Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b79Bf8Ij4XuvExut4U8aS8qsCDU.roa
File: b79Bf8Ij4XuvExut4U8aS8qsCDU.roa (raw, json)
Hash identifier: TAp39RulcZTMZhdyeCOalEX26SXV/+bjxCX0qe5HPKc=
Subject key identifier: 6F:BF:41:7F:C2:23:E1:7B:AF:13:1B:AD:E1:4F:1A:4B:CA:AC:08:35
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EAC99106B225045B978E22C91584C95FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b79Bf8Ij4XuvExut4U8aS8qsCDU.roa
Signing time: Tue 09 Jun 2026 13:36:12 +0000
ROA not before: Tue 09 Jun 2026 13:36:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19793
IP address blocks: 31.56.16.0/22 maxlen: 24
31.57.16.0/21 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.240.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:99:10:6b:22:50:45:b9:78:e2:2c:91:58:4c:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 13:36:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fbf417fc223e17baf131bade14f1a4bcaac0835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:66:0c:75:51:0b:b1:f1:13:e8:62:43:97:
9f:30:08:fd:ee:d3:b1:22:76:73:23:9a:fc:ce:92:
6f:6b:f9:3f:70:d2:55:7c:7f:5c:31:b2:ac:a0:1c:
c9:c3:21:f0:c4:37:65:f2:b7:c8:55:a2:17:d0:43:
e8:f7:c8:46:92:7a:c6:63:e8:22:e6:0d:fd:be:77:
0c:63:39:86:9a:55:6d:14:bb:37:2c:fc:c4:71:aa:
db:59:45:4e:8a:0d:ea:32:62:92:7f:49:08:1d:a3:
c5:7e:85:28:27:54:8e:83:51:87:5c:58:92:d3:44:
e5:4b:c8:9f:e8:0b:f5:f1:f6:da:21:b7:23:5f:18:
36:54:77:f9:00:fd:69:be:c8:67:1f:ae:6d:41:9a:
bb:e5:75:ce:b5:92:00:a0:df:24:5d:08:3b:68:d2:
95:5b:45:f7:3a:8a:6e:e0:bf:05:d2:bc:9d:af:0a:
80:50:92:ba:f4:e1:2d:4a:d5:16:77:e5:7a:de:4c:
a5:a1:2d:f4:32:b4:51:18:be:a3:b8:49:ac:94:26:
59:b8:da:f6:91:58:20:ea:50:1f:e0:67:81:d2:bb:
4b:81:ac:09:99:a5:5d:d5:1f:16:0d:6e:c2:3c:ee:
e1:af:37:c1:95:46:28:18:4b:9b:db:97:67:36:e1:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:41:7F:C2:23:E1:7B:AF:13:1B:AD:E1:4F:1A:4B:CA:AC:08:35
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b79Bf8Ij4XuvExut4U8aS8qsCDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.57.16.0/21
31.58.176.0/22
31.58.216.0/22
31.58.240.0/22
31.59.124.0/22
31.59.188.0-31.59.195.255
31.59.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:27:0f:da:44:8b:1c:15:1d:21:72:5d:e2:d7:c0:76:8e:38:
44:76:e2:09:fb:1b:6d:35:d3:12:f4:3d:17:59:fa:c5:b2:25:
4c:23:ac:c4:63:96:74:97:a1:46:aa:3a:fc:e0:10:02:a2:c8:
5c:4b:ef:56:00:fe:c4:71:d5:84:2b:f2:0f:e9:fd:36:fb:ef:
75:a7:42:5a:58:2f:15:26:e9:d5:ad:c4:94:ec:55:b4:64:a0:
1a:99:cc:55:33:9a:ed:e6:a2:e3:d7:03:8a:dd:a0:c2:1a:b6:
ab:ad:9d:d6:49:f9:0d:71:3a:d3:f6:6e:d9:6b:90:4d:ec:79:
78:7b:b5:c3:dc:f2:e0:66:8f:85:dc:f6:8f:36:be:76:32:19:
1d:fe:7a:e5:fa:d2:fb:6d:f6:c1:95:c1:65:e1:12:58:4a:e5:
d8:38:26:25:3e:8c:d1:1e:be:65:38:34:66:95:fb:8c:ae:a3:
a5:7c:0a:7d:86:84:7f:1e:e5:c5:3e:cd:ce:17:57:bd:7f:ff:
fe:49:af:5f:74:e8:79:a7:5a:4a:17:c0:f3:96:87:b0:e9:43:
2d:9a:78:8c:34:80:e6:d6:e9:fb:a4:fc:9e:36:ed:52:61:66:
93:fe:fe:90:37:f0:ce:78:ad:99:3f:8e:0b:a9:fe:e5:10:c7:
7d:e3:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:53:02 2026 by rpki-client