Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FgogSTPRs8X9_QTQ2bwLTCFGQT0.roa
File: FgogSTPRs8X9_QTQ2bwLTCFGQT0.roa (raw, json)
Hash identifier: 4dbFpA9H+Dp6mEULiOjpcb2/Myb/kIDp4+vjoUEwbCU=
Subject key identifier: 16:0A:20:49:33:D1:B3:C5:FD:FD:04:D0:D9:BC:0B:4C:21:46:41:3D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A187A399066A13D60A5FB5E270BC9F5C3E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FgogSTPRs8X9_QTQ2bwLTCFGQT0.roa
Signing time: Thu 29 Oct 2026 12:30:08 +0000
ROA not before: Thu 29 Oct 2026 12:30:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.182.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.192.0/20 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
94.183.179.0/24 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.222.0/24 maxlen: 24
94.183.230.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.21.0/24 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.64.0/24 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:a3:99:06:6a:13:d6:0a:5f:b5:e2:70:bc:9f:5c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 12:30:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=160a204933d1b3c5fdfd04d0d9bc0b4c2146413d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:5f:56:22:15:30:d9:44:f1:52:6c:11:b8:
e7:46:e3:ca:2a:2b:59:90:46:64:0f:1d:92:a4:18:
d0:57:2e:0b:ec:5b:f8:59:dc:8c:00:b0:e9:7f:6f:
63:55:34:7b:84:d5:6b:75:9d:8e:4a:7a:4f:c5:a4:
91:88:33:fa:b7:45:ee:1d:f6:5f:0a:9f:67:10:ba:
90:04:c4:8d:77:7b:f3:85:21:fd:d4:14:fc:db:36:
c5:12:7a:14:50:2c:6d:f0:2c:76:ba:21:2c:13:3c:
91:25:d2:96:1f:64:4a:b8:73:94:6a:cc:2c:23:f8:
41:93:bb:df:68:3a:d5:86:10:f7:3e:41:cc:fb:89:
68:19:44:58:b5:ff:02:a1:42:d4:f3:58:7c:66:85:
d1:45:41:b2:c3:e8:c5:14:a7:17:bc:82:2b:b8:fe:
93:94:55:d3:07:b7:15:fa:90:4b:12:7a:e7:11:23:
88:fa:f2:7a:d7:56:ad:45:3d:f9:e1:0f:63:51:82:
a9:c8:3e:45:6b:b4:af:95:bc:3d:17:1a:94:f2:f9:
01:de:25:c5:65:60:3e:83:b0:f1:6d:2f:4f:25:4d:
9a:24:b1:af:22:6e:85:06:45:37:92:18:0f:09:e4:
d9:2d:44:f4:ac:16:27:5f:6a:b7:e1:84:f3:0e:08:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0A:20:49:33:D1:B3:C5:FD:FD:04:D0:D9:BC:0B:4C:21:46:41:3D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/FgogSTPRs8X9_QTQ2bwLTCFGQT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.182.0/24
31.57.200.0/24
31.58.180.0/24
31.58.192.0/20
31.58.252.0/22
31.59.90.0/23
31.59.192.0/22
31.59.220.0-31.59.222.255
94.183.179.0/24
94.183.220.0/24
94.183.222.0/24
94.183.230.0/24
