Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1VDkkmyCvB3gb_ISTjNnzbv1n88.roa
File: 1VDkkmyCvB3gb_ISTjNnzbv1n88.roa (raw, json)
Hash identifier: Uw8qH4nh3bbkEOV00LrsMUxZp7eMpqC2NJoT1MuKG6o=
Subject key identifier: D5:50:E4:92:6C:82:BC:1D:E0:6F:F2:12:4E:33:67:CD:BB:F5:9F:CF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0C4DFFCF09DBB0F6F38F493F4A2F927B9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1VDkkmyCvB3gb_ISTjNnzbv1n88.roa
Signing time: Mon 21 Sep 2026 16:50:08 +0000
ROA not before: Mon 21 Sep 2026 16:50:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219506
IP address blocks: 31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
94.183.167.0/24 maxlen: 24
94.183.206.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:df:fc:f0:9d:bb:0f:6f:38:f4:93:f4:a2:f9:27:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 21 16:50:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d550e4926c82bc1de06ff2124e3367cdbbf59fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:5e:c0:be:fe:ac:ca:d5:e1:02:41:aa:cc:
cc:13:24:52:f4:f0:3e:cf:52:9d:d4:c0:2a:a7:41:
c9:58:fd:21:48:f4:35:17:1b:4d:59:45:12:23:1e:
4e:8c:49:4c:a8:73:08:9f:57:a4:57:65:5e:80:e3:
a1:75:b4:0e:09:c7:e9:93:1f:04:b6:c5:be:c2:83:
0e:ca:be:de:7b:8a:47:82:3e:87:89:6e:ce:cb:71:
55:38:c8:0f:29:4f:62:a5:fa:89:ba:46:e5:9a:9c:
09:3a:12:24:e0:c0:db:ef:c3:34:18:14:94:51:91:
1e:e9:2a:0f:6a:4e:d7:d0:5b:b5:e9:16:81:4e:55:
78:ed:7d:8c:60:c8:a0:df:79:a6:9b:59:4e:76:dc:
7d:ed:a6:c0:2f:86:00:99:95:16:6e:47:86:26:e5:
fc:50:de:9d:f9:4c:67:01:50:e9:38:f8:02:b2:34:
5e:a4:2d:bd:ef:89:ec:90:b3:51:f9:28:e3:67:88:
6e:2c:40:8d:c8:44:f1:c2:f7:7d:5d:b8:85:f3:38:
91:e2:2c:38:31:6f:e4:87:b0:14:aa:11:52:da:71:
0f:3e:fd:67:18:ce:d1:a5:b6:0c:88:b8:f3:f8:21:
8e:a0:92:1a:4b:7a:46:dc:29:89:7c:96:2f:55:f0:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:50:E4:92:6C:82:BC:1D:E0:6F:F2:12:4E:33:67:CD:BB:F5:9F:CF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1VDkkmyCvB3gb_ISTjNnzbv1n88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.209.0-31.59.210.255
31.59.222.0/24
94.183.167.0/24
94.183.206.0/24
94.183.226.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
28:89:7b:4f:82:6a:c5:69:1d:70:68:c6:fc:71:13:08:df:a1:
f5:59:40:55:ec:5c:8b:8a:ef:cb:0d:82:60:92:2d:3b:cc:42:
9d:7c:3e:5d:80:89:b6:eb:d7:19:ff:e1:a3:d9:19:da:80:e4:
f3:6b:b5:49:72:24:a4:71:28:36:1b:b1:bb:ae:da:a9:4b:ec:
00:f9:cc:50:6b:57:33:d1:b2:f5:b0:c0:85:96:38:33:be:f9:
92:7e:d4:f3:10:08:26:ae:a5:60:ec:12:ab:80:a2:83:39:d8:
29:37:36:fe:47:7f:71:ea:18:cf:b4:80:62:cc:ba:11:56:97:
03:75:47:69:99:81:d8:a4:a5:09:b9:65:26:04:21:6e:d8:e0:
83:81:f6:ce:56:e6:f7:f3:84:ef:b0:fa:ed:21:70:a5:47:be:
b2:a8:29:69:4a:41:d3:d5:26:5e:ed:38:7a:80:6a:bd:3f:81:
22:39:0d:6e:8d:c1:c3:6f:8b:44:86:48:ff:93:9c:70:a3:7e:
b9:f5:a1:12:cd:89:09:e5:0d:c9:a9:bc:97:37:69:f6:1e:8b:
22:b7:46:db:00:0a:e3:5e:a7:8e:3a:d7:c6:73:06:bd:cf:22:
0e:39:ee:b6:b9:ef:37:60:91:bb:46:7a:03:10:33:1a:5f:49:
68:70:cf:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:10:41 2026 by rpki-client