Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2nt-Mv2uEBwfVIhj2qdeyJ6-keo.roa
File: 2nt-Mv2uEBwfVIhj2qdeyJ6-keo.roa (raw, json)
Hash identifier: WAjAvmtqSzqu5ue9UqM26Cz/amMo+52WLL4EXGjmIvM=
Subject key identifier: DA:7B:7E:32:FD:AE:10:1C:1F:54:88:63:DA:A7:5E:C8:9E:BE:91:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1A26E77C9B15DEB594152A997B5A54C48
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2nt-Mv2uEBwfVIhj2qdeyJ6-keo.roa
Signing time: Tue 03 Nov 2026 17:21:50 +0000
ROA not before: Tue 03 Nov 2026 17:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216129
IP address blocks: 31.56.180.0/24 maxlen: 24
31.57.13.0/24 maxlen: 24
31.57.117.0/24 maxlen: 24
31.58.85.0/24 maxlen: 24
31.58.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:6e:77:c9:b1:5d:eb:59:41:52:a9:97:b5:a5:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 17:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da7b7e32fdae101c1f548863daa75ec89ebe91ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:f7:a5:79:28:7e:e4:6b:99:b1:d0:d3:c0:
8b:c4:a5:8a:fb:e5:5e:bc:56:a7:72:02:30:75:2f:
80:31:60:88:67:74:6e:6f:23:51:30:75:fc:aa:d6:
62:a9:f5:10:91:86:2c:dc:6b:00:31:59:42:b8:9a:
60:3f:f0:90:b2:e7:c9:d2:38:f4:42:d1:94:12:0a:
d9:c5:f1:9d:c7:f8:83:53:f9:e2:cf:71:a4:25:46:
92:b0:14:9f:a7:cc:de:23:e5:56:dd:d6:7c:4c:4c:
c6:28:2c:aa:13:25:f3:9f:a7:2c:37:39:7e:30:b2:
94:8d:4b:67:a8:89:c6:ea:5b:c2:76:ff:89:00:c8:
d0:dd:50:e1:1d:d9:25:cf:c3:a0:7c:4d:eb:45:4b:
97:15:5f:ad:e0:61:d2:f7:01:b2:63:f1:a9:2d:15:
29:40:4b:1d:d0:69:bc:94:51:94:a0:b5:83:7d:66:
76:ff:f2:22:c0:dd:41:95:09:d8:45:ce:fe:a0:5e:
2c:17:d1:30:2d:ba:68:ce:6f:d5:54:a6:41:6e:df:
fb:17:dc:32:75:7a:39:b9:13:ca:57:2a:40:08:48:
c9:50:a8:1f:8b:5f:3c:f6:d5:c0:92:83:69:57:e1:
22:4f:6e:fe:40:8c:83:9c:da:93:48:ad:02:57:9e:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7B:7E:32:FD:AE:10:1C:1F:54:88:63:DA:A7:5E:C8:9E:BE:91:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2nt-Mv2uEBwfVIhj2qdeyJ6-keo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.180.0/24
31.57.13.0/24
31.57.117.0/24
31.58.85.0/24
31.58.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:32:8d:39:6a:8f:43:f3:db:01:d2:b1:20:91:15:7b:5c:6a:
d7:72:c0:75:86:9a:e5:6d:af:12:12:4e:ff:46:3e:9d:5f:6d:
fb:47:8f:8c:3b:7a:56:a1:35:06:5b:52:fc:4d:2a:cb:18:fe:
e8:d9:1f:d7:20:7e:df:c9:d8:c2:f4:64:e7:8f:97:e5:f9:dc:
a8:83:4f:51:88:ad:54:4d:d7:f5:62:ff:6d:a6:d5:0a:be:a5:
b9:cc:75:84:4f:be:68:8e:74:da:02:12:12:b4:83:cb:67:a7:
87:2d:91:ed:ac:d6:77:59:d6:2e:c2:12:25:c7:5e:ad:92:08:
6e:5c:4a:89:3b:6d:8f:b6:67:e2:81:cd:a5:eb:e4:85:59:b8:
27:7b:79:0d:ce:db:a7:71:96:7a:a8:0e:cb:ed:69:c7:2f:00:
25:ff:b2:0c:21:e1:29:6a:2e:d1:dd:a7:0c:2e:34:81:b1:80:
a5:ec:d2:5c:b3:3a:cb:46:cd:32:fe:d0:95:fa:f5:61:44:64:
7d:0f:ef:08:e9:9a:7f:d8:1f:58:fe:2f:c5:7b:13:9d:e0:0d:
88:38:c0:f1:c4:52:86:ba:8a:37:a0:53:9a:4a:f3:88:c9:c2:
cf:af:06:4f:65:8e:cc:12:fa:06:28:33:31:b3:93:57:75:f0:
9b:f4:e0:2a
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaGibnfJsV3rWUFSqZe1pUxIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTAzMTcyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTdiN2UzMmZkYWUxMDFjMWY1NDg4NjNkYWE3NWVjODllYmU5MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xr3pXkofuRrmbHQ08CLxKWK++Ve
vFancgIwdS+AMWCIZ3RubyNRMHX8qtZiqfUQkYYs3GsAMVlCuJpgP/CQsufJ0jj0
QtGUEgrZxfGdx/iDU/niz3GkJUaSsBSfp8zeI+VW3dZ8TEzGKCyqEyXzn6csNzl+
MLKUjUtnqInG6lvCdv+JAMjQ3VDhHdklz8OgfE3rRUuXFV+t4GHS9wGyY/GpLRUp
QEsd0Gm8lFGUoLWDfWZ2//IiwN1BlQnYRc7+oF4sF9EwLbpozm/VVKZBbt/7F9wy
dXo5uRPKVypACEjJUKgfi1889tXAkoNpV+EiT27+QIyDnNqTSK0CV56YMQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNp7fjL9rhAcH1SIY9qnXsievpHqMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMm50LU12MnVFQndmVkloajJxZGV5SjYta2VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzi0AwQA
HzkNAwQAHzl1AwQAHzpVAwQAHzqbMA0GCSqGSIb3DQEBCwUAA4IBAQBMMo05ao9D
89sB0rEgkRV7XGrXcsB1hprlba8SEk7/Rj6dX237R4+MO3pWoTUGW1L8TSrLGP7o
2R/XIH7fydjC9GTnj5fl+dyog09RiK1UTdf1Yv9tptUKvqW5zHWET75ojnTaAhIS
tIPLZ6eHLZHtrNZ3WdYuwhIlx16tkghuXEqJO22Ptmfigc2l6+SFWbgne3kNztun
cZZ6qA7L7WnHLwAl/7IMIeEpai7R3acMLjSBsYCl7NJcszrLRs0y/tCV+vVhRGR9
D+8I6Zp/2B9Y/i/FexOd4A2IOMDxxFKGuoo3oFOaSvOIycLPrwZPZY7MEvoGKDMx
s5NXdfCb9OAq
-----END CERTIFICATE-----
Generated at Thu Nov 5 19:11:18 2026 by rpki-client