Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2mtbU386RiPIwAv9Q-4tESHreI.roa
File: p2mtbU386RiPIwAv9Q-4tESHreI.roa (raw, json)
Hash identifier: JowgNUmRxrJXGz+cDvCH/GXnDy9e9YoB7N0V9CX1bfo=
Subject key identifier: A7:69:AD:6D:4D:FC:E9:18:8F:23:00:2F:F5:0F:B8:B4:44:87:AD:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0A4EA3AF4F1E57D24025F3B3E0E0EFFD6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2mtbU386RiPIwAv9Q-4tESHreI.roa
Signing time: Tue 15 Sep 2026 11:53:29 +0000
ROA not before: Tue 15 Sep 2026 11:53:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 31.56.80.0/24 maxlen: 24
31.56.217.0/24 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.9.0/24 maxlen: 24
31.57.115.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:ea:3a:f4:f1:e5:7d:24:02:5f:3b:3e:0e:0e:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 15 11:53:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a769ad6d4dfce9188f23002ff50fb8b44487ade2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:22:eb:a4:e7:f1:89:7d:94:cf:ba:fb:89:
47:05:30:a1:d8:20:e0:70:8b:8d:5e:ed:4d:1e:51:
17:9c:7e:0a:61:8b:5e:b6:72:23:d5:db:35:81:dc:
2b:b2:95:d2:c5:79:b9:a5:85:61:2b:a6:8c:e1:ab:
c1:d7:62:81:db:a2:23:fa:f3:38:eb:a7:1d:eb:39:
63:66:71:1e:84:a7:b2:cd:ba:58:03:00:67:3c:ac:
d0:d5:45:18:af:99:1d:1d:9e:c9:a8:2a:7d:ed:8d:
2e:17:cd:9b:de:4f:5b:b6:c9:ca:94:bc:d1:91:cb:
31:c6:56:78:93:68:c3:2a:63:b4:ff:74:3e:11:dc:
af:89:f3:19:77:7b:5d:eb:a8:0b:d9:ae:0d:e6:5a:
e6:b3:24:ff:9e:7d:37:ad:d8:cd:3c:f9:8d:8a:e9:
7d:46:06:fc:5b:2e:c3:90:d9:c1:84:7c:78:b1:3a:
ce:e3:e3:73:1f:bc:70:f9:12:26:ac:7c:13:93:a6:
a1:a6:b1:de:92:c3:89:c6:dd:c7:19:5d:12:f0:98:
d9:c6:aa:95:65:65:e9:a2:b6:47:cd:33:fb:e1:1b:
2c:95:5c:50:e4:57:b2:54:5c:6c:cb:a5:eb:90:c6:
5a:30:0c:18:63:c0:1b:e5:5a:a8:fa:84:3c:be:0b:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:69:AD:6D:4D:FC:E9:18:8F:23:00:2F:F5:0F:B8:B4:44:87:AD:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p2mtbU386RiPIwAv9Q-4tESHreI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.80.0/24
31.56.217.0/24
31.56.238.0/24
31.57.9.0/24
31.57.115.0/24
31.57.213.0/24
31.58.49.0/24
31.58.212.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e0:ac:ba:8f:21:8c:da:df:db:46:5e:5a:e5:fc:da:34:d7:
56:34:7d:22:b6:d0:f0:78:ae:e3:7e:46:46:fb:89:c4:62:34:
fb:c8:2f:7e:88:f5:6c:31:f1:c4:aa:5f:8f:ec:5a:5e:1b:d5:
b1:0c:39:13:6a:96:53:72:0a:ac:2e:14:5c:27:f5:2a:a3:65:
0c:39:cd:d3:2c:78:10:27:0a:c7:40:d6:72:0e:a6:42:ad:29:
fe:fe:6b:a7:b6:16:79:77:42:7e:ee:2b:29:0e:ca:af:d8:40:
a7:1e:79:7e:66:d9:94:15:d2:86:2f:02:59:f8:82:4d:f6:07:
03:35:0b:48:5a:0b:f8:cc:83:a1:d4:bf:65:0c:8c:cf:5b:85:
4d:1b:2e:68:d8:be:9b:db:62:8f:f6:35:37:eb:aa:9a:04:dc:
1a:6e:e4:1e:f5:b2:34:99:19:a3:0b:48:09:d1:ff:33:16:06:
cc:3f:c0:b7:f4:c3:b0:bf:df:05:cc:73:d0:ad:1d:dd:82:8f:
f6:c9:7c:fe:d1:92:6f:37:4e:07:88:3a:c1:30:be:85:e4:af:
26:8d:7b:44:87:75:bb:03:47:f1:b7:e6:69:e8:e1:27:fb:3a:
db:fb:2f:f8:56:b6:1f:2e:af:97:4a:3a:69:5d:41:11:c9:91:
0f:72:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:07 2026 by rpki-client