Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-SD4HHrjTPuJ7x45Vk_Ir4bt_qs.roa
File: 1-SD4HHrjTPuJ7x45Vk_Ir4bt_qs.roa (raw, json)
Hash identifier: cEHUB7697RZDM/joOfif3mZO9maFMwXDZakhftd6TCU=
Subject key identifier: F9:20:F8:1C:7A:E3:4C:FB:89:EF:1E:39:56:4F:C8:AF:86:ED:FE:AB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F66E1931452937A57F7C3B88FF1DCF97E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-SD4HHrjTPuJ7x45Vk_Ir4bt_qs.roa
Signing time: Wed 15 Jul 2026 17:44:47 +0000
ROA not before: Wed 15 Jul 2026 17:44:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204104
IP address blocks: 31.56.89.0/24 maxlen: 24
31.58.237.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.153.0/24 maxlen: 24
94.183.154.0/24 maxlen: 24
94.183.162.0/24 maxlen: 24
94.183.166.0/24 maxlen: 24
94.183.180.0/24 maxlen: 24
94.183.218.0/24 maxlen: 24
217.60.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:e1:93:14:52:93:7a:57:f7:c3:b8:8f:f1:dc:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 15 17:44:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f920f81c7ae34cfb89ef1e39564fc8af86edfeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:74:e0:39:91:4c:55:c5:4a:09:a7:8a:cb:
c4:9b:91:5a:4a:d9:bc:f6:66:2a:d8:98:6d:57:09:
97:8f:20:50:02:10:6d:80:f0:bc:a9:a0:67:2f:49:
be:ca:63:c9:b9:d4:d5:4e:25:39:fd:6c:17:e0:1d:
ae:d8:a8:fb:d2:99:58:fb:2c:63:00:63:f7:5b:d7:
c1:5d:d0:4b:3a:53:27:5d:17:84:22:fe:6f:4a:3c:
78:ec:fd:29:ac:5b:65:78:76:d8:53:72:16:ff:70:
1a:85:fc:ec:82:08:23:f3:c2:bb:d3:85:41:16:bc:
bf:ac:9c:8e:7a:9c:02:b6:03:9f:da:40:a7:ff:b2:
28:f0:8e:6c:ff:b5:44:e7:b5:69:94:5b:56:51:aa:
2f:6a:ec:8a:9d:6b:76:75:70:68:15:c5:05:5e:d4:
75:30:e0:f7:44:85:1a:53:0e:35:59:c7:ca:2b:b3:
00:a3:09:8a:44:3a:6c:ae:af:c5:eb:1d:ba:52:3d:
f1:fe:0f:e4:9e:18:58:bf:08:ac:d2:2c:15:be:72:
a8:a3:dc:f2:73:59:6b:5e:c7:b7:a7:d1:ec:dd:bf:
ca:fd:f6:64:f9:c9:45:db:bf:12:53:ca:11:38:cc:
3a:e4:16:13:38:99:0f:85:d4:41:cf:a8:48:a9:78:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:20:F8:1C:7A:E3:4C:FB:89:EF:1E:39:56:4F:C8:AF:86:ED:FE:AB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1-SD4HHrjTPuJ7x45Vk_Ir4bt_qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.89.0/24
31.58.237.0/24
94.183.150.0/24
94.183.153.0-94.183.154.255
94.183.162.0/24
94.183.166.0/24
94.183.180.0/24
94.183.218.0/24
217.60.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:5b:0d:77:f4:f1:0e:1c:fa:b2:23:00:3f:04:94:ff:f2:4e:
52:be:10:bb:27:20:56:a3:1a:54:03:00:aa:88:77:aa:f6:0b:
5c:c9:86:98:5a:94:63:f5:65:ec:b8:37:e9:ae:f6:d8:aa:93:
a3:d3:4e:66:99:dc:29:c5:91:44:d3:7e:d2:5b:48:af:39:1b:
00:50:82:44:55:07:11:91:f2:6c:8a:2c:89:8e:b8:c2:05:9d:
33:e3:d8:b3:89:65:d1:0a:fb:fb:5e:29:4f:56:06:9e:66:6e:
3a:e7:2c:b4:84:bb:45:d0:d6:ba:e0:68:a7:bb:e9:19:8e:2c:
ae:3f:ac:f5:88:b6:38:23:75:6d:e5:46:fc:22:60:a5:44:30:
46:87:52:f4:d2:29:18:13:a2:a3:5d:86:51:ea:a6:d1:3a:55:
b4:ba:6d:d0:80:0c:0d:54:a5:82:66:44:11:dd:d2:94:42:54:
16:a6:2a:fe:27:a2:7a:71:8d:a7:39:21:c7:2f:d5:5c:ea:21:
f9:2c:1b:ae:27:fb:b6:dc:d0:80:a6:5e:84:84:94:33:9e:b0:
5f:1a:4a:db:93:99:a1:6b:fd:a8:f5:03:d0:7d:e5:15:40:42:
6e:7a:98:80:43:96:7f:84:35:47:97:eb:8a:25:d0:4e:66:55:
ce:2c:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:13 2026 by rpki-client