217.60.18.0-217.60.21.255
217.60.52.0/22
217.60.64.0/24
217.60.108.0-217.60.115.255
217.60.132.0-217.60.147.255
Signature Algorithm: sha256WithRSAEncryption
ac:b8:14:47:e3:76:a8:72:b3:64:60:bf:05:e3:df:26:7b:84:
ad:8c:35:88:c7:92:54:db:78:49:b0:68:57:b4:98:27:ad:b3:
56:21:79:35:c2:e1:cc:da:98:14:f4:a1:7d:a6:cb:e9:28:ee:
5b:29:50:bc:14:43:fe:6d:21:8f:e9:bf:72:24:2e:81:7a:5e:
1a:3d:b6:ae:45:64:bd:f5:f4:ad:76:9a:f4:30:d9:dd:1e:6a:
b2:52:d1:8b:95:5d:47:83:c7:52:25:86:70:4b:09:af:57:59:
a9:bc:99:96:eb:8c:82:55:33:9f:37:71:49:86:7f:0a:c2:d7:
0c:1d:4d:25:ac:7e:04:1e:99:58:23:1d:6b:e8:bb:0b:3d:09:
2f:e2:72:f0:9d:9b:7e:40:66:f2:26:3c:1e:8e:5b:09:26:78:
13:ca:49:1b:f4:59:96:fb:29:57:3f:00:87:61:2d:d5:2b:83:
f4:cb:1a:e2:cf:e1:4a:3d:8e:9a:c9:65:06:b2:6c:44:23:d6:
df:6b:f2:47:69:f6:99:fb:eb:dd:07:43:83:43:40:2e:41:15:
0f:8f:17:98:24:59:38:9f:d4:cd:0b:62:9c:26:2a:7d:9e:77:
91:ee:1f:cc:bf:8f:8a:88:5f:27:b6:0d:48:62:5e:d3:1e:2d:
20:0b:13:f0
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAaGHo5kGahPWCl+14nC8n1w+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDI5MTIzMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjBhMjA0OTMzZDFiM2M1ZmRmZDA0ZDBkOWJjMGI0YzIxNDY0MTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvpfViIVMNlE8VJsEbjnRuPKKitZ
kEZkDx2SpBjQVy4L7Fv4WdyMALDpf29jVTR7hNVrdZ2OSnpPxaSRiDP6t0XuHfZf
Cp9nELqQBMSNd3vzhSH91BT82zbFEnoUUCxt8Cx2uiEsEzyRJdKWH2RKuHOUasws
I/hBk7vfaDrVhhD3PkHM+4loGURYtf8CoULU81h8ZoXRRUGyw+jFFKcXvIIruP6T
lFXTB7cV+pBLEnrnESOI+vJ611atRT354Q9jUYKpyD5Fa7Svlbw9FxqU8vkB3iXF
ZWA+g7DxbS9PJU2aJLGvIm6FBkU3khgPCeTZLUT0rBYnX2q34YTzDghN4QIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFBYKIEkz0bPF/f0E0Nm8C0whRkE9MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRmdvZ1NUUFJzOFg5X1FUUTJid0xUQ0ZHUVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBAAf
OLYDBAAfOcgDBAAfOrQDBAQfOsADBAIfOvwDBAEfO1oDBAIfO8AwDAMEAh873AME
AB873gMEAF63swMEAF633AMEAF633gMEAF635jAMAwQB2TwSAwQB2TwUAwQC2Tw0
AwQA2TxAMAwDBALZPGwDBALZPHAwDAMEAtk8hAMEAtk8kDANBgkqhkiG9w0BAQsF
AAOCAQEArLgUR+N2qHKzZGC/BePfJnuErYw1iMeSVNt4SbBoV7SYJ62zViF5NcLh
zNqYFPShfabL6SjuWylQvBRD/m0hj+m/ciQugXpeGj22rkVkvfX0rXaa9DDZ3R5q
slLRi5VdR4PHUiWGcEsJr1dZqbyZluuMglUznzdxSYZ/CsLXDB1NJax+BB6ZWCMd
a+i7Cz0JL+Jy8J2bfkBm8iY8Ho5bCSZ4E8pJG/RZlvspVz8Ah2Et1SuD9Msa4s/h
Sj2OmsllBrJsRCPW32vyR2n2mfvr3QdDg0NALkEVD48XmCRZOJ/UzQtinCYqfZ53
ke4fzL+PiohfJ7YNSGJe0x4tIAsT8A==
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:21:26 2026 by rpki-client