Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_r6flTM1LNrjljbhNUJS1qpVzA.roa
File: M_r6flTM1LNrjljbhNUJS1qpVzA.roa (raw, json)
Hash identifier: 5g5evQxxstHaT16lXg6fUVE1xRenkZd2j/jxfWQPezo=
Subject key identifier: 33:FA:FA:7E:54:CC:D4:B3:6B:8E:58:DB:84:D5:09:4B:5A:A9:57:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0823A1FFD071FCC07941B05EACC758425
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_r6flTM1LNrjljbhNUJS1qpVzA.roa
Signing time: Tue 08 Sep 2026 18:14:02 +0000
ROA not before: Tue 08 Sep 2026 18:14:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 31.56.142.0/24 maxlen: 24
31.56.143.0/24 maxlen: 24
31.56.149.0/24 maxlen: 24
31.56.151.0/24 maxlen: 24
31.56.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:3a:1f:fd:07:1f:cc:07:94:1b:05:ea:cc:75:84:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 8 18:14:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33fafa7e54ccd4b36b8e58db84d5094b5aa95730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:b0:31:a6:d5:da:bf:76:61:e7:8b:33:b3:
5f:9d:45:57:95:0c:fb:13:2e:c4:b6:69:ec:80:14:
98:c2:96:29:4b:cb:a6:2c:9f:09:38:66:0b:e0:ea:
56:2a:ea:98:e0:93:a7:5f:1a:41:a8:c4:3d:72:82:
20:f4:bd:24:10:ad:01:65:1a:83:e9:22:43:01:87:
ef:ab:22:ee:36:ea:73:10:ea:74:20:40:b5:05:fe:
df:3c:0e:1c:8f:8e:df:96:e7:74:bd:54:1d:87:55:
9d:14:77:22:a6:06:37:d5:40:73:79:82:1b:17:15:
4a:53:0d:e9:7e:f1:1a:fb:05:77:7c:61:46:0f:cc:
4d:51:da:ed:f1:b0:98:7c:48:20:79:ab:8b:5e:61:
a0:03:ca:3e:7b:45:bd:ee:44:17:8c:6b:58:19:aa:
23:6b:9b:1c:f5:b2:fd:b3:f8:e3:47:1c:d6:33:02:
9e:9f:c2:9a:42:72:57:d4:ca:e4:6e:08:18:52:a3:
e9:5f:79:c8:91:20:a5:c4:aa:a7:ab:63:2e:ae:66:
ec:7c:95:2d:67:79:93:d8:57:fd:d3:ad:0a:cb:ac:
84:19:72:4a:b8:70:7f:a0:cf:0e:62:11:a7:ff:34:
9b:14:48:bc:db:17:85:02:a9:6a:d3:6b:8e:cc:36:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FA:FA:7E:54:CC:D4:B3:6B:8E:58:DB:84:D5:09:4B:5A:A9:57:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/M_r6flTM1LNrjljbhNUJS1qpVzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.142.0/23
31.56.149.0/24
31.56.151.0-31.56.152.255
Signature Algorithm: sha256WithRSAEncryption
86:c8:e8:6b:4d:77:d6:ad:cf:bc:5f:6a:81:55:f5:8d:1f:1b:
86:8d:9b:fe:b4:71:e4:be:02:d0:d4:5e:cc:57:8c:c8:ac:fa:
b6:53:aa:d5:f0:d9:a9:a8:a9:1f:6d:79:5c:a6:33:1b:12:26:
f9:be:86:1d:b4:fa:27:ef:9e:3d:59:3e:ef:bf:fb:e4:3a:6e:
d0:a2:7d:46:4c:50:2a:5f:e0:dc:bf:42:2e:f7:43:e9:20:7d:
be:36:70:d4:17:08:76:93:5c:e2:46:73:fa:dc:ed:1c:89:53:
3a:c5:90:81:3d:48:6f:c1:6e:bc:26:d0:1d:f1:0a:63:77:0c:
36:07:21:bf:59:0d:18:ea:5c:1f:77:98:18:b3:73:a7:3f:e2:
20:6b:36:d5:8d:af:a5:6c:ce:ed:86:37:9a:56:65:a3:bf:84:
54:9f:b1:57:2a:77:fc:f6:02:99:9c:13:e4:24:58:0e:93:26:
a5:92:c7:b2:f7:df:96:ff:ea:1c:2c:ca:4f:2a:67:6d:89:69:
64:03:33:88:be:10:90:77:a1:1e:21:27:4a:20:7b:84:fa:53:
6a:17:75:4e:d0:22:25:fd:9a:d7:e4:f8:dc:e4:34:28:95:53:
83:c4:2a:b7:ef:f3:79:b9:2d:22:2a:61:ac:2a:0a:2c:c2:05:
3d:39:28:b3
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaCCOh/9Bx/MB5QbBerMdYQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTA4MTgxNDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2ZhZmE3ZTU0Y2NkNGIzNmI4ZTU4ZGI4NGQ1MDk0YjVhYTk1NzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEywMabV2r92YeeLM7NfnUVXlQz7
Ey7EtmnsgBSYwpYpS8umLJ8JOGYL4OpWKuqY4JOnXxpBqMQ9coIg9L0kEK0BZRqD
6SJDAYfvqyLuNupzEOp0IEC1Bf7fPA4cj47flud0vVQdh1WdFHcipgY31UBzeYIb
FxVKUw3pfvEa+wV3fGFGD8xNUdrt8bCYfEggeauLXmGgA8o+e0W97kQXjGtYGaoj
a5sc9bL9s/jjRxzWMwKen8KaQnJX1MrkbggYUqPpX3nIkSClxKqnq2MurmbsfJUt
Z3mT2Ff9060Ky6yEGXJKuHB/oM8OYhGn/zSbFEi82xeFAqlq02uOzDZjwwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDP6+n5UzNSza45Y24TVCUtaqVcwMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTV9yNmZsVE0xTE5yamxqYmhOVUpTMXFwVnpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBHziOAwQA
HziVMAwDBAAfOJcDBAAfOJgwDQYJKoZIhvcNAQELBQADggEBAIbI6GtNd9atz7xf
aoFV9Y0fG4aNm/60ceS+AtDUXsxXjMis+rZTqtXw2amoqR9teVymMxsSJvm+hh20
+ifvnj1ZPu+/++Q6btCifUZMUCpf4Ny/Qi73Q+kgfb42cNQXCHaTXOJGc/rc7RyJ
UzrFkIE9SG/Bbrwm0B3xCmN3DDYHIb9ZDRjqXB93mBizc6c/4iBrNtWNr6Vszu2G
N5pWZaO/hFSfsVcqd/z2ApmcE+QkWA6TJqWSx7L335b/6hwsyk8qZ22JaWQDM4i+
EJB3oR4hJ0oge4T6U2oXdU7QIiX9mtfk+NzkNCiVU4PEKrfv83m5LSIqYawqCizC
BT05KLM=
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:46 2026 by rpki-client