Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1rzAevyA_C0u8Ov5gxmqqE5tfy0.roa
File: 1rzAevyA_C0u8Ov5gxmqqE5tfy0.roa (raw, json)
Hash identifier: PWSia0dpsTETj7cl8VW+HZz9ZpZ4fE1AmTyNb84Graw=
Subject key identifier: D6:BC:C0:7A:FC:80:FC:2D:2E:F0:EB:F9:83:19:AA:A8:4E:6D:7F:2D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A09654B57EA16E305B9C64FDB272CCF633
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1rzAevyA_C0u8Ov5gxmqqE5tfy0.roa
Signing time: Sat 12 Sep 2026 15:55:28 +0000
ROA not before: Sat 12 Sep 2026 15:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.67.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.186.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:54:b5:7e:a1:6e:30:5b:9c:64:fd:b2:72:cc:f6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 12 15:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6bcc07afc80fc2d2ef0ebf98319aaa84e6d7f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:b4:0e:e8:f7:80:00:eb:d5:50:4f:10:6e:
30:90:50:c5:99:f4:77:73:0e:2f:3d:13:e1:4b:dd:
eb:c1:cd:25:1c:60:ea:e6:1f:79:07:95:bb:39:9d:
e7:ba:f1:ee:63:56:81:ab:35:f7:3d:34:82:35:99:
d1:62:4f:8f:fd:e9:08:e6:bc:7c:7c:41:88:b6:64:
78:ca:db:60:fe:c3:72:4e:77:6f:99:f6:34:e7:0b:
f6:56:53:43:8d:a1:26:a7:1a:10:de:ef:6d:7d:f1:
c8:ce:33:d4:60:ae:2d:dd:51:09:69:4c:c6:58:e7:
08:c2:5e:6d:e5:76:0e:4a:37:a0:fd:c0:98:c6:22:
4b:b7:ef:55:91:c1:7c:8f:f8:79:3d:0e:e7:20:3e:
90:32:3c:5f:4f:19:8e:6a:e0:66:ec:b4:2c:dd:54:
ec:44:ae:bd:8e:d5:a5:61:d3:ac:f8:67:07:2a:35:
fe:e1:ec:02:a6:f7:5d:fd:3e:19:44:f0:61:4d:9b:
0a:5b:21:d4:fe:b9:fc:7a:b3:47:53:44:1e:3d:39:
7f:4c:e0:83:02:e3:ef:f0:74:e3:cb:6b:28:11:f7:
70:c5:8a:67:05:f7:d8:97:08:60:cd:9c:11:79:f5:
b6:70:8c:1a:c1:50:4a:6b:6d:2b:c0:13:96:12:9d:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:C0:7A:FC:80:FC:2D:2E:F0:EB:F9:83:19:AA:A8:4E:6D:7F:2D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1rzAevyA_C0u8Ov5gxmqqE5tfy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.67.0/24
31.56.156.0/24
31.57.113.0/24
31.57.153.0/24
31.57.186.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
31.58.164.0/24
31.59.88.0/24
31.59.123.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e0:29:de:2b:5e:e6:ba:03:2c:fd:09:ab:42:36:aa:f9:8a:
97:78:c5:42:48:47:1e:d5:6f:c7:5a:02:c0:f4:e3:0b:9a:32:
3a:d1:83:24:ee:56:32:d8:53:0f:f5:1d:90:49:88:10:3e:ea:
ef:f9:33:28:01:d0:99:9e:a2:2b:1c:ab:d0:12:31:09:27:f7:
d0:01:59:29:06:32:a3:eb:1b:4c:86:5e:40:22:fb:20:53:2b:
85:00:bd:16:ba:49:9b:e3:ea:de:24:7a:d7:a5:bf:28:7c:bb:
43:f9:8d:f7:51:75:0f:e9:32:cf:f1:24:61:5d:eb:1f:17:f9:
93:95:44:6c:55:e6:03:e0:a9:c5:29:80:d5:03:f6:c2:42:03:
e2:47:aa:ee:cf:34:3a:0d:2e:6c:85:2b:a9:ff:8f:a9:ee:a7:
71:48:c5:37:40:54:6a:77:5e:c5:27:89:7b:2d:5f:f3:d2:e6:
f1:d8:12:de:c5:0f:7f:f6:f0:ec:f7:64:7f:62:ff:85:4b:df:
88:9c:d4:60:e3:e1:8d:6a:5e:1c:02:58:56:7c:38:ce:a0:66:
e7:88:46:2d:28:71:90:7f:29:e4:8e:43:76:7e:00:a3:f2:c9:
ad:ca:a2:9a:54:ba:ae:c8:e6:eb:bb:df:94:0e:af:85:e3:40:
c9:1a:9e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:34 2026 by rpki-client