Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HfgR8YjVjpXx92UC02Xi9RcKKIc.roa
File: HfgR8YjVjpXx92UC02Xi9RcKKIc.roa (raw, json)
Hash identifier: xDnuGITK/81US698IsJ+qRIJi8HSXw1EIQcwxD5c5E0=
Subject key identifier: 1D:F8:11:F1:88:D5:8E:95:F1:F7:65:02:D3:65:E2:F5:17:0A:28:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0823A1F4429CD7C82C98C4CB3E5419744
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HfgR8YjVjpXx92UC02Xi9RcKKIc.roa
Signing time: Tue 08 Sep 2026 18:14:02 +0000
ROA not before: Tue 08 Sep 2026 18:14:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 984
IP address blocks: 31.56.161.0/24 maxlen: 24
31.56.162.0/24 maxlen: 24
31.56.163.0/24 maxlen: 24
31.56.164.0/24 maxlen: 24
31.56.165.0/24 maxlen: 24
31.56.167.0/24 maxlen: 24
31.56.193.0/24 maxlen: 24
31.56.194.0/24 maxlen: 24
31.56.218.0/24 maxlen: 24
31.56.230.0/24 maxlen: 24
31.56.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:3a:1f:44:29:cd:7c:82:c9:8c:4c:b3:e5:41:97:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 8 18:14:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1df811f188d58e95f1f76502d365e2f5170a2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:f5:3d:c4:89:45:c4:3d:bb:95:21:8e:7c:
0d:08:d2:cd:8e:7e:ad:35:4a:a1:60:d0:d6:03:4c:
0c:5f:10:13:8c:11:f6:57:0e:a9:b3:62:e4:95:8a:
3a:c3:f1:cc:ae:56:c9:5d:0e:3d:b1:f9:50:b7:02:
c6:04:9f:a2:67:be:b8:32:4c:a7:e4:4b:f3:df:89:
8e:93:8c:d7:f2:e3:f1:c8:c2:e6:3e:f8:b7:4e:d6:
96:59:8e:8a:0d:2c:28:f1:1a:d7:c1:cc:2f:8b:f9:
5f:28:6e:45:58:6c:d2:cd:8b:92:42:3a:15:b7:a8:
e3:7b:e1:a3:b3:55:6b:a8:16:bd:a5:79:54:08:28:
ad:43:13:9f:00:67:1a:74:6a:b3:c9:8a:9e:70:67:
c0:ea:f3:65:28:65:7a:59:d5:be:0c:15:b2:b2:92:
c4:7d:7f:80:99:de:a8:14:6f:71:f7:50:e7:88:d1:
30:e9:ff:0b:12:d9:1b:5d:9b:93:90:6a:60:37:17:
94:69:9a:ab:9b:d1:c8:ba:d2:24:a8:27:38:36:7d:
00:b2:e5:77:d7:4c:a8:a8:d6:ee:2a:f6:7b:0f:12:
11:47:63:c8:4c:a6:46:38:bd:0b:17:79:7d:7d:dc:
68:74:2e:95:c1:7b:1c:4d:4d:ca:b6:3a:8a:6c:12:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:11:F1:88:D5:8E:95:F1:F7:65:02:D3:65:E2:F5:17:0A:28:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HfgR8YjVjpXx92UC02Xi9RcKKIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.161.0-31.56.165.255
31.56.167.0/24
31.56.193.0-31.56.194.255
31.56.218.0/24
31.56.230.0/24
31.56.237.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1d:10:95:8e:09:9b:ba:87:d3:aa:1e:bd:86:12:72:31:9b:
03:10:80:1e:85:d9:9f:99:c6:40:73:83:9e:70:15:57:af:0a:
73:9e:1d:79:83:c9:bd:65:d0:23:a0:b2:9f:1c:f2:19:44:6f:
80:db:6a:6a:11:8a:3a:df:0a:4f:31:ac:57:6c:ff:4b:0f:26:
b7:79:c7:66:9d:9b:0d:91:62:08:4a:7a:f8:92:46:30:f0:8a:
32:93:20:41:73:c5:b0:3f:2b:a9:04:ac:14:74:85:97:d5:d3:
64:cb:85:54:4f:69:50:c9:8e:20:21:0d:d9:53:dc:e7:05:79:
50:fd:07:b2:1f:bc:e0:25:fa:6a:57:87:db:cd:ba:e6:96:27:
ff:18:73:da:f1:1f:89:a4:ac:40:b2:41:68:4f:bd:d2:14:24:
ab:76:d8:18:8b:69:17:39:58:e4:91:4a:3c:8f:eb:fd:c9:fa:
ec:e2:c3:8a:eb:0b:cc:25:6f:30:87:32:72:8b:cd:11:02:6d:
7a:2a:2a:c9:94:b0:46:d6:d4:9b:2d:3f:f9:1d:85:67:e2:d9:
c7:09:53:2f:14:41:7b:4b:d0:ee:4d:d9:05:9e:27:b7:76:ca:
66:09:45:91:32:2d:2e:92:73:ed:8f:b8:0e:fa:af:bb:52:00:
8f:f0:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:29 2026 by rpki-client