Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dzfDGl5saznzkLOuJPLgnrfz3-Q.roa
File: dzfDGl5saznzkLOuJPLgnrfz3-Q.roa (raw, json)
Hash identifier: IBHLeUmb4Hfai4fFzRg2UNwraxxBAWL7DvX28L6tNmY=
Subject key identifier: 77:37:C3:1A:5E:6C:6B:39:F3:90:B3:AE:24:F2:E0:9E:B7:F3:DF:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CA04B7FA47689268293563126E58CDD6A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dzfDGl5saznzkLOuJPLgnrfz3-Q.roa
Signing time: Fri 27 Feb 2026 18:10:28 +0000
ROA not before: Fri 27 Feb 2026 18:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.219.0/24 maxlen: 24
31.57.161.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
217.60.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:4b:7f:a4:76:89:26:82:93:56:31:26:e5:8c:dd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 27 18:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7737c31a5e6c6b39f390b3ae24f2e09eb7f3dfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:39:c5:f3:32:81:da:6e:65:91:a4:d0:74:
d0:24:9c:10:b5:8c:bc:a6:75:87:91:b6:04:33:32:
38:92:ac:b3:c4:50:ac:23:08:d5:83:d6:83:77:5b:
aa:3d:75:a8:8f:4c:a6:09:0a:d3:9e:94:b8:ed:28:
fe:cf:bf:f6:82:0f:e4:06:e8:8f:5d:44:c9:94:28:
ef:ea:7b:0f:17:18:40:78:1c:47:a6:77:04:40:c4:
6e:cd:a7:46:af:55:0a:dc:ae:a8:98:d1:a1:cd:35:
f7:f4:80:f5:10:ae:1e:9d:35:b4:ea:d7:0f:1b:6d:
d7:88:72:90:28:b4:0c:a8:e1:60:6d:9c:14:52:84:
b2:92:7c:2d:d8:5b:b7:a8:88:8b:9e:23:50:cf:86:
fa:5a:f9:a8:56:0f:27:6a:89:67:62:8b:a6:4b:dc:
5f:8e:3c:c4:33:24:22:24:21:cc:cf:db:fa:ca:e2:
d1:01:57:fa:9f:d4:3d:47:3a:d1:7e:28:89:d1:39:
39:70:9e:d6:6e:8d:2f:a2:e3:11:05:54:7d:07:af:
f1:09:f9:3d:5b:70:cb:12:29:dc:10:25:3b:43:e1:
36:57:f0:1d:d4:92:3e:5c:a0:00:93:e9:b1:e2:0e:
12:7b:e6:da:ee:58:a2:3c:c1:dc:ae:d7:ab:11:2d:
14:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:37:C3:1A:5E:6C:6B:39:F3:90:B3:AE:24:F2:E0:9E:B7:F3:DF:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dzfDGl5saznzkLOuJPLgnrfz3-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.219.0/24
31.57.161.0/24
31.57.199.0/24
31.59.68.0/24
217.60.196.0/24
Signature Algorithm: sha256WithRSAEncryption
41:99:8e:9c:f7:1e:ed:e3:a6:00:06:1f:53:95:8c:8f:5e:6b:
27:8f:ba:df:28:27:0b:27:a6:b4:2f:0e:14:21:a0:78:aa:3f:
87:fb:b9:43:d8:f2:51:97:40:32:0d:db:19:f1:d2:e3:bc:31:
32:45:cc:dc:5d:3d:63:df:44:11:52:eb:a6:61:23:33:32:47:
f7:92:6c:9f:ca:be:32:5b:7c:14:27:dd:b5:4f:9e:78:f0:12:
c4:4f:5d:fd:ce:fe:80:3e:77:70:83:49:d8:4b:8d:5f:c3:29:
67:b9:b3:9f:13:03:37:f3:1a:14:6c:bf:59:90:45:3b:11:b4:
37:80:31:f6:4f:bc:77:22:aa:25:f2:5f:9d:7d:32:47:0a:c6:
3e:bd:35:92:01:a1:5a:8e:fc:c3:30:d3:c8:41:cb:cf:f9:0b:
8c:62:99:55:27:60:8a:62:9a:21:6b:99:3b:47:64:74:1e:ac:
f6:af:50:d8:04:e1:f3:1b:de:ce:b6:d7:f8:43:22:04:4f:77:
69:58:21:b3:e7:d6:f2:09:c0:b3:2e:12:00:6e:17:5a:10:85:
27:6a:41:70:6f:9a:2e:46:bb:4c:63:fa:5c:8b:d4:34:88:5b:
49:a9:8c:bd:5c:30:ca:2d:4c:50:08:e0:89:b4:bc:bc:3f:d6:
7a:28:5c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:57:21 2026 by rpki-client