Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hqp_rv05_hIfKZve_nBIuATu5xY.roa
File: Hqp_rv05_hIfKZve_nBIuATu5xY.roa (raw, json)
Hash identifier: ffDmtPmbEr9cvinnPNcvWnluydQMZVUjvZOECjouE3Y=
Subject key identifier: 1E:AA:7F:AE:FD:39:FE:12:1F:29:9B:DE:FE:70:48:B8:04:EE:E7:16
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D52F9F8FD19BEF67663E3E698B2EE60B0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hqp_rv05_hIfKZve_nBIuATu5xY.roa
Signing time: Fri 03 Apr 2026 10:53:27 +0000
ROA not before: Fri 03 Apr 2026 10:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:52:f9:f8:fd:19:be:f6:76:63:e3:e6:98:b2:ee:60:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 3 10:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eaa7faefd39fe121f299bdefe7048b804eee716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:47:62:f5:5d:e7:2b:3b:49:d3:15:a3:e3:
f8:73:3f:e7:e1:dd:5a:90:f1:ae:8b:c7:f2:c7:b0:
05:e0:92:78:32:66:c5:cf:e2:a5:23:76:d0:c5:87:
0c:72:b9:0f:02:5b:8d:2f:41:69:ab:8b:d9:b2:52:
d4:38:69:13:71:c2:92:29:16:0a:05:ea:95:d0:16:
db:ea:d2:73:bc:9a:7c:b2:83:0f:fb:61:af:35:47:
2c:b6:1a:b7:a8:29:f7:d6:85:27:1e:b4:b3:2d:64:
9b:d0:27:23:a2:6d:3d:5f:65:01:4c:86:01:4b:66:
6d:28:04:b3:b4:e9:d8:40:c5:68:70:53:1b:64:b1:
2d:66:95:f4:65:5f:82:d7:39:78:94:0b:e8:63:da:
2f:3e:22:c7:0e:53:d0:8d:a8:7a:d0:1c:5b:fb:4c:
a0:89:da:e4:6a:6e:68:46:bf:4c:6e:a5:6d:17:8b:
f3:51:b2:4e:60:0c:6f:0d:2b:08:e7:c3:21:0e:29:
3d:8b:3c:4f:70:72:d6:8f:3c:be:5e:9f:38:0c:51:
41:7b:2b:23:5a:dd:f6:56:f6:7c:f8:ec:1f:04:75:
7d:b3:fb:88:ae:ec:12:60:d1:eb:8c:8b:1f:71:4e:
b5:e8:81:81:ec:ac:69:dc:2f:80:33:53:fb:8e:f6:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AA:7F:AE:FD:39:FE:12:1F:29:9B:DE:FE:70:48:B8:04:EE:E7:16
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hqp_rv05_hIfKZve_nBIuATu5xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.107.0/24
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5d:ba:38:9f:d5:fe:b5:2a:bc:bd:97:b2:7b:a7:25:fe:1e:
03:86:81:4d:d5:c1:9c:31:41:0f:ba:60:57:b6:43:a5:ef:47:
34:7d:b5:23:69:d3:e4:78:00:eb:77:45:af:80:2a:31:22:4c:
96:72:0a:7e:ec:f6:e4:0f:a9:9e:8a:c3:06:a2:41:18:f4:7e:
6e:a7:e4:63:7e:ad:99:97:a1:b1:97:c2:7a:33:ab:89:9f:20:
bb:df:e1:22:b5:de:4d:3b:b4:0b:22:d0:9f:0c:40:01:ef:a8:
97:4f:a1:ef:d1:de:b1:df:c2:a8:d0:23:1e:1d:be:69:fb:a1:
1b:73:3e:ce:58:91:dd:55:86:72:21:8c:ed:18:1b:57:fd:f8:
83:bb:62:05:d7:ce:06:47:c2:76:ae:b2:5e:91:6b:58:99:e7:
6e:3c:b0:9d:e7:20:25:88:16:63:62:66:1e:20:0c:85:24:14:
56:3b:0b:d3:88:57:5f:b9:c1:18:40:21:7b:85:20:ce:f9:25:
27:57:e4:de:c0:2a:2e:79:74:81:d4:02:89:11:a3:d9:1a:a4:
45:56:8c:6b:81:e2:87:c1:94:ed:47:38:0e:c3:11:b2:6a:a6:
a6:78:67:2a:61:80:3b:bc:ec:00:f4:98:00:5a:fc:5f:4c:ae:
77:c0:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:23 2026 by rpki-client