Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/14YvGichiUgZiDejmwcJTM44lfo.roa
File: 14YvGichiUgZiDejmwcJTM44lfo.roa (raw, json)
Hash identifier: 5RTLoQopO01JCX2Qn15oxOuQZuDWAFSftdCypnwRQ2A=
Subject key identifier: D7:86:2F:1A:27:21:89:48:19:88:37:A3:9B:07:09:4C:CE:38:95:FA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A19372F4D588B0DED8F529D492C23DF5A2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/14YvGichiUgZiDejmwcJTM44lfo.roa
Signing time: Sat 31 Oct 2026 19:32:26 +0000
ROA not before: Sat 31 Oct 2026 19:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208450
IP address blocks: 31.56.82.0/24 maxlen: 24
31.56.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:72:f4:d5:88:b0:de:d8:f5:29:d4:92:c2:3d:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 31 19:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7862f1a27218948198837a39b07094cce3895fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:0e:cb:73:8a:a4:bd:34:7c:bd:87:18:65:
1c:c9:ef:e0:2d:ab:5d:b5:4e:6f:e3:f1:86:20:6d:
85:c1:ce:20:17:ed:e8:74:13:97:db:f6:e0:45:c9:
9d:d6:02:11:14:40:16:01:c1:03:37:51:79:60:22:
01:d4:03:2c:ae:bd:18:90:8b:13:9d:ae:12:42:5d:
86:e2:fe:48:0a:ca:3e:b2:d2:fe:fd:2b:98:72:fd:
dd:d2:6b:44:90:88:c0:53:5b:68:6b:4e:5b:15:fd:
7e:e3:19:44:eb:e2:37:13:bb:1d:f1:75:1d:c6:85:
34:db:a4:5b:60:b4:36:ed:32:5b:0f:66:c3:d7:e1:
e2:d2:c0:0e:45:63:35:71:40:2a:9f:87:7b:f4:95:
5f:7c:22:db:d2:81:22:c4:dd:82:d3:26:c2:fe:c8:
75:f6:87:4e:47:39:f5:15:4d:ce:5c:7e:c6:e7:56:
e7:78:02:e4:c2:50:d7:1c:b9:4e:35:f5:4c:53:07:
5d:25:75:09:44:15:c9:60:52:95:b0:80:43:af:fa:
0e:9b:bb:2e:a5:67:8d:b4:77:fd:87:7c:9e:f9:81:
dd:08:1f:0b:a4:ed:68:fb:f4:9b:eb:2f:9f:be:e1:
40:d3:69:56:56:06:2a:0c:ba:e9:1c:5b:f5:b2:c7:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:86:2F:1A:27:21:89:48:19:88:37:A3:9B:07:09:4C:CE:38:95:FA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/14YvGichiUgZiDejmwcJTM44lfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.82.0/24
31.56.240.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ca:15:18:ed:a2:c2:40:9b:d8:7f:21:56:ff:49:50:5b:72:
fa:c1:c6:e7:31:42:70:e0:5f:e9:20:63:76:03:a9:8b:2f:7e:
7c:78:85:9c:ac:94:62:75:6c:0d:97:2b:1f:d5:e8:1d:c9:be:
c7:7a:93:90:dd:dd:f8:5e:29:1d:c5:e4:81:fe:ef:66:28:8e:
c3:e5:26:25:ac:f5:df:ef:d5:28:e8:e1:54:34:0d:6d:e5:09:
15:a2:24:cc:aa:71:e2:0d:f4:38:71:13:1a:a8:17:41:b4:50:
db:6e:62:58:06:1a:23:e1:12:00:86:60:42:60:3e:bd:c1:49:
26:c8:bd:de:7e:1b:ef:08:0c:c8:f3:c9:7e:b2:82:72:8a:b6:
25:cc:98:2f:8a:f6:0d:81:37:66:82:57:ea:6e:ce:f9:3a:04:
fa:36:7b:ca:30:3d:49:90:6b:73:9e:76:f1:90:81:d1:c9:9b:
75:e4:a0:d6:9d:6a:88:02:f1:e7:06:cf:bf:93:cb:19:f5:91:
9a:c5:ec:f7:62:e3:43:c7:67:80:55:36:91:5c:b4:1d:fa:d7:
f3:4a:08:c9:12:ed:14:26:0c:9c:ca:59:8f:70:a3:5b:de:76:
d8:02:50:43:f0:d2:30:3e:b4:e0:12:a5:28:ba:08:d7:57:83:
b9:70:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:57 2026 by rpki-client