Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5VCx18pYtmTktzbwAqr5QPQt2oU.roa
File: 5VCx18pYtmTktzbwAqr5QPQt2oU.roa (raw, json)
Hash identifier: /O/9e+wAfyqEfWvfF4JVFZgpv85BjlS84Pw3OlaDAe8=
Subject key identifier: E5:50:B1:D7:CA:58:B6:64:E4:B7:36:F0:02:AA:F9:40:F4:2D:DA:85
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A058CB00B4EDD602ECA79A56D871F8746F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5VCx18pYtmTktzbwAqr5QPQt2oU.roa
Signing time: Mon 31 Aug 2026 17:08:13 +0000
ROA not before: Mon 31 Aug 2026 17:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 31.56.190.0/24 maxlen: 24
31.56.231.0/24 maxlen: 24
31.57.146.0/24 maxlen: 24
31.58.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:cb:00:b4:ed:d6:02:ec:a7:9a:56:d8:71:f8:74:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 31 17:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e550b1d7ca58b664e4b736f002aaf940f42dda85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:e7:01:93:d7:1d:f8:5f:61:d3:a2:1f:5b:
7a:f9:ee:c0:fa:30:81:7c:8e:0d:bb:c2:df:ac:ec:
c5:46:49:e9:81:a4:a1:1c:1c:ba:96:3b:15:30:8c:
a2:84:eb:23:03:3d:76:ad:7e:fe:96:5b:a4:8b:75:
92:51:38:b7:f0:45:87:23:71:3f:15:5c:f7:43:1c:
0a:f1:61:1b:b9:a8:f8:10:93:7e:ae:49:c9:18:01:
c8:dc:f3:7c:cc:c5:81:35:52:70:99:a7:b1:d3:d7:
ed:16:af:e3:cb:2a:57:eb:f1:af:a7:19:93:c1:cf:
90:35:07:37:ab:ac:76:22:ae:38:9b:fc:24:34:6a:
32:21:10:d4:23:27:0d:de:c8:d3:93:c6:23:78:f6:
7b:37:0e:6a:22:01:ea:c2:15:16:97:14:0a:d2:2e:
e3:af:ec:d5:50:02:d4:f3:a7:a1:50:a4:db:f0:78:
d8:b5:6f:74:94:3c:b0:f6:ce:b4:d0:cf:4e:a3:b5:
6e:a2:3a:5d:51:02:9e:22:1d:2c:32:34:ad:2f:64:
0b:f5:69:69:0b:88:5e:4f:87:0f:e8:cb:b9:74:70:
cf:8a:54:67:18:a7:01:7d:c2:e5:44:98:fa:06:f2:
b7:7e:68:79:25:93:f8:e6:02:a7:22:3f:02:c2:6d:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:B1:D7:CA:58:B6:64:E4:B7:36:F0:02:AA:F9:40:F4:2D:DA:85
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5VCx18pYtmTktzbwAqr5QPQt2oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.190.0/24
31.56.231.0/24
31.57.146.0/24
31.58.213.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ee:67:4b:f1:1c:fc:d6:a6:84:f9:bc:f3:41:4a:a7:95:61:
5a:53:21:97:6a:1d:cd:89:a1:0e:c3:23:a5:7e:79:1e:61:7f:
ec:a5:f1:6b:14:5b:ee:bd:df:b5:a8:16:a8:f5:72:03:78:98:
4f:9a:02:4b:6e:93:b8:da:fc:46:65:84:39:d3:29:81:ec:8a:
ff:56:07:d8:fe:a0:43:6d:72:32:78:ae:19:6c:93:7c:75:ff:
c7:f3:8b:91:47:1a:51:7a:a9:5b:ac:c5:24:b8:39:f1:8e:f5:
ec:ff:54:65:ba:c4:2d:ea:8b:95:4e:a1:b8:9d:ce:7c:1d:6e:
34:d4:a2:5a:2d:ec:0b:15:1e:ab:14:57:d4:61:ea:87:bc:2a:
51:5a:82:96:45:25:44:4e:67:0d:5d:6c:d4:67:45:83:0c:a9:
38:e9:62:01:aa:6e:f4:8e:68:39:1e:98:84:c0:97:8d:10:43:
7f:c4:a9:99:d7:2b:03:0d:25:b8:9d:1c:ed:38:54:35:28:a2:
08:d2:52:71:38:7e:20:a3:36:b2:06:5d:66:45:c9:e3:5b:ce:
21:17:f2:18:bd:c9:2e:16:74:e4:03:40:99:20:eb:4e:9a:dc:
d0:cb:56:70:bb:0f:e4:e4:fa:2b:aa:fc:66:61:ec:f1:6c:b0:
b7:dd:84:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:25 2026 by rpki-client