Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jIwCzF5I6qf0z7lcdchWD9rFwFQ.roa
File: jIwCzF5I6qf0z7lcdchWD9rFwFQ.roa (raw, json)
Hash identifier: 8c6h5QmD9W+Vlw9jFDraGP7O5Ys8hVDtM3uINAjnyQ4=
Subject key identifier: 8C:8C:02:CC:5E:48:EA:A7:F4:CF:B9:5C:75:C8:56:0F:DA:C5:C0:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1A26E76E0AC897D7651B619213C25892F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jIwCzF5I6qf0z7lcdchWD9rFwFQ.roa
Signing time: Tue 03 Nov 2026 17:21:50 +0000
ROA not before: Tue 03 Nov 2026 17:21:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.6.0/24 maxlen: 24
31.56.37.0/24 maxlen: 24
31.56.69.0/24 maxlen: 24
31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 13:52:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:6e:76:e0:ac:89:7d:76:51:b6:19:21:3c:25:89:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 17:21:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c8c02cc5e48eaa7f4cfb95c75c8560fdac5c054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:d9:2e:35:db:f4:d3:c8:04:94:74:30:1a:
49:de:6e:9c:22:ab:ff:69:0c:98:40:24:8d:ab:f5:
7a:47:de:56:3f:77:93:3f:94:e6:02:cb:fe:8d:d2:
a3:4f:48:74:e5:44:47:46:cd:5f:e8:41:b0:0e:4f:
18:7c:aa:6c:a2:13:6e:5e:14:a0:3f:ef:0e:3a:25:
34:91:82:53:6a:d3:2a:d8:8a:ff:5b:45:14:9f:76:
1d:a0:d2:5b:3b:78:e4:3e:eb:f1:ec:a0:88:6c:16:
2f:f7:60:bd:69:ef:f1:7f:b2:29:0f:b7:dc:51:23:
da:dc:0d:9f:b4:64:94:d2:96:4e:9f:5a:84:81:1e:
e2:ac:e8:43:4e:a8:27:31:d0:c0:db:23:98:7f:18:
78:f5:a4:4c:d7:47:e3:7a:59:1d:a7:59:7f:3f:a8:
b3:1d:46:8f:d7:59:89:db:61:0c:aa:33:1f:e7:4f:
67:20:a1:73:15:78:62:8a:ae:c2:78:be:4e:c4:b3:
54:f2:85:51:2e:fc:fa:e9:ae:c1:f3:98:83:4d:0a:
81:62:62:7f:f4:4c:d4:2d:9d:00:0b:67:a8:83:19:
12:98:dd:8b:5b:ed:d9:c6:e7:3b:3e:6a:71:39:4a:
60:b7:da:ea:cf:c7:a9:f7:21:13:e1:0e:39:57:13:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8C:02:CC:5E:48:EA:A7:F4:CF:B9:5C:75:C8:56:0F:DA:C5:C0:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jIwCzF5I6qf0z7lcdchWD9rFwFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.6.0/24
31.56.37.0/24
31.56.69.0/24
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.115.0/24
31.57.132.0/24
31.57.238.0/24
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
39:ae:85:15:d7:a1:41:12:c1:32:9b:fc:ed:0d:ff:9c:80:71:
68:0e:23:a7:de:bd:7b:8e:09:16:ee:0e:45:5b:fd:cb:dd:a9:
de:d8:f8:21:e8:46:4f:10:6c:05:d0:9c:7d:ca:7a:b5:64:6d:
10:ae:f5:23:55:99:90:05:1b:58:9f:24:77:01:99:43:e9:1b:
7e:bf:59:8d:74:7f:0d:47:42:e5:1c:40:f1:37:d5:0e:79:06:
b5:29:c7:fa:b1:51:23:8e:6e:cc:8d:8e:9f:e9:83:ea:6a:1c:
ac:24:55:ae:5a:92:c1:4c:e5:f0:ee:33:13:a4:45:09:3e:0b:
4b:5d:59:cc:1d:9e:ef:14:5f:b5:ca:4c:b1:c5:ea:8e:7b:f1:
67:db:1e:a8:e5:18:96:d3:ea:8d:9f:3d:aa:c6:07:d4:85:fa:
13:99:6c:f9:8f:34:2c:c0:34:12:77:a0:56:b9:a6:92:5a:52:
9f:7b:fd:02:7c:10:e7:0c:ec:c9:88:a5:e5:a8:40:d2:ad:6f:
60:d7:1c:56:7b:bf:a6:eb:ab:b9:5c:cd:ab:f5:62:fe:fa:a1:
dd:6b:97:21:1d:c5:e9:81:c3:ec:e7:cb:c0:ed:05:50:df:1c:
e5:8c:e3:fc:a6:d8:72:dd:ac:af:d9:9b:79:90:1f:33:0e:cb:
06:28:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:03:04 2026 by rpki-client