Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/prJRr2B-y-MdXdExowcbIf5Ipmo.roa
File: prJRr2B-y-MdXdExowcbIf5Ipmo.roa (raw, json)
Hash identifier: 1+lri0Z1y1/YG/n7hPynqLGDI56Q3EeCU6d/Uv+Cp6E=
Subject key identifier: A6:B2:51:AF:60:7E:CB:E3:1D:5D:D1:31:A3:07:1B:21:FE:48:A6:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A17C31E11C2570DFE7AB04953930B40A65
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/prJRr2B-y-MdXdExowcbIf5Ipmo.roa
Signing time: Tue 27 Oct 2026 07:10:05 +0000
ROA not before: Tue 27 Oct 2026 07:10:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 31.56.72.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.90.0/24 maxlen: 24
31.57.54.0/24 maxlen: 24
31.57.119.0/24 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.167.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.224.0/24 maxlen: 24
31.59.225.0/24 maxlen: 24
31.59.226.0/24 maxlen: 24
31.59.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:31:e1:1c:25:70:df:e7:ab:04:95:39:30:b4:0a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 07:10:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6b251af607ecbe31d5dd131a3071b21fe48a66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:4d:03:38:42:c1:8c:b7:bf:a3:d4:0a:5e:
18:3c:4f:6c:94:86:51:c7:6f:60:cf:5f:b4:79:a9:
f8:99:a8:35:15:13:79:1f:07:1a:61:d2:c9:ee:eb:
7e:16:9e:da:8c:6f:31:9a:4d:3f:19:3a:b1:23:20:
0f:15:34:f3:02:90:ea:c4:d5:f3:77:b1:09:06:07:
27:8b:b1:97:56:00:fb:62:7a:7c:e4:34:2a:be:a5:
1b:a8:01:4d:c9:fe:0e:90:07:50:1c:dd:57:80:8d:
c9:36:c0:37:d0:de:e1:98:8a:f4:90:29:db:f6:c2:
5d:ef:95:ce:20:69:1f:da:4e:92:98:46:24:91:0a:
79:8c:c6:5e:13:d0:26:da:d2:94:ad:65:30:4b:e6:
51:35:78:85:e4:fd:d3:b2:d0:6f:dc:80:ce:4d:93:
41:62:cf:e1:9f:24:df:9d:4e:07:45:fd:02:de:ee:
e0:89:82:c6:87:cc:46:bc:00:2a:d4:f3:6e:70:fb:
6b:88:52:48:5c:ea:b7:59:ce:cb:d4:9b:66:d2:26:
e5:35:6e:8d:53:b2:c8:61:3f:e4:cf:f0:29:5e:31:
5a:1b:20:61:3c:29:06:95:d3:e6:1b:40:54:42:a2:
0b:03:ca:94:64:86:32:54:50:4e:b9:a0:fc:2f:44:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:51:AF:60:7E:CB:E3:1D:5D:D1:31:A3:07:1B:21:FE:48:A6:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/prJRr2B-y-MdXdExowcbIf5Ipmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.72.0/24
31.56.76.0/24
31.56.90.0/24
31.57.54.0/24
31.57.119.0/24
31.59.71.0/24
31.59.167.0/24
31.59.171.0/24
31.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:cc:77:a2:30:7a:bc:7e:a7:61:b3:0c:45:72:53:77:5f:18:
2b:bb:7d:48:a7:b1:c5:0e:15:54:7e:06:e4:cd:f6:71:f3:44:
5d:3d:a5:f5:f5:c9:04:df:0a:b7:64:a0:57:66:2b:0f:3d:ed:
29:08:f2:4a:14:a8:82:72:55:ba:9b:5c:a6:5d:a9:05:a0:e7:
41:03:14:4e:df:e6:c8:83:b8:f7:b7:66:09:60:eb:bb:25:84:
01:a6:74:44:de:5e:79:e7:fa:9f:94:3a:33:e6:1a:2a:58:e0:
78:ae:fd:2a:9f:dd:18:55:ba:91:31:2b:3a:fb:cf:68:5a:ac:
f4:fa:c2:21:05:63:99:4f:0a:3e:ee:bd:f9:00:14:82:7a:06:
88:2b:4e:3d:ef:ac:51:9e:2d:b3:ab:7d:5a:d8:9f:95:28:f5:
f5:b7:d5:64:c5:1b:78:20:97:ea:87:88:24:1b:16:d8:65:cc:
aa:51:8e:b8:84:b6:39:c8:93:1d:34:4c:a5:ee:ed:b1:e0:12:
3d:71:14:ed:bf:1e:8e:f2:7c:d1:3a:eb:df:e6:2f:b9:5d:98:
ff:f8:1b:c1:4d:c9:a7:a8:4f:f6:30:5c:8b:7d:b7:63:0b:51:
79:b2:1a:00:4f:15:20:13:41:80:b5:30:0a:e8:d6:cf:94:51:
02:88:62:16
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaF8MeEcJXDf56sElTkwtAplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDI3MDcxMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmIyNTFhZjYwN2VjYmUzMWQ1ZGQxMzFhMzA3MWIyMWZlNDhhNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoRNAzhCwYy3v6PUCl4YPE9slIZR
x29gz1+0ean4mag1FRN5HwcaYdLJ7ut+Fp7ajG8xmk0/GTqxIyAPFTTzApDqxNXz
d7EJBgcni7GXVgD7Ynp85DQqvqUbqAFNyf4OkAdQHN1XgI3JNsA30N7hmIr0kCnb
9sJd75XOIGkf2k6SmEYkkQp5jMZeE9Am2tKUrWUwS+ZRNXiF5P3TstBv3IDOTZNB
Ys/hnyTfnU4HRf0C3u7giYLGh8xGvAAq1PNucPtriFJIXOq3Wc7L1Jtm0iblNW6N
U7LIYT/kz/ApXjFaGyBhPCkGldPmG0BUQqILA8qUZIYyVFBOuaD8L0RFnwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKayUa9gfsvjHV3RMaMHGyH+SKZqMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvcHJKUnIyQi15LU1kWGRFeG93Y2JJZjVJcG1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAHzhIAwQA
HzhMAwQAHzhaAwQAHzk2AwQAHzl3AwQAHztHAwQAHzunAwQAHzurAwQCHzvgMA0G
CSqGSIb3DQEBCwUAA4IBAQCKzHeiMHq8fqdhswxFclN3Xxgru31Ip7HFDhVUfgbk
zfZx80RdPaX19ckE3wq3ZKBXZisPPe0pCPJKFKiCclW6m1ymXakFoOdBAxRO3+bI
g7j3t2YJYOu7JYQBpnRE3l555/qflDoz5hoqWOB4rv0qn90YVbqRMSs6+89oWqz0
+sIhBWOZTwo+7r35ABSCegaIK04976xRni2zq31a2J+VKPX1t9VkxRt4IJfqh4gk
GxbYZcyqUY64hLY5yJMdNEyl7u2x4BI9cRTtvx6O8nzROuvf5i+5XZj/+BvBTcmn
qE/2MFyLfbdjC1F5shoATxUgE0GAtTAK6NbPlFECiGIW
-----END CERTIFICATE-----
Generated at Sat Nov 7 13:46:05 2026 by rpki-client