Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T7SENaVZj1JlWxiFl3X2R0ydSOs.roa
File: T7SENaVZj1JlWxiFl3X2R0ydSOs.roa (raw, json)
Hash identifier: 77exWBoVYAlLVYPJYTCIXoztQEK0fmlQ3vL/T2aZjAk=
Subject key identifier: 4F:B4:84:35:A5:59:8F:52:65:5B:18:85:97:75:F6:47:4C:9D:48:EB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CA3A900E6B842FF52955AC29659E09553
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T7SENaVZj1JlWxiFl3X2R0ydSOs.roa
Signing time: Sat 28 Feb 2026 09:51:27 +0000
ROA not before: Sat 28 Feb 2026 09:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.182.0/23 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/23 maxlen: 24
31.56.208.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/22 maxlen: 22
31.58.92.0/22 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.184.0/21 maxlen: 24
31.58.192.0/21 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/23 maxlen: 24
31.58.232.0/23 maxlen: 24
31.58.239.0/24 maxlen: 24
31.59.38.0/23 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.140.0/22 maxlen: 24
31.59.148.0/22 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/22 maxlen: 24
31.59.164.0/23 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.155.0/24 maxlen: 24
94.183.192.0/22 maxlen: 22
94.183.196.0/22 maxlen: 22
94.183.200.0/22 maxlen: 22
94.183.204.0/22 maxlen: 22
94.183.208.0/22 maxlen: 22
94.183.212.0/22 maxlen: 22
94.183.216.0/22 maxlen: 22
94.183.220.0/22 maxlen: 22
94.183.224.0/22 maxlen: 22
94.183.228.0/22 maxlen: 22
94.183.240.0/22 maxlen: 22
94.183.244.0/22 maxlen: 22
94.183.248.0/22 maxlen: 22
94.183.252.0/22 maxlen: 22
217.60.8.0/22 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.15.0/24 maxlen: 24
217.60.16.0/21 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.32.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.160.0/20 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/24 maxlen: 24
217.60.199.0/24 maxlen: 24
217.60.240.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a3:a9:00:e6:b8:42:ff:52:95:5a:c2:96:59:e0:95:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 28 09:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fb48435a5598f52655b18859775f6474c9d48eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:75:b4:ef:9e:9d:4c:bd:ff:c7:c3:50:d2:
f8:bf:9d:b0:a9:9a:93:2e:6f:26:07:0c:49:6e:f3:
d9:16:f1:0d:44:26:21:d6:15:53:77:47:02:68:2c:
da:a6:6b:a8:02:06:6a:3f:98:6f:3e:3b:f6:0f:bc:
f6:7a:33:79:ef:c9:ad:2a:8b:33:0f:b3:15:d1:5d:
14:48:aa:30:af:c0:47:59:b4:f2:66:08:ec:8a:6a:
ab:b8:1e:b6:19:2a:81:be:99:3b:34:30:15:a9:3c:
c7:81:ca:83:27:a7:f0:f1:55:7c:a9:23:71:e1:ce:
fd:78:27:35:aa:37:d1:8e:76:7c:13:17:ee:54:f5:
86:b2:6d:12:0a:c0:ab:43:e8:21:35:f6:8b:57:a7:
b2:26:5b:a2:a6:ce:cd:f0:a9:06:e2:d8:c5:e8:d9:
82:0c:49:94:29:d4:4f:43:fc:d4:3e:42:d9:a2:8f:
db:4c:30:6b:b6:ff:fb:a1:82:20:42:ca:c0:c4:d1:
0c:3b:ce:bf:e5:87:be:b7:78:40:71:ab:54:9e:71:
2f:23:0e:d8:7c:a7:2e:7d:1c:e8:6b:41:b6:4b:21:
39:98:a9:93:1e:d3:d2:e4:58:d0:98:4c:79:e3:44:
77:43:38:23:09:19:d5:46:a3:c8:69:d2:53:a7:a1:
c1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:84:35:A5:59:8F:52:65:5B:18:85:97:75:F6:47:4C:9D:48:EB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/T7SENaVZj1JlWxiFl3X2R0ydSOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.182.0-31.56.189.255
31.56.208.0/23
31.57.200.0/24
31.57.208.0/22
31.58.92.0/22
31.58.180.0/24
31.58.184.0-31.58.199.255
31.58.204.0-31.58.209.255
31.58.232.0/23
31.58.239.0/24
31.59.38.0/23
31.59.44.0/22
31.59.84.0/22
31.59.90.0/23
31.59.140.0/22
31.59.148.0-31.59.165.255
94.183.152.0/24
94.183.155.0/24
94.183.192.0-94.183.231.255
94.183.240.0/20
217.60.8.0-217.60.12.255
217.60.15.0-217.60.23.255
217.60.25.0/24
217.60.28.0-217.60.35.255
217.60.52.0-217.60.59.255
217.60.160.0-217.60.183.255
217.60.188.0-217.60.192.255
217.60.199.0/24
217.60.240.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
1a:25:9b:2e:e6:38:fe:2d:9c:32:5c:2e:3b:28:72:43:52:8a:
39:b9:20:99:e4:6d:ef:ff:64:df:7a:f2:87:c1:17:1b:28:d9:
b1:1e:45:de:0b:c6:2e:87:9d:cd:20:b4:f1:4d:b2:2b:e9:8b:
af:ee:a4:d4:af:96:ab:fb:7c:65:de:fc:19:1f:8c:d3:4e:8e:
cc:02:85:f2:bb:4f:9d:d1:0c:5c:aa:61:00:a3:a2:36:55:e5:
d8:38:e4:8f:bf:a6:87:2b:6d:99:38:44:52:3f:31:d2:99:79:
67:bd:bd:78:04:41:71:84:63:a3:83:ec:65:5a:ff:f2:6d:05:
2e:ff:39:8f:e9:b6:61:c7:7b:ff:d0:1d:2c:ea:bd:6e:9d:cf:
8f:ed:52:7f:8f:ca:67:d8:8f:6f:34:4f:b1:eb:44:68:16:08:
ed:85:17:8f:43:21:81:c9:65:7b:a8:ab:a2:cd:a0:0f:a1:01:
7c:57:de:34:ee:6a:9e:86:1e:16:14:98:e8:f6:e3:e1:84:e2:
da:59:b0:61:19:69:ca:be:f5:ce:fa:73:08:0d:1c:0d:91:c0:
fa:f0:9e:41:ae:9e:58:f4:53:61:5d:7c:c3:fa:a5:5d:af:03:
8b:dc:fb:ee:d1:cc:87:33:10:34:2c:d3:32:bc:56:4c:d2:66:
1e:36:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:11 2026 by rpki-client