Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gqPYB_B2OaEaTqjg-OqJfCAL5Oo.roa
File: gqPYB_B2OaEaTqjg-OqJfCAL5Oo.roa (raw, json)
Hash identifier: TPQBvvYNUy1yEzb4z30YE5lA9333Vw6VMpTlxJnb7wA=
Subject key identifier: 82:A3:D8:07:F0:76:39:A1:1A:4E:A8:E0:F8:EA:89:7C:20:0B:E4:EA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C6CC19DF100F38267A7748BE33D65F890
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gqPYB_B2OaEaTqjg-OqJfCAL5Oo.roa
Signing time: Tue 17 Feb 2026 17:59:14 +0000
ROA not before: Tue 17 Feb 2026 17:59:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 31.56.16.0/22 maxlen: 24
31.56.214.0/24 maxlen: 24
31.57.16.0/21 maxlen: 24
31.57.135.0/24 maxlen: 24
31.58.176.0/22 maxlen: 24
31.58.200.0/22 maxlen: 24
31.58.216.0/22 maxlen: 24
31.58.240.0/22 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.64.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.124.0/22 maxlen: 24
31.59.176.0/21 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/22 maxlen: 24
217.60.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:c1:9d:f1:00:f3:82:67:a7:74:8b:e3:3d:65:f8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 17 17:59:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82a3d807f07639a11a4ea8e0f8ea897c200be4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:d6:93:b6:c7:49:ef:1a:29:cc:49:09:36:
da:2b:64:04:f9:af:42:f9:09:62:0a:65:4c:9f:1d:
2a:b6:49:66:6e:ff:2d:b9:c7:31:92:93:08:55:4f:
c7:49:9c:86:59:78:d3:28:f7:b6:fa:20:00:1e:4d:
d0:dd:a2:df:ec:2c:b0:fe:24:99:1b:5e:28:a3:d4:
e6:42:d5:09:c6:88:e6:f3:0f:ec:cc:9a:51:fc:36:
f5:e1:7c:9c:5a:7a:33:e9:44:07:47:85:36:f6:5c:
63:b5:9c:d9:26:41:ef:9f:64:e2:2d:a6:9a:a7:a6:
ab:71:f2:4e:42:67:b1:cf:67:fd:f3:c4:4f:bc:04:
09:09:b8:cf:b6:38:5b:a9:eb:f5:37:72:85:aa:29:
76:8d:b2:ac:b4:a5:50:db:93:53:97:45:bf:b6:4c:
93:34:86:64:25:5b:ce:6f:36:77:4c:db:27:e5:8b:
9f:e6:f5:4a:3b:1e:91:8d:73:77:d2:3b:05:b0:30:
d0:a7:d0:fb:27:44:f2:b0:c6:05:25:f6:90:9f:5e:
31:d4:89:66:6f:dc:73:aa:2d:cf:a8:3a:88:cb:94:
e9:bf:89:75:04:66:31:bf:49:06:11:1f:40:01:64:
dd:e2:78:89:11:77:75:bf:23:f5:dd:7e:05:6f:c9:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A3:D8:07:F0:76:39:A1:1A:4E:A8:E0:F8:EA:89:7C:20:0B:E4:EA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/gqPYB_B2OaEaTqjg-OqJfCAL5Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/22
31.56.214.0/24
31.57.16.0/21
31.57.135.0/24
31.58.176.0/22
31.58.200.0/22
31.58.216.0/22
31.58.240.0-31.58.245.255
31.58.249.0-31.58.255.255
31.59.64.0/22
31.59.80.0/22
31.59.124.0/22
31.59.176.0/21
31.59.188.0-31.59.195.255
31.59.216.0/22
217.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
21:fc:d2:82:72:cb:c8:38:92:ee:fc:26:9d:bb:f3:68:c9:fa:
38:ce:ee:01:a6:b4:e6:61:5f:a2:71:28:3e:a8:90:4a:33:93:
c8:a6:dd:2a:b9:a6:74:ed:36:0f:3e:68:22:a9:91:26:d4:22:
66:6f:ea:a4:25:d2:4d:1d:b2:35:38:37:e3:c8:47:0b:62:d1:
98:5a:fd:1e:b1:2f:7f:8d:93:c9:79:e7:f0:c5:20:30:fd:f1:
3d:d4:7b:d2:71:c1:59:2e:cb:45:ca:18:8c:55:ae:db:23:09:
af:78:7b:73:48:89:2c:3b:5e:67:39:25:ad:92:9e:0d:0b:f1:
6b:bc:15:bb:de:29:28:da:6b:79:06:ba:e0:66:43:ab:8c:b9:
d6:36:30:a0:a9:d9:a8:0b:ad:98:b4:2f:a4:99:43:e3:cc:a9:
7c:a2:93:d2:22:51:6c:11:c0:cb:cb:49:03:3a:b9:0e:29:a6:
44:3d:12:92:48:8a:24:0c:30:ab:e5:1c:15:50:d0:6d:ba:48:
d6:08:28:39:29:7e:3c:88:f0:bd:46:3f:09:04:77:0d:69:1e:
21:c1:40:15:04:dd:8a:95:ac:af:d7:b5:b5:57:68:7e:81:ef:
5d:0e:b5:1f:d0:30:61:3c:b3:3e:16:d1:85:e9:45:75:3f:71:
f2:99:5c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:16 2026 by rpki-client