Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/boMNQhgDkohELTqM05fj5I81GLI.roa
File: boMNQhgDkohELTqM05fj5I81GLI.roa (raw, json)
Hash identifier: 4+ZNVi5HuW/jbSjlFF3jrn5drrU47w9EjND/fCR2K9g=
Subject key identifier: 6E:83:0D:42:18:03:92:88:44:2D:3A:8C:D3:97:E3:E4:8F:35:18:B2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BA77CCDFA80C5FD72F60978714EDA0CB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/boMNQhgDkohELTqM05fj5I81GLI.roa
Signing time: Sat 19 Sep 2026 16:20:08 +0000
ROA not before: Sat 19 Sep 2026 16:20:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.182.0/24 maxlen: 24
31.56.183.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.178.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.192.0/20 maxlen: 24
31.58.217.0/24 maxlen: 24
31.58.219.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.161.0/24 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/24 maxlen: 24
31.59.217.0/24 maxlen: 24
31.59.218.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
94.183.194.0/24 maxlen: 24
94.183.236.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.66.0/24 maxlen: 24
217.60.72.0/24 maxlen: 24
217.60.73.0/24 maxlen: 24
217.60.74.0/24 maxlen: 24
217.60.75.0/24 maxlen: 24
217.60.80.0/24 maxlen: 24
217.60.81.0/24 maxlen: 24
217.60.82.0/24 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.128.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
217.60.148.0/22 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:77:cc:df:a8:0c:5f:d7:2f:60:97:87:14:ed:a0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 19 16:20:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e830d4218039288442d3a8cd397e3e48f3518b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:17:b2:7c:72:aa:61:1a:71:6b:4a:d6:94:
9a:fd:f1:69:a5:23:39:23:52:c2:8c:a2:b8:50:ae:
88:4d:ed:08:7a:18:ab:55:d2:c7:87:43:9c:e5:cb:
c0:92:d0:4b:07:9a:fb:42:73:dc:b7:d1:47:a1:2b:
d9:d6:b4:38:5f:af:5f:86:f8:27:69:62:95:6b:e9:
4f:23:d1:88:ec:0f:1c:29:8e:c3:83:6b:e9:4d:8a:
ac:56:be:3d:43:a0:c7:ec:dd:45:97:88:31:6c:c7:
11:71:41:d9:34:e8:1f:b3:c5:15:02:47:1c:46:4d:
fe:ed:ce:f2:bc:a8:89:25:5c:01:a4:36:ec:a1:48:
fd:2c:5d:ec:ce:44:1e:3c:85:93:48:c8:77:49:2f:
93:60:f1:90:21:4d:d3:3d:86:43:ee:61:83:1e:e1:
61:b6:3f:f4:3f:ad:39:66:65:d2:a5:42:58:ea:36:
9c:18:c6:98:9c:52:89:fd:a0:29:5b:45:f5:86:7d:
bc:5f:70:33:be:19:81:53:ba:e4:d8:2a:8e:52:e2:
e3:e4:8c:4a:14:ae:26:90:71:56:99:fe:71:08:9d:
b1:4c:7a:c7:e4:78:96:44:cb:ac:ab:a4:3f:c7:b1:
66:25:31:29:06:6b:5d:c9:0b:84:8f:de:b1:c0:62:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:0D:42:18:03:92:88:44:2D:3A:8C:D3:97:E3:E4:8F:35:18:B2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/boMNQhgDkohELTqM05fj5I81GLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.182.0/23
31.57.200.0/24
31.58.178.0/24
31.58.180.0/24
31.58.192.0/20
31.58.217.0/24
31.58.219.0/24
31.58.249.0/24
31.58.252.0/22
31.59.80.0/21
31.59.90.0/23
31.59.152.0/21
31.59.161.0/24
31.59.188.0-31.59.195.255
31.59.216.0-31.59.218.255
31.59.221.0-31.59.222.255
94.183.164.0/24
94.183.194.0/24
94.183.236.0/24
217.60.18.0-217.60.20.255
217.60.22.0/24
217.60.28.0/22
217.60.52.0-217.60.59.255
217.60.66.0/24
217.60.72.0/22
217.60.80.0-217.60.82.255
217.60.108.0-217.60.115.255
217.60.128.0-217.60.151.255
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
72:1e:28:b5:8e:be:75:73:c1:48:60:a7:15:0c:7c:c3:12:a1:
66:7c:c8:c2:2e:5a:87:5e:fd:ab:f4:c8:b9:83:97:43:95:eb:
54:40:e7:fe:63:16:1a:a9:d5:30:a3:f7:f5:63:34:f4:7d:d6:
b1:5f:3e:27:67:ba:58:4a:c5:0f:6a:7a:16:3d:8e:2b:79:6b:
a6:00:41:be:35:bd:d4:6f:03:92:73:c5:9c:46:68:91:d7:88:
53:49:10:31:9a:f9:45:56:9b:39:4a:26:f0:97:30:db:84:bf:
f1:53:b6:b9:95:8b:c6:31:4f:5a:dc:d9:74:73:06:d2:f5:f6:
08:12:19:ac:47:1b:a0:e1:a8:15:65:2b:25:f4:64:a8:ff:f2:
2a:cd:81:54:02:b7:c8:2c:ca:7e:b5:a1:23:2d:e0:03:1d:da:
dc:b5:c7:92:cc:17:07:b7:09:f4:0b:78:9f:6d:9f:7b:81:49:
33:80:43:34:ad:51:35:d3:35:8d:df:49:a7:6d:c4:dd:5b:05:
4e:ef:10:74:c9:c3:4e:1f:f6:2a:cd:d0:a2:9f:9d:52:c0:c5:
c8:58:df:df:f0:b7:2f:02:e2:2d:e7:9e:78:61:d4:9a:98:71:
12:34:91:20:f8:9f:60:4e:db:f9:6d:66:f6:72:37:7a:7d:de:
19:e1:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:18 2026 by rpki-client