Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bzic7G-nvQ0aZRyRmkcf0CI4u5k.roa
File: bzic7G-nvQ0aZRyRmkcf0CI4u5k.roa (raw, json)
Hash identifier: VU2lPAtj/T2zVh0ZLIN7cIu/0ZnSQGJvkR8Jj341d28=
Subject key identifier: 6F:38:9C:EC:6F:A7:BD:0D:1A:65:1C:91:9A:47:1F:D0:22:38:BB:99
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CA04A9542E3A20ADB5638C03BDCDEC494
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bzic7G-nvQ0aZRyRmkcf0CI4u5k.roa
Signing time: Fri 27 Feb 2026 18:09:28 +0000
ROA not before: Fri 27 Feb 2026 18:09:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.6.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.53.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
31.57.146.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:4a:95:42:e3:a2:0a:db:56:38:c0:3b:dc:de:c4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 27 18:09:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f389cec6fa7bd0d1a651c919a471fd02238bb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:7d:4c:e8:5b:d8:7c:b4:27:29:1f:9f:9e:
aa:ab:e0:6c:86:99:cb:da:ad:70:36:53:af:db:a3:
b7:54:ec:48:44:b5:c3:f2:bc:be:60:ef:6e:d3:ab:
03:ef:9f:5d:46:8f:37:5b:cb:b4:ed:c0:09:13:3c:
04:aa:23:36:3d:1e:2a:16:ce:74:30:d6:07:84:86:
9a:4b:76:2d:08:2c:d5:16:55:3d:a7:3f:f6:d1:86:
4d:f4:c9:52:90:2b:1a:2c:71:66:0d:98:18:a4:c2:
15:8e:dc:77:17:e6:42:47:37:2a:8d:c3:83:75:d5:
f4:59:ee:1b:ef:60:e9:4e:93:56:83:f3:ea:05:06:
e2:b2:08:5f:11:df:e8:8e:6b:01:95:e7:e8:6c:83:
e5:06:4e:cf:06:6f:68:8c:56:50:2d:0d:8f:cb:a7:
a9:2d:8e:fa:49:aa:87:f0:3a:73:4a:5a:a8:96:73:
3b:9e:fc:d4:23:c1:60:af:49:63:14:f5:2c:f4:e3:
6b:21:40:cf:22:58:e3:1b:fb:88:e7:99:33:aa:df:
3e:dc:c3:44:68:57:0e:5e:78:09:ba:ef:da:0a:c8:
cb:90:66:e1:df:38:ad:51:33:59:79:0b:2c:24:c8:
9b:cc:0e:5c:af:ff:ee:8d:c0:57:ff:51:9e:56:f8:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:9C:EC:6F:A7:BD:0D:1A:65:1C:91:9A:47:1F:D0:22:38:BB:99
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bzic7G-nvQ0aZRyRmkcf0CI4u5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.6.0/24
31.56.35.0/24
31.57.11.0/24
31.57.53.0/24
31.57.59.0/24
31.57.146.0/24
31.57.171.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ea:1a:1c:1c:46:4e:5d:55:70:ba:81:db:e1:a5:7e:3b:e2:
75:a5:7a:f6:83:84:52:fd:58:34:ad:e5:aa:bb:8a:ab:b9:2e:
a9:b7:17:fc:8f:20:e5:85:67:76:e7:90:4f:8a:ea:c0:3c:d6:
a7:91:2c:01:e2:d7:1c:6f:e3:ca:a0:30:0a:00:c9:a9:8d:e4:
c6:18:46:ff:48:46:ae:c5:a3:6d:0b:38:cf:56:73:a4:15:73:
73:93:8a:d9:a7:52:84:00:a9:e5:e9:b4:f0:7c:aa:15:4b:ca:
9e:32:20:18:4a:bb:39:0c:a7:07:96:c9:4f:2d:90:a1:78:88:
85:af:2b:52:56:3f:c6:92:0f:0f:7d:43:7d:ec:5a:46:08:b8:
c8:de:b9:09:3a:9d:9a:59:14:93:ed:da:2f:7e:12:60:8f:e2:
a3:6a:c4:6e:13:70:30:b1:00:cf:6d:d8:d8:bf:7b:e9:0b:20:
fd:66:04:20:64:b7:5d:14:77:8f:ba:6e:e4:44:2f:ae:a8:73:
c3:e1:90:8e:77:85:89:c0:81:7c:38:70:96:84:85:79:a3:00:
ed:d5:b9:78:de:80:9f:a9:3e:d2:18:0b:e5:c1:2a:df:c5:9b:
c2:68:fc:5a:01:d2:68:04:f8:7f:45:43:5a:bc:f1:96:b1:03:
8e:cd:ea:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:26 2026 by rpki-client