Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WUAXw3t1bs_N4Si1q5A5CeTBFGE.roa
File: WUAXw3t1bs_N4Si1q5A5CeTBFGE.roa (raw, json)
Hash identifier: yHXRYd++qJwEaakcm+RXYqKep8lUzrPVPr2anWreR/k=
Subject key identifier: 59:40:17:C3:7B:75:6E:CF:CD:E1:28:B5:AB:90:39:09:E4:C1:14:61
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D953572E8198E84F2E2C9D117229E5701
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WUAXw3t1bs_N4Si1q5A5CeTBFGE.roa
Signing time: Thu 16 Apr 2026 07:33:21 +0000
ROA not before: Thu 16 Apr 2026 07:33:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 31.56.82.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
31.56.99.0/24 maxlen: 24
31.57.44.0/24 maxlen: 24
31.57.45.0/24 maxlen: 24
31.57.55.0/24 maxlen: 24
31.58.45.0/24 maxlen: 24
31.58.53.0/24 maxlen: 24
31.59.54.0/24 maxlen: 24
31.59.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:35:72:e8:19:8e:84:f2:e2:c9:d1:17:22:9e:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 16 07:33:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=594017c37b756ecfcde128b5ab903909e4c11461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:da:83:2e:30:f1:10:9d:70:a0:d6:54:fd:
37:27:db:d2:83:eb:ba:89:98:cc:29:80:7a:04:a1:
86:96:40:d1:bb:06:5e:a9:75:ad:b5:2d:dc:4b:75:
3a:7f:16:03:96:d6:2a:74:bf:ae:5e:99:f5:cf:40:
07:e2:d7:87:00:04:93:33:88:aa:9f:48:19:96:64:
ee:8a:a8:84:1b:5e:cd:48:bc:bc:8d:ab:b2:b6:93:
35:d4:bf:fb:c4:c0:c4:ab:66:70:14:09:f2:ed:bb:
e8:cc:61:22:fc:79:4a:39:37:02:be:f9:19:67:e5:
be:c5:d0:18:c5:f5:5f:92:64:74:6d:bf:0b:75:d4:
0c:51:60:14:7b:d6:21:07:5f:99:ec:a3:bd:97:f2:
9f:5e:d9:6c:a8:03:74:7c:a2:01:e2:77:e4:1b:a0:
f3:0b:f0:64:cd:fe:8b:e5:08:bf:fd:8e:92:3c:bd:
ad:f3:4c:3f:ea:4a:fc:cf:c4:28:b6:65:d0:1c:36:
0b:37:3e:19:f6:0c:bc:80:c0:6c:06:1e:7c:b6:5c:
bd:4f:1a:32:45:2c:a5:3e:8c:f3:af:33:3d:65:d1:
1f:67:84:34:51:1f:c7:70:00:90:ad:75:e8:26:54:
94:01:7e:4f:98:2a:f0:cf:7c:a5:73:7a:ed:56:70:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:17:C3:7B:75:6E:CF:CD:E1:28:B5:AB:90:39:09:E4:C1:14:61
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WUAXw3t1bs_N4Si1q5A5CeTBFGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.82.0/24
31.56.87.0/24
31.56.99.0/24
31.57.44.0/23
31.57.55.0/24
31.58.45.0/24
31.58.53.0/24
31.59.54.0/23
Signature Algorithm: sha256WithRSAEncryption
20:d9:fa:77:12:58:af:85:be:9c:64:28:21:9f:11:2a:3d:f7:
07:ff:90:fe:7a:b7:90:f1:69:cb:6e:f9:d5:f9:df:bf:b9:4c:
95:f2:b1:fb:fe:c3:58:7c:3f:28:4b:88:79:ef:0b:51:73:ee:
30:b7:00:cc:ee:6e:4e:94:37:75:dc:90:ac:9b:b9:3f:0e:db:
f2:93:e4:6b:a2:0d:58:a4:cf:36:e9:89:0b:7e:8c:42:f2:d6:
c4:e3:8b:c0:a1:ad:86:b6:6f:38:e7:eb:22:81:e5:7b:a4:56:
6d:5d:10:5d:1f:d7:ab:d4:af:ee:49:ff:3f:4e:0e:43:bb:1d:
8f:5e:70:e0:dd:33:6b:ee:50:4c:94:8c:11:ff:b7:7f:d8:df:
34:e5:7a:18:87:2e:76:54:7a:d4:36:0d:3f:47:22:a8:56:86:
c5:8b:e0:d5:40:42:e4:dd:07:2e:f5:cf:d2:2e:b9:af:7d:c5:
b6:f0:10:ff:d6:f7:16:3a:16:4a:67:26:f1:48:c7:b2:80:14:
53:5c:24:65:25:bd:03:bb:dc:09:d6:92:4a:1b:e5:27:c3:c6:
a8:b3:4e:57:ed:fa:25:5d:f0:f1:47:d4:ad:f4:ca:2b:cd:56:
2c:34:d7:d5:a2:0b:3f:f8:3b:16:45:f1:a3:7c:1b:64:e2:bf:
64:cc:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:26 2026 by rpki-client