Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1l8gBW0SgDcqGuve6GdEB66Cgp4.roa
File: 1l8gBW0SgDcqGuve6GdEB66Cgp4.roa (raw, json)
Hash identifier: dNyvVJjgrrr2tAK8HGNTdq3LGCWljuzVVYX3a/Sf8s8=
Subject key identifier: D6:5F:20:05:6D:12:80:37:2A:1A:EB:DE:E8:67:44:07:AE:82:82:9E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0C9042B8D33589218A8AFF18227ED3EEA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1l8gBW0SgDcqGuve6GdEB66Cgp4.roa
Signing time: Tue 22 Sep 2026 12:08:08 +0000
ROA not before: Tue 22 Sep 2026 12:08:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.56.16.0/24 maxlen: 24
31.56.18.0/24 maxlen: 24
31.56.188.0/24 maxlen: 24
31.57.16.0/24 maxlen: 24
31.57.17.0/24 maxlen: 24
31.57.18.0/24 maxlen: 24
31.57.19.0/24 maxlen: 24
31.57.20.0/24 maxlen: 24
31.57.21.0/24 maxlen: 24
31.57.22.0/24 maxlen: 24
31.57.23.0/24 maxlen: 24
31.58.92.0/24 maxlen: 24
31.58.93.0/24 maxlen: 24
31.58.176.0/24 maxlen: 24
31.58.177.0/24 maxlen: 24
31.58.218.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.124.0/24 maxlen: 24
31.59.125.0/24 maxlen: 24
31.59.126.0/24 maxlen: 24
31.59.127.0/24 maxlen: 24
31.59.142.0/24 maxlen: 24
31.59.149.0/24 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.219.0/24 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.223.0/24 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.200.0/24 maxlen: 24
94.183.201.0/24 maxlen: 24
94.183.202.0/24 maxlen: 24
94.183.204.0/24 maxlen: 24
94.183.205.0/24 maxlen: 24
94.183.217.0/24 maxlen: 24
94.183.219.0/24 maxlen: 24
94.183.220.0/22 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.221.0/24 maxlen: 24
94.183.222.0/24 maxlen: 24
94.183.223.0/24 maxlen: 24
94.183.228.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
94.183.253.0/24 maxlen: 24
94.183.255.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.17.0/24 maxlen: 24
217.60.21.0/24 maxlen: 24
217.60.23.0/24 maxlen: 24
217.60.64.0/24 maxlen: 24
217.60.65.0/24 maxlen: 24
217.60.68.0/24 maxlen: 24
217.60.69.0/24 maxlen: 24
217.60.83.0/24 maxlen: 24
217.60.176.0/24 maxlen: 24
217.60.181.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:04:2b:8d:33:58:92:18:a8:af:f1:82:27:ed:3e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 22 12:08:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d65f20056d1280372a1aebdee8674407ae82829e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:5d:cf:40:fb:d9:41:5f:fa:47:7e:5b:88:
af:e6:b3:dc:fe:3e:a9:b9:ca:21:ed:f5:6c:2c:ce:
e0:28:26:74:e2:12:1f:b6:c4:c7:b5:a4:f3:f1:69:
62:35:a5:21:d8:91:08:46:6a:f7:85:f6:4a:1e:f0:
7c:65:07:f4:5a:5b:3b:24:e6:14:49:29:4e:f7:68:
d9:b9:74:a9:64:aa:43:65:9e:d5:31:cb:f8:0e:aa:
45:bb:db:61:fc:f2:3f:b0:fd:4a:e0:c8:18:c5:62:
55:74:c0:ea:64:b0:b2:8e:e8:a8:24:7c:93:f3:5a:
47:e8:8b:81:2c:4d:e9:60:58:5c:52:1a:61:09:b8:
b1:28:c4:9b:95:bf:ad:dc:95:1c:62:97:09:34:f1:
8d:fc:e0:55:8b:b8:6c:c7:78:11:33:44:f6:5a:ce:
84:7f:2c:1d:ed:d4:ed:8e:5b:66:4d:c4:11:aa:d7:
bd:cb:c9:a1:ba:ac:57:91:3f:f9:09:65:87:30:6a:
4e:6a:c3:3f:39:42:bf:d1:53:1a:69:9a:bb:9f:6a:
ec:2a:73:e3:84:42:57:da:8e:03:7f:75:68:38:f9:
55:22:11:22:e7:98:0a:db:f7:93:d3:b1:2f:6c:ec:
7f:82:98:50:1b:71:b7:b4:84:f2:29:ea:14:c9:9b:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:20:05:6D:12:80:37:2A:1A:EB:DE:E8:67:44:07:AE:82:82:9E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1l8gBW0SgDcqGuve6GdEB66Cgp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/24
31.56.18.0/24
31.56.188.0/24
31.57.16.0/21
31.58.92.0/23
31.58.176.0/23
31.58.218.0/24
31.58.240.0/22
31.59.36.0/24
31.59.124.0/22
31.59.142.0/24
31.59.149.0/24
31.59.208.0/24
31.59.219.0-31.59.220.255
31.59.223.0/24
94.183.152.0/24
94.183.157.0/24
94.183.200.0-94.183.202.255
94.183.204.0/23
94.183.217.0/24
94.183.219.0-94.183.223.255
94.183.228.0/23
94.183.241.0/24
94.183.253.0/24
94.183.255.0/24
217.60.13.0/24
217.60.17.0/24
217.60.21.0/24
217.60.23.0/24
217.60.64.0/23
217.60.68.0/23
217.60.83.0/24
217.60.176.0/24
217.60.181.0/24
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9f:ef:f9:ef:26:2f:67:4f:cf:7c:67:b5:94:05:11:cb:c0:
17:ed:73:eb:95:8f:76:8b:92:fa:ad:de:a4:3f:70:7d:97:29:
2d:9a:2e:f7:c6:46:ad:b7:79:15:04:47:aa:b6:e5:d7:9e:a6:
68:53:4e:ce:42:78:f1:56:f6:c1:c8:64:b6:0c:2b:7b:a2:65:
d8:3e:fa:61:a1:27:cd:eb:c2:5b:35:72:2b:91:63:cb:4e:eb:
b2:d8:e7:f7:8b:19:7f:75:f3:12:66:67:de:2b:e4:1c:ee:80:
d1:44:31:f6:db:65:90:9b:67:a1:69:3e:2e:ff:4b:d6:64:3c:
e1:cb:f2:47:1e:c9:2d:97:66:10:92:d8:ce:cc:10:5b:1e:41:
4e:85:9b:d7:d7:a7:9e:cf:97:2e:78:69:0c:c2:d6:40:36:cd:
2c:97:49:cd:7c:ae:27:c0:2a:9a:b8:0c:96:ac:ea:bc:4f:dc:
09:94:f3:e2:61:d5:dd:aa:88:82:12:f2:bd:94:f3:10:c9:90:
34:75:32:a7:1f:b4:05:6e:8c:27:30:83:ca:d2:b8:4a:ed:10:
d9:04:3e:cf:26:4c:d0:8b:4f:1e:f7:24:80:6e:13:a5:48:0f:
eb:d1:41:17:91:70:86:85:5e:d6:a1:33:9e:9c:0d:56:a9:ad:
0f:5b:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:27:33 2026 by rpki-client