Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCo8-1Xf5XqS4_BRcp8tsXHBgkI.roa
File: zCo8-1Xf5XqS4_BRcp8tsXHBgkI.roa (raw, json)
Hash identifier: M6kjSpnooMgucywQxWv5D/xCNYTo2/5vImjyG/tc87g=
Subject key identifier: CC:2A:3C:FB:55:DF:E5:7A:92:E3:F0:51:72:9F:2D:B1:71:C1:82:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019EAC32894967F0841546E6F1628D1DC9AD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCo8-1Xf5XqS4_BRcp8tsXHBgkI.roa
Signing time: Tue 09 Jun 2026 11:44:13 +0000
ROA not before: Tue 09 Jun 2026 11:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 31.56.122.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.98.0/24 maxlen: 24
31.59.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:32:89:49:67:f0:84:15:46:e6:f1:62:8d:1d:c9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 11:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc2a3cfb55dfe57a92e3f051729f2db171c18242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:3c:20:9e:85:a4:a1:83:04:0e:95:99:0b:
1a:b3:83:1e:d9:69:48:d1:7a:a6:0e:ab:6b:d3:29:
be:6c:70:35:7c:9c:14:0b:37:c6:90:b4:e3:7e:13:
cc:01:56:0b:e5:37:6c:09:6f:29:cd:b0:5d:45:7a:
2c:b1:66:12:25:85:88:d7:4f:fd:00:22:ae:28:e0:
22:e5:66:c8:36:f1:a2:21:55:bf:ca:e2:11:a8:8c:
b5:6b:eb:a0:1d:15:19:98:38:df:cd:c8:83:32:f3:
ac:45:65:9d:ab:2a:35:9d:dd:38:f0:a4:07:6c:b5:
7a:af:3a:6c:36:3d:f8:d9:27:62:a4:7d:23:0b:b2:
8e:77:ff:50:ad:9a:b8:7a:8e:37:1e:0b:c4:04:87:
4c:fd:68:99:75:36:a8:ae:f2:f6:45:8e:b5:cf:ba:
68:c4:f0:87:84:ac:8f:32:2d:5f:83:41:df:a5:12:
68:d6:3f:fb:9d:d7:e4:8c:a1:b4:97:71:de:f3:0f:
f3:58:cf:a6:4c:ef:59:c5:01:ba:c3:aa:5b:79:85:
dd:8d:46:2c:30:87:df:56:f5:36:f5:5c:4a:d7:42:
51:6e:4a:1b:e9:99:7e:4d:27:04:48:f9:15:de:18:
64:09:76:69:42:c5:d1:8e:2b:08:cf:af:c0:0d:ea:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:3C:FB:55:DF:E5:7A:92:E3:F0:51:72:9F:2D:B1:71:C1:82:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/zCo8-1Xf5XqS4_BRcp8tsXHBgkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.122.0/24
31.58.146.0/24
31.59.98.0/24
31.59.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:46:d1:9f:ac:8e:48:21:96:4c:b6:9f:5c:f8:a4:06:84:e7:
06:fc:b2:6f:e2:23:cf:f9:20:fe:76:ff:47:03:80:44:9b:90:
d1:28:40:5f:32:46:96:91:a8:4d:92:c5:dc:bb:48:35:1b:c0:
aa:6c:87:f1:84:8c:54:50:fd:84:0e:69:fb:df:09:66:28:3a:
f8:1b:e7:10:f6:a8:66:b0:9f:37:66:4e:7b:56:61:cc:51:54:
b2:da:7c:28:7c:92:3d:07:58:de:e4:e7:fb:79:fb:f3:7f:db:
91:fc:0b:88:a3:50:e8:05:82:8f:5b:7c:0c:6c:1c:f6:ab:25:
37:4f:81:26:97:3f:5d:bb:23:dc:55:d1:c2:b0:3c:02:af:ef:
1d:a3:ae:06:03:d2:16:c9:65:20:62:53:b9:b0:6a:f3:04:26:
b0:89:ef:70:11:a5:54:3e:b6:e9:31:05:0c:97:59:c5:85:e7:
25:ca:81:21:fa:8b:a0:69:4e:ec:28:5d:45:f2:59:22:34:22:
3f:14:76:f1:4d:84:63:05:90:b1:03:28:c3:c3:61:4c:fb:fc:
4d:83:5e:f6:b8:e9:49:1e:12:d0:11:da:05:22:d5:05:13:bf:
e0:37:de:86:db:e8:2b:40:7d:59:3e:8e:fc:e4:ee:c7:5c:f9:
a7:66:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:03 2026 by rpki-client