Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cESF7reyn56M3_knnX95dU2WQnU.roa
File: cESF7reyn56M3_knnX95dU2WQnU.roa (raw, json)
Hash identifier: fL3CCzMG2UHpsirzvotgPeXBYWSOQmqxQQbhjDoMz4E=
Subject key identifier: 70:44:85:EE:B7:B2:9F:9E:8C:DF:F9:27:9D:7F:79:75:4D:96:42:75
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0D87AB5FC0BB91350EF07FA28F4D360E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cESF7reyn56M3_knnX95dU2WQnU.roa
Signing time: Fri 25 Sep 2026 12:11:55 +0000
ROA not before: Fri 25 Sep 2026 12:11:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.214.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
217.60.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:7a:b5:fc:0b:b9:13:50:ef:07:fa:28:f4:d3:60:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 25 12:11:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=704485eeb7b29f9e8cdff9279d7f79754d964275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:8a:1f:e8:da:47:45:35:a4:23:e8:b7:cf:
24:e0:4b:1b:3e:d9:42:5b:df:1f:09:87:ce:27:ae:
a4:dd:74:e8:76:2f:71:57:9a:35:a1:0f:6e:11:3c:
9a:78:ca:f9:28:37:b9:1e:db:b2:24:b8:2a:53:3a:
e2:85:f2:9e:3d:4d:cd:d3:f3:1b:f1:2d:50:e0:85:
84:b9:65:5f:1e:74:7e:63:d2:cb:70:93:93:38:ef:
ab:65:df:6b:a0:49:f6:85:b0:20:ba:61:8e:d5:c2:
d8:d3:94:92:57:c6:ca:4a:1a:2f:5d:6e:d8:f6:e7:
b0:1f:a6:03:4f:42:76:d1:84:68:8d:a7:08:36:fa:
8b:20:6c:a0:a8:73:3a:73:64:88:cf:18:38:0a:5b:
7f:70:29:40:ae:e8:da:b1:ef:f1:f5:8d:5d:ae:b8:
33:a3:26:cf:7c:c4:b3:53:9e:b6:5a:30:0f:16:ef:
87:af:34:bf:aa:be:d0:8b:1f:4d:c8:c2:5a:c8:8e:
f6:59:b1:70:6f:6d:c0:fa:4d:1c:b8:ea:c2:f4:10:
53:ed:55:94:8a:a0:45:33:25:70:28:98:62:a1:8e:
63:9f:e5:9b:1d:6f:87:06:ab:5f:7d:04:66:29:61:
93:d1:1d:a7:4b:ef:ff:30:5f:7d:62:8c:09:1b:7d:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:44:85:EE:B7:B2:9F:9E:8C:DF:F9:27:9D:7F:79:75:4D:96:42:75
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cESF7reyn56M3_knnX95dU2WQnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.214.0/24
31.58.245.0/24
31.58.247.0/24
31.58.250.0/23
217.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
68:3e:99:5d:f1:11:74:dd:90:0b:d5:c0:83:12:dc:6f:db:ad:
75:d7:b7:65:cd:86:6b:85:b1:ad:b3:d8:35:3d:5a:b8:20:89:
b6:75:4a:9a:01:ed:82:e3:eb:b2:b4:1b:e7:75:06:48:16:24:
26:0d:b9:fc:b7:5d:e1:b8:ca:b5:21:2d:06:95:47:53:47:1a:
e2:8d:ac:f5:c5:e4:c6:b6:a7:59:10:70:68:37:f1:75:9d:68:
4a:55:5f:7c:2a:05:1a:4e:c9:07:e2:25:06:e7:17:2e:9e:b8:
fe:02:e4:32:82:a7:2e:96:4a:61:5b:5b:35:a9:ae:9c:21:23:
f3:12:59:9b:c8:36:02:74:2a:59:ce:ee:3a:44:4e:93:9c:3c:
65:43:08:30:16:12:e3:f2:09:58:33:ff:69:89:c5:8e:86:7b:
3c:9d:0d:cb:d3:b8:fb:5d:9d:d4:f8:2a:aa:db:94:f4:f1:fd:
20:77:15:c7:11:49:ef:6d:45:60:2c:13:4d:07:70:04:d3:21:
29:af:86:c9:ef:a1:7e:35:f9:01:2e:75:15:b2:7b:58:f8:07:
23:1b:db:2e:89:04:15:89:4a:f9:20:99:88:53:5f:3d:62:7a:
92:a3:89:6d:76:6e:f8:14:f8:e3:08:72:48:9e:51:f5:d9:29:
ee:e7:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 10:16:01 2026 by rpki-client