Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bZRVZ1cnP_UTObWIVYztJBFN_SY.roa
File: bZRVZ1cnP_UTObWIVYztJBFN_SY.roa (raw, json)
Hash identifier: KuBkzHf8BJDnoTr/NVUBCGjgDZUuVxwhNpee4n3GpTY=
Subject key identifier: 6D:94:55:67:57:27:3F:F5:13:39:B5:88:55:8C:ED:24:11:4D:FD:26
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A17EB272A2A96CDC45DEF99E6A13B30988
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bZRVZ1cnP_UTObWIVYztJBFN_SY.roa
Signing time: Tue 27 Oct 2026 18:49:46 +0000
ROA not before: Tue 27 Oct 2026 18:49:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 31.56.2.0/24 maxlen: 24
31.56.8.0/24 maxlen: 24
31.56.9.0/24 maxlen: 24
31.57.4.0/24 maxlen: 24
31.57.60.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.58.62.0/24 maxlen: 24
31.59.53.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.73.0/24 maxlen: 24
31.59.74.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
31.59.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:b2:72:a2:a9:6c:dc:45:de:f9:9e:6a:13:b3:09:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 18:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d94556757273ff51339b588558ced24114dfd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:31:5f:75:11:d5:c9:ae:2b:d6:4e:61:3f:
70:b7:78:f6:ab:6a:38:27:12:1c:15:11:39:aa:e3:
a2:68:4a:d7:4e:00:ac:ad:81:2c:02:12:27:86:79:
66:66:c1:e0:36:78:6e:6a:23:0e:62:9b:86:c0:c7:
7e:0c:05:09:6d:84:f9:01:55:d3:65:8a:34:09:9a:
75:31:c1:0f:29:fd:28:53:3e:8c:cb:52:9a:f0:00:
65:a1:8e:4a:12:c8:fc:75:fc:86:c0:10:ce:d4:3c:
f4:c7:97:1d:aa:ca:ad:53:a9:49:85:db:e1:5c:21:
5c:38:38:14:fa:89:20:d1:76:09:b9:09:1b:2d:c0:
ac:91:1b:3b:1c:17:91:99:72:6f:d2:d9:b9:7a:8c:
fe:93:ca:b2:01:0c:37:40:6d:e9:0f:cc:1b:9b:00:
59:c0:f4:18:db:d0:f1:0e:2d:1f:5b:14:09:5d:0b:
1c:f7:ed:2f:fa:a9:f7:00:a3:52:ea:fa:34:20:06:
b0:e2:7e:aa:0b:6b:65:06:20:68:a6:8d:7d:44:6d:
64:8d:f6:6c:dd:86:c7:d6:88:3a:c4:33:c5:6b:d9:
96:9d:c9:f7:0d:e0:bf:30:72:c2:26:b9:2d:c3:3e:
81:07:0f:95:83:3f:98:f0:09:c6:54:74:91:72:a4:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:55:67:57:27:3F:F5:13:39:B5:88:55:8C:ED:24:11:4D:FD:26
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bZRVZ1cnP_UTObWIVYztJBFN_SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.2.0/24
31.56.8.0/23
31.57.4.0/24
31.57.60.0/24
31.57.140.0/24
31.58.62.0/24
31.59.53.0/24
31.59.57.0/24
31.59.73.0-31.59.74.255
31.59.99.0/24
31.59.199.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5a:87:c0:a3:32:55:33:e4:43:1c:9c:23:31:2a:27:9f:d3:
e7:16:52:43:64:e2:c2:5d:7d:ad:a1:c0:fb:68:47:c9:35:f7:
a8:c4:75:a8:0e:07:e0:c2:59:44:ce:01:24:e4:58:fa:c6:a9:
66:1e:dd:d1:d1:b8:8e:ab:08:e6:2d:1a:60:ae:de:a2:d4:e5:
b6:1c:8b:e8:84:41:50:7a:06:60:0e:0a:a9:6c:4d:99:21:c0:
e0:bf:7a:76:1e:86:74:ab:1e:85:17:16:3c:1f:41:9d:50:82:
46:f2:1c:cc:b1:c3:9e:d2:6e:56:b5:ed:90:3b:6a:ae:a2:d7:
f2:b3:3e:c4:ec:60:fd:be:93:73:cb:26:2e:31:bd:1a:24:e7:
63:2f:dc:3e:81:03:30:1c:2e:7f:f2:ef:66:69:7b:10:70:a9:
7e:ef:e0:0e:9e:0b:57:0d:02:ff:61:06:33:97:ee:7b:72:05:
45:e5:fb:40:23:13:10:eb:f3:3b:a6:c9:d5:bc:4e:f8:e2:5f:
ad:5f:6b:e5:b6:58:ab:99:e8:9c:63:1a:27:99:7e:35:b1:45:
c0:57:96:ce:60:e2:13:89:1f:2d:ff:8e:67:7a:95:6b:00:59:
80:f9:71:95:4d:fe:fe:57:d7:fe:0c:10:8d:83:6d:33:b2:8e:
94:c7:6e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:08:28 2026 by rpki-client