:d7:a8:55:e2:
7f:ba:df:bf:c5:78:84:ae:ad:d1:e5:04:1f:91:16:
9c:7b:89:59:fc:de:21:75:09:0a:50:26:af:d0:60:
b5:37:b8:15:ea:53:39:d8:38:de:59:6f:d4:45:3b:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:5D:DE:98:3F:3C:8D:05:22:D8:CB:7C:E3:45:C0:78:1D:25:6C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zPNd3pg_PI0FItjLfONFwHgdJWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.79.0/24
31.56.183.0/24
31.57.36.0/24
31.57.200.0/24
31.57.208.0/24
31.57.217.0/24
31.58.178.0/24
31.58.180.0/24
31.58.192.0/20
31.58.249.0/24
31.59.37.0/24
31.59.90.0/23
31.59.161.0/24
31.59.176.0/21
94.183.152.0/24
94.183.160.0/24
94.183.169.0/24
94.183.236.0/24
217.60.28.0/22
217.60.52.0-217.60.59.255
217.60.71.0/24
217.60.108.0-217.60.115.255
217.60.128.0/19
217.60.176.0/21
217.60.242.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
5c:e6:34:50:46:33:dc:22:70:7e:10:29:01:51:c2:d8:89:49:
dd:4b:ee:41:18:e0:0f:5e:46:d6:c0:42:39:23:66:61:91:18:
4c:cc:6b:16:4b:03:1f:f8:dd:a5:25:ea:ea:df:b7:59:8a:60:
1d:8e:a0:9e:a5:9c:99:b5:69:39:9a:0e:cd:d5:12:92:22:42:
79:d9:ff:ab:da:e0:2f:52:82:30:6c:ed:92:aa:10:08:86:de:
55:eb:94:36:5f:0b:a9:26:29:af:07:46:19:11:e6:d3:92:a3:
5c:6b:e8:6d:08:3b:84:bd:90:6e:79:04:5b:34:59:b5:ad:8f:
5f:00:8e:ab:1a:e3:b9:f4:31:d6:fc:3b:a0:94:67:83:62:7c:
af:fe:d7:d7:19:38:2f:24:c3:aa:88:f4:b8:6d:20:5c:96:14:
ac:16:44:08:5a:36:b5:59:59:05:8a:97:0c:56:13:e2:fc:7f:
ab:e9:5a:cb:9e:fc:a6:b0:d2:9a:4e:bf:4d:9d:b3:db:80:60:
d7:e6:62:da:b4:a5:60:ba:cc:fd:21:83:ca:0b:c5:e9:a2:76:
e7:b5:08:14:68:3f:a6:4d:e6:94:07:03:45:5f:6b:7f:69:79:
3a:7a:a0:8c:ec:5f:31:18:c6:c5:01:f0:dc:e9:60:c8:bc:96:
b8:25:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:27 2026 by rpki-client