Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fmLsdCekNTPvad3abpYtanPgdYw.roa
File: fmLsdCekNTPvad3abpYtanPgdYw.roa (raw, json)
Hash identifier: RkqRkklKnVwKYGFLwh4Ei/HTSenuVPtzJl+VmlSf97M=
Subject key identifier: 7E:62:EC:74:27:A4:35:33:EF:69:DD:DA:6E:96:2D:6A:73:E0:75:8C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C060E8B7A6095CD6902F369C18881D13
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fmLsdCekNTPvad3abpYtanPgdYw.roa
Signing time: Mon 09 Nov 2026 12:55:38 +0000
ROA not before: Mon 09 Nov 2026 12:55:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 31.56.17.0/24 maxlen: 24
31.56.89.0/24 maxlen: 24
31.57.21.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.153.0/24 maxlen: 24
94.183.154.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.166.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:60:e8:b7:a6:09:5c:d6:90:2f:36:9c:18:88:1d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 9 12:55:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e62ec7427a43533ef69ddda6e962d6a73e0758c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:af:35:2c:11:92:ad:ca:4d:18:a2:b8:a1:
ad:4d:07:53:6b:62:c1:11:e3:cf:fa:2c:83:a1:9a:
fb:c1:7c:e0:4f:d0:e8:c0:54:3c:00:f1:e5:6c:58:
01:c5:ef:20:1c:10:eb:05:7f:d3:b1:a1:07:12:89:
d8:75:11:3a:5c:e7:96:07:69:58:5d:0e:30:c7:48:
af:b4:3a:67:2f:4e:12:7c:b7:b5:39:bf:23:de:9d:
7e:c3:10:52:e2:38:3a:7d:a7:49:1f:83:5f:77:06:
06:fe:6a:3f:d7:ad:8a:71:27:20:46:a3:6c:a0:bd:
74:81:f3:33:8b:6a:d7:ef:65:22:4f:aa:78:03:ff:
3c:be:bd:2c:e0:30:be:0b:56:38:6e:7c:db:01:d8:
b3:54:39:41:44:3d:d3:3e:8d:5c:16:ba:74:2c:25:
82:63:b6:a1:74:8d:75:1c:9a:79:7c:54:40:93:84:
f4:b4:75:4b:24:ca:1e:a7:f7:6c:6b:09:4c:21:8a:
8c:c1:ec:3c:39:ea:94:0d:7f:27:da:88:f7:21:13:
d3:bb:34:d7:3f:0d:a8:21:a8:35:80:cf:e3:d3:d6:
d4:98:bf:67:ed:19:59:fc:15:ba:d4:8e:7f:ba:fd:
b8:a9:80:c9:af:44:a7:b8:43:41:ac:19:ae:76:e7:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:EC:74:27:A4:35:33:EF:69:DD:DA:6E:96:2D:6A:73:E0:75:8C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fmLsdCekNTPvad3abpYtanPgdYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.17.0/24
31.56.89.0/24
31.57.21.0/24
31.58.237.0/24
94.183.150.0/24
94.183.153.0-94.183.154.255
94.183.162.0/24
94.183.166.0/24
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
42:bc:47:e4:15:17:a9:5b:ea:51:7c:0f:27:1d:15:7c:ae:98:
c8:69:db:a1:4e:0b:5c:30:7b:67:01:a7:7a:c5:03:88:0a:53:
58:b8:39:8d:f4:89:8c:17:83:14:25:43:ce:56:fa:28:5e:5e:
ab:85:79:94:c4:96:e1:84:c1:5b:a9:85:78:0e:1b:6f:d2:1e:
e2:18:f2:df:ae:1c:9d:7a:6d:db:94:c3:5a:79:8e:5b:05:44:
80:9a:2c:5a:50:8f:7b:22:2f:39:b0:50:e9:3f:05:39:77:d3:
c3:eb:62:1e:41:0f:03:24:9d:1c:ee:01:89:4a:07:fd:3e:e4:
93:7f:2c:ce:8b:d7:c7:e6:c0:16:5f:5b:fa:ca:71:a9:6f:e2:
5e:43:9e:2e:28:83:20:e1:3b:92:d2:cb:ea:e2:64:b7:85:41:
8c:ab:6a:02:50:12:fd:8f:cf:e1:7c:4f:45:a9:18:47:de:32:
5f:7f:1c:54:ad:26:a1:cf:15:b7:3b:c0:86:ef:3d:72:ba:63:
ad:de:31:26:13:9a:77:84:7d:72:b9:71:c3:4a:0d:31:3e:48:
96:3a:ed:9f:8b:b7:6d:ea:80:42:68:5c:ca:e5:ee:4d:b7:c3:
8d:2e:e4:ff:06:1b:6c:4f:e2:08:7b:da:46:71:71:a0:11:db:
fb:5c:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 21:10:37 2026 by rpki-client