Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A3lmylFb_LhK8odfsjT1-tRL_DA.roa
File: A3lmylFb_LhK8odfsjT1-tRL_DA.roa (raw, json)
Hash identifier: U5Nz+jrI9ko/E0lwi2dWO8wg3MyKMHYueT9GKMkQCX8=
Subject key identifier: 03:79:66:CA:51:5B:FC:B8:4A:F2:87:5F:B2:34:F5:FA:D4:4B:FC:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A08FC02216AB260BA87E431531EACBDA84
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A3lmylFb_LhK8odfsjT1-tRL_DA.roa
Signing time: Fri 11 Sep 2026 09:15:28 +0000
ROA not before: Fri 11 Sep 2026 09:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197574
IP address blocks: 31.56.186.0/24 maxlen: 24
31.56.187.0/24 maxlen: 24
31.56.189.0/24 maxlen: 24
31.59.143.0/24 maxlen: 24
31.59.150.0/24 maxlen: 24
217.60.32.0/24 maxlen: 24
217.60.33.0/24 maxlen: 24
217.60.34.0/24 maxlen: 24
217.60.35.0/24 maxlen: 24
217.60.178.0/24 maxlen: 24
217.60.179.0/24 maxlen: 24
217.60.182.0/24 maxlen: 24
217.60.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:c0:22:16:ab:26:0b:a8:7e:43:15:31:ea:cb:da:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 11 09:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=037966ca515bfcb84af2875fb234f5fad44bfc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:64:0d:55:00:9b:c7:33:7b:6a:60:0b:56:
b6:25:38:07:06:a7:6c:03:0a:56:d6:09:50:56:fd:
19:99:e3:f8:01:36:d0:bd:0b:36:68:81:d6:65:61:
d0:ea:9b:5f:af:26:70:53:2c:06:3a:aa:b6:41:03:
c7:86:d6:b9:c1:37:e8:fe:a3:7f:c8:79:84:b1:cf:
bf:42:b7:b8:30:b7:03:45:61:3b:98:93:0e:21:9f:
aa:1d:67:36:06:1a:83:be:d7:4a:2c:ca:22:d5:ac:
d8:a2:76:20:71:59:6a:83:71:83:22:4f:27:ba:0e:
8c:f4:0d:86:54:53:65:79:93:6b:07:30:69:84:9b:
8c:04:7d:4c:82:a7:9b:f2:ee:c2:11:e0:c8:50:38:
3b:de:0d:cf:bf:08:a9:02:e3:b3:9f:d0:42:b0:86:
40:a9:58:93:29:78:61:4f:31:b0:cd:c8:28:7e:9a:
89:2c:5c:63:5f:fa:91:b1:73:aa:a4:65:9e:8d:41:
4c:17:48:b1:7b:11:60:27:be:eb:41:19:0e:bf:98:
ac:22:66:46:bf:0e:c1:34:16:26:03:c4:d0:0c:98:
53:93:a2:a6:35:a1:91:e6:ce:74:98:73:f1:e0:70:
07:e8:8f:51:c2:1d:69:1f:1b:8b:9f:21:9f:33:4d:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:66:CA:51:5B:FC:B8:4A:F2:87:5F:B2:34:F5:FA:D4:4B:FC:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A3lmylFb_LhK8odfsjT1-tRL_DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.186.0/23
31.56.189.0/24
31.59.143.0/24
31.59.150.0/24
217.60.32.0/22
217.60.178.0/23
217.60.182.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:2b:eb:6c:9b:61:02:39:ec:62:19:1f:a4:ae:e2:eb:a9:3a:
00:23:c6:3c:39:e5:72:6f:c5:de:11:71:3c:da:a7:d2:33:b3:
55:82:d4:da:f0:da:0e:ab:49:97:e7:4d:aa:bc:12:b4:ef:ca:
17:5c:38:49:6d:1c:4c:30:d0:61:15:6e:d2:66:78:f2:20:6f:
04:b8:e7:06:fc:84:cf:25:89:a9:43:36:65:29:a1:6c:ca:1e:
44:06:fc:a2:0b:02:d1:5a:83:79:8d:f1:6e:49:3b:85:70:8b:
11:55:4d:4d:15:fa:45:a9:fa:f9:22:0a:7f:25:3d:94:1b:10:
62:77:9d:e2:98:dd:2c:92:45:40:16:dd:48:0d:0d:e0:0e:a9:
3a:64:b8:f1:cf:52:f6:bc:dd:a3:52:ed:13:79:cc:f7:bf:2a:
64:71:83:7d:35:95:22:28:8b:6c:4f:3a:04:27:de:14:e2:e3:
50:7d:06:cd:a0:bb:53:3a:01:ff:96:47:0f:af:cb:ac:93:a1:
ca:52:4b:bd:5f:ae:b0:7f:02:f2:8b:b1:9c:be:0a:57:33:16:
8c:f3:e5:89:15:66:b4:0e:a0:bc:25:2f:4d:9c:74:5f:2e:9a:
9b:39:39:31:e3:83:a4:49:8b:56:26:76:75:87:82:14:18:82:
22:a1:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:18 2026 by rpki-client