Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XnILw7yiVEWpSH4O8I-iiFMqp4A.roa
File: XnILw7yiVEWpSH4O8I-iiFMqp4A.roa (raw, json)
Hash identifier: YATQSiVH+wd8zglEAManeyLJUuSoEf4j+EkDO9Cb9WI=
Subject key identifier: 5E:72:0B:C3:BC:A2:54:45:A9:48:7E:0E:F0:8F:A2:88:53:2A:A7:80
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D673C6FC81BFDC3C7C9F8C3276C7EC130
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XnILw7yiVEWpSH4O8I-iiFMqp4A.roa
Signing time: Tue 07 Apr 2026 09:18:27 +0000
ROA not before: Tue 07 Apr 2026 09:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64439
IP address blocks: 31.56.208.0/24 maxlen: 24
31.56.211.0/24 maxlen: 24
94.183.155.0/24 maxlen: 24
217.60.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:3c:6f:c8:1b:fd:c3:c7:c9:f8:c3:27:6c:7e:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 7 09:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e720bc3bca25445a9487e0ef08fa288532aa780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:c5:97:a0:e3:26:11:91:c7:af:d0:e2:02:
10:4c:9c:38:99:6f:2c:93:95:a8:86:d3:ff:a2:11:
75:57:f3:3a:b7:5d:ed:32:cc:57:7c:3d:a2:6f:a3:
7e:7a:3f:80:81:31:5c:f1:4f:24:ca:fd:5a:f5:8b:
c9:40:a2:ac:41:c8:e6:6f:38:b9:f3:24:24:9c:6e:
66:92:0d:f7:51:fd:83:38:71:80:ec:0c:ce:fb:b7:
68:d6:52:dc:ab:09:ee:bf:ac:9c:62:a0:10:5d:d5:
e2:f4:73:67:5b:42:e7:74:ca:e4:dc:51:ac:b0:a7:
6b:8d:9d:3b:76:27:e4:b7:e2:53:67:8f:1c:f2:94:
5d:eb:17:86:42:34:56:3a:d7:1f:56:21:23:70:e5:
75:b6:77:ea:09:bd:ef:e6:c7:c9:06:ab:a4:d5:9d:
8a:6d:b1:d3:73:ef:60:64:8d:64:7f:a4:64:87:7d:
51:0e:8a:6e:fb:2e:34:30:f6:e9:7a:23:4c:84:1a:
05:1a:50:93:80:9a:bd:c4:90:26:ef:e5:30:98:83:
c6:86:2d:77:4e:af:1d:4e:29:d7:98:a5:3d:eb:c8:
1d:be:ed:8d:9b:fb:0e:4c:2d:72:0e:5e:e0:c8:53:
38:d3:d4:c1:c1:6a:12:b3:47:bf:ba:b8:82:12:82:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:0B:C3:BC:A2:54:45:A9:48:7E:0E:F0:8F:A2:88:53:2A:A7:80
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XnILw7yiVEWpSH4O8I-iiFMqp4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.208.0/24
31.56.211.0/24
94.183.155.0/24
217.60.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:02:58:3a:0f:5c:ca:62:38:6d:d2:8a:f1:88:81:9e:17:20:
c3:9e:bc:82:e4:4e:88:4b:ed:f2:8b:c0:cd:34:df:21:6f:2f:
b9:b4:fa:32:70:81:47:b5:e5:5b:a8:60:85:cb:06:32:6f:4d:
2a:fb:6d:ab:4f:f9:91:6f:58:65:b7:fe:bf:10:96:ea:0e:57:
b9:6d:e9:1f:49:2a:a9:ae:dc:27:69:d3:85:99:58:ad:ad:1a:
83:6e:ac:f1:21:e7:74:2e:82:d3:46:b5:29:a2:6e:5a:4b:36:
2e:48:2a:ac:24:c7:1c:36:ae:a6:31:82:5f:4a:dd:24:63:54:
7e:b0:b1:dc:9a:79:43:1a:b8:03:b9:ae:bc:62:eb:c1:8d:2d:
04:d4:03:d4:5f:fd:4c:1a:6a:75:de:ec:bc:4c:c4:1f:75:3e:
c4:f1:d7:1f:18:b5:5b:03:52:f4:91:e0:e4:3d:3d:c1:8e:b9:
1b:9e:cf:de:bd:cc:f5:3f:17:15:dc:4a:bd:81:6a:96:53:ab:
52:41:74:43:9d:4d:45:4b:8e:a8:2c:67:c0:d7:8d:17:76:1a:
65:74:23:13:40:ed:66:fb:e4:23:bd:aa:35:2f:6e:8a:e5:ef:
4f:10:0e:09:c4:66:76:2d:3c:70:1d:34:73:01:aa:f6:0b:9e:
e9:28:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:30 2026 by rpki-client