Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ceJe2U0EK-sZ9dFlGQNCYJD2C_c.roa
File: ceJe2U0EK-sZ9dFlGQNCYJD2C_c.roa (raw, json)
Hash identifier: fcF5hqEnoumeIt0OsX8GaggsA3Js2X6xVpgWU86gk84=
Subject key identifier: 71:E2:5E:D9:4D:04:2B:EB:19:F5:D1:65:19:03:42:60:90:F6:0B:F7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C6CC0B47ABA5A53F5D5B5E5D4E419B995
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ceJe2U0EK-sZ9dFlGQNCYJD2C_c.roa
Signing time: Tue 17 Feb 2026 17:58:14 +0000
ROA not before: Tue 17 Feb 2026 17:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205463
IP address blocks: 31.56.214.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:c0:b4:7a:ba:5a:53:f5:d5:b5:e5:d4:e4:19:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 17 17:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71e25ed94d042beb19f5d1651903426090f60bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:f5:a2:83:26:6f:31:01:03:97:2c:41:d4:
aa:bd:80:cf:9d:1e:e1:b7:e3:23:b8:7f:47:18:6f:
da:f2:85:2d:d4:f9:91:72:43:41:c0:56:04:1d:ac:
40:a8:fb:bd:9b:6a:aa:d0:69:1b:49:0c:2f:4c:28:
ab:0f:3e:d0:40:4f:7a:c0:87:a6:e9:49:9d:bc:4b:
9f:2f:24:89:cd:39:39:b4:ea:ad:6f:64:f3:ae:c9:
a2:32:22:79:be:85:a1:ca:0b:4a:46:4f:7f:56:4d:
50:c2:55:7e:4f:f2:80:bb:3b:1c:3a:c7:5e:e6:ba:
7a:fe:33:89:22:c8:79:a3:dc:34:22:50:14:da:67:
48:3b:69:e6:a9:c6:62:27:6c:4d:4d:91:ba:b3:74:
cb:ed:28:90:62:ce:2c:bb:90:92:b6:fb:79:e0:79:
a0:44:1b:d5:c6:0c:20:f7:dc:7b:c8:8f:d5:f9:40:
36:1a:e1:5f:1c:dc:c4:fa:a1:43:c6:2d:3e:60:f3:
b0:27:1e:78:12:4e:2e:3a:e1:a3:7d:6f:1e:96:62:
3c:8b:78:51:c4:7f:7d:ac:47:37:9d:47:d2:d2:1d:
d4:0b:61:06:27:9a:0f:9f:ca:ca:1d:a4:62:08:1a:
3a:81:f4:e5:53:e7:24:0a:05:e0:47:ce:ad:16:3e:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:5E:D9:4D:04:2B:EB:19:F5:D1:65:19:03:42:60:90:F6:0B:F7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ceJe2U0EK-sZ9dFlGQNCYJD2C_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.214.0/24
31.58.41.0/24
31.58.236.0/24
31.58.245.0/24
31.58.247.0/24
31.58.249.0-31.58.251.255
Signature Algorithm: sha256WithRSAEncryption
a0:77:f8:3a:ec:8c:7f:4a:05:31:99:f1:27:31:00:b5:70:b4:
44:9f:0b:b4:68:49:f1:2b:b3:1e:97:35:c6:b3:80:67:8a:a1:
53:0d:f1:e4:bc:1d:42:ae:1c:ff:84:2f:99:53:30:11:e6:d3:
e0:1d:54:1b:6c:a4:a8:a0:41:a0:ef:f2:9c:44:3e:46:36:9c:
d1:ba:78:b5:86:1e:a6:d3:cb:41:4d:91:7b:77:ad:8b:5d:09:
51:a1:54:d3:13:2d:38:0e:a1:9d:0b:05:be:6e:69:c8:27:9f:
b4:d4:38:87:a5:d5:59:13:95:63:c8:ca:86:8b:af:d2:55:f4:
4f:f4:72:82:bf:6b:fa:b5:8c:99:a0:c3:38:e8:c6:78:05:cc:
61:b2:d6:e0:e6:0f:56:38:21:3c:8e:43:f8:8c:03:36:72:b8:
5f:26:90:da:75:ad:3c:39:ed:6c:c9:93:58:3c:7d:bd:0e:7e:
91:2a:79:94:7a:21:c9:46:8a:dd:b1:34:3b:fb:2d:ec:f2:60:
84:a5:46:30:6d:c5:eb:2d:f7:6c:2b:69:87:59:a8:e4:b6:8e:
7f:ac:4f:59:d0:f1:e9:5f:01:34:88:2d:a2:6e:c6:f1:67:37:
b2:ff:3e:78:d4:1d:80:9f:27:c0:f0:73:cb:b4:3f:8d:6c:77:
03:3d:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:06 2026 by rpki-client