Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-zGgrI6wO4ot2fXJ2ZqPjshdbaY.roa
File: 1-zGgrI6wO4ot2fXJ2ZqPjshdbaY.roa (raw, json)
Hash identifier: qhlb3zhPoBHPbNP47jQpUeOZAw1Kzks6/Sa6C6HNh2w=
Subject key identifier: FB:31:A0:AC:8E:B0:3B:8A:2D:D9:F5:C9:D9:9A:8F:8E:C8:5D:6D:A6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C76665F361798479B1335908583B3A60A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-zGgrI6wO4ot2fXJ2ZqPjshdbaY.roa
Signing time: Thu 19 Feb 2026 14:55:46 +0000
ROA not before: Thu 19 Feb 2026 14:55:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 31.56.89.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.153.0/24 maxlen: 24
94.183.154.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.169.0/24 maxlen: 24
94.183.180.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:66:5f:36:17:98:47:9b:13:35:90:85:83:b3:a6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 19 14:55:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb31a0ac8eb03b8a2dd9f5c9d99a8f8ec85d6da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:da:ce:ef:ac:ce:98:f4:b3:a8:55:25:53:
5d:18:ea:c4:aa:19:de:50:b2:b9:25:46:6d:4a:05:
76:fa:f4:92:ae:62:d5:b2:70:9d:f7:ab:49:9e:f2:
a9:d2:c5:2a:41:29:fe:98:b6:d5:10:0a:49:dc:82:
f1:70:ab:52:3f:71:19:57:c8:53:af:e3:a8:e1:d8:
98:8a:0e:44:08:9d:79:3b:ab:a7:f7:bd:c7:00:48:
82:66:07:d9:69:2a:ad:87:39:b5:a7:26:42:df:fd:
6f:58:92:c5:70:1f:dd:7c:57:a0:4f:78:68:87:19:
4a:3f:16:7f:48:86:e2:c9:96:cf:87:04:1b:75:ad:
28:02:9f:50:58:8e:5d:5a:19:8f:eb:fd:ee:57:97:
1e:31:08:42:05:6f:48:92:8f:cd:dd:90:56:be:72:
e7:88:61:f4:24:a6:aa:fe:17:05:c5:5d:24:d8:be:
f6:ee:16:1d:37:e8:6d:76:af:a0:7b:35:69:15:89:
71:c6:49:5b:ad:b7:a6:a3:40:ed:d5:7e:f8:b1:d4:
53:dd:71:85:aa:2c:be:50:a0:bd:da:d4:25:2f:c2:
6b:36:05:28:ea:30:93:60:36:5e:bf:89:37:9f:a2:
8a:b7:60:7b:01:0c:9a:9a:35:4e:9e:f5:99:4e:b2:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:31:A0:AC:8E:B0:3B:8A:2D:D9:F5:C9:D9:9A:8F:8E:C8:5D:6D:A6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-zGgrI6wO4ot2fXJ2ZqPjshdbaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.89.0/24
31.58.237.0/24
94.183.150.0/24
94.183.153.0-94.183.154.255
94.183.162.0/24
94.183.169.0/24
94.183.180.0/24
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:5c:68:cd:f6:71:93:e6:c5:de:ba:86:33:1c:1b:32:40:22:
cb:b3:f4:35:2e:2b:f3:10:c8:f9:22:03:fe:9e:c0:cb:80:1a:
8f:35:22:2a:a7:42:4c:80:b7:2b:f4:37:4e:2c:ae:73:e1:54:
d0:6e:6e:4a:19:c5:88:40:da:ec:5e:ac:59:3b:3a:b4:7d:50:
80:96:93:42:b3:a2:32:7a:54:1b:6a:1d:dc:dc:70:17:b0:e0:
69:a7:e6:32:1a:c0:f6:9b:ff:76:5a:36:3a:f5:f2:64:61:fe:
67:51:05:fc:16:56:da:de:91:25:2d:a2:ef:b8:c3:0d:28:c4:
cd:20:3b:87:da:6a:61:63:b7:38:6f:dc:ac:89:44:43:7d:50:
ba:69:3d:85:28:48:68:af:84:59:a0:ba:31:d3:20:da:47:a1:
2d:e1:8f:05:31:d3:1b:14:6f:44:d9:79:1e:7c:e6:6b:42:18:
5e:aa:70:b4:0a:98:c1:64:77:5b:49:40:64:3c:38:6e:b9:67:
e2:6a:77:7c:93:67:e8:e7:0c:cc:36:84:f7:54:40:19:9d:e7:
9d:c0:b9:f9:6a:52:2e:e7:c3:af:b0:7e:c6:9d:27:70:6a:cb:
30:d8:fc:fd:c8:6c:79:fd:98:8c:03:6d:80:19:27:74:1a:e7:
c2:e0:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:14 2026 by rpki-client