Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ih-uYeZBipLOukn-7329RKWGDA.roa
File: 9ih-uYeZBipLOukn-7329RKWGDA.roa (raw, json)
Hash identifier: bp8xwCn5OcbrbTpv1cCFxPcZV2Ja2EznV5i1RLxPHQk=
Subject key identifier: F6:28:7E:B9:87:99:06:2A:4B:3A:E9:27:FB:BD:F6:F5:12:96:18:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1A2D7BFC9F83A515D8DFFA02EB344D27D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ih-uYeZBipLOukn-7329RKWGDA.roa
Signing time: Tue 03 Nov 2026 19:16:50 +0000
ROA not before: Tue 03 Nov 2026 19:16:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 31.56.46.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.58.18.0/24 maxlen: 24
31.58.22.0/24 maxlen: 24
31.58.28.0/24 maxlen: 24
31.58.32.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.20.0/24 maxlen: 24
31.59.21.0/24 maxlen: 24
31.59.27.0/24 maxlen: 24
31.59.28.0/24 maxlen: 24
31.59.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 21:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:d7:bf:c9:f8:3a:51:5d:8d:ff:a0:2e:b3:44:d2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 19:16:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6287eb98799062a4b3ae927fbbdf6f512961830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:1b:e9:15:8a:60:76:e2:e7:89:e0:a1:55:
27:50:73:1a:45:f5:f9:fe:9c:d3:1f:ba:18:b3:33:
84:e9:3d:cd:dd:06:5c:c5:84:ed:46:6e:de:94:99:
6e:9d:f2:2a:41:7a:e8:36:06:5b:5e:87:09:9e:81:
c3:3d:82:78:24:aa:68:1f:41:eb:ed:60:40:c4:65:
15:51:c4:ca:e2:b0:13:be:2b:e4:42:99:1d:6e:ea:
4c:2a:a0:54:32:a7:e2:c9:8f:3a:d6:df:5a:72:3f:
29:39:28:ea:5f:6a:86:99:c6:58:29:fb:f1:1a:91:
b9:a1:c2:75:e6:af:f0:6c:a1:19:d8:e8:d4:2d:50:
38:fe:68:3f:a7:4d:00:51:0e:a9:a1:f3:98:11:b4:
a5:a6:5d:f5:1d:54:38:44:f1:34:e6:83:18:9a:96:
47:a7:6b:2d:5e:de:81:3b:99:b4:6f:ff:25:f9:73:
5c:3d:48:b4:bf:87:91:a8:58:96:d5:7a:73:e4:9f:
6f:e5:c6:7b:af:01:9e:05:22:9a:30:d7:0f:8f:07:
bd:63:84:29:4d:1c:91:b0:c8:b3:70:95:7f:bf:36:
06:bd:26:25:f4:41:c0:99:eb:0a:99:83:6c:90:1e:
c5:b0:6b:00:ba:f7:dc:e0:55:45:73:24:bb:00:8a:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:7E:B9:87:99:06:2A:4B:3A:E9:27:FB:BD:F6:F5:12:96:18:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9ih-uYeZBipLOukn-7329RKWGDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.46.0/24
31.56.73.0/24
31.57.131.0/24
31.58.18.0/24
31.58.22.0/24
31.58.28.0/24
31.58.32.0/24
31.59.15.0/24
31.59.20.0/23
31.59.27.0-31.59.28.255
31.59.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0a:c7:91:b0:16:66:fd:58:3e:c5:d5:75:78:78:37:99:d9:
77:cc:25:83:7c:29:22:fd:a6:ba:e2:db:ac:e0:34:63:2c:29:
4f:6b:d4:bd:b9:0f:73:7e:cd:ca:bf:9e:8a:b2:72:27:05:67:
1b:ab:4d:18:71:1f:07:7a:be:da:f3:67:04:2f:74:ca:c1:9f:
ae:07:ba:7b:fd:94:8d:ff:50:da:fd:ba:00:13:71:28:5d:af:
ef:ef:86:15:03:52:51:2c:2e:38:5d:fe:10:60:d0:e7:41:ce:
c4:ce:58:35:c1:40:ee:db:82:ed:ae:80:5e:f5:88:55:40:ad:
71:8a:ac:1a:44:dd:3f:d1:9a:e3:3a:b2:ce:57:38:d6:47:ac:
ae:50:c8:57:47:71:a9:55:a3:4f:9c:fa:5e:21:f0:fa:3a:ce:
d5:a6:2c:20:b7:44:a6:d1:24:43:9f:56:8a:a5:d7:7e:fe:ab:
fe:b0:16:ec:1c:a0:fc:27:f8:0f:56:59:4e:51:ac:56:e3:bf:
bd:d4:e2:75:83:85:54:c4:e9:d0:1a:1a:6d:6e:0f:4d:2b:e9:
0a:d0:b8:c7:6d:f0:ab:c1:b2:47:3d:f4:bb:73:9c:38:17:22:
7e:30:18:fc:8a:ca:d2:b1:2f:a4:c2:3f:cd:9b:32:0f:cc:64:
14:4d:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:23:26 2026 by rpki-client