Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3zEHojTa5adj8EP2PJmpWQfcw20.roa
File: 3zEHojTa5adj8EP2PJmpWQfcw20.roa (raw, json)
Hash identifier: UFX8i1VgwwaNBnOl0cV0XYAp+NA7Xu25fU66/TGwkBM=
Subject key identifier: DF:31:07:A2:34:DA:E5:A7:63:F0:43:F6:3C:99:A9:59:07:DC:C3:6D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019D255CBC9631DDC22D64AE300FB6A0D4F5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3zEHojTa5adj8EP2PJmpWQfcw20.roa
Signing time: Wed 25 Mar 2026 14:18:47 +0000
ROA not before: Wed 25 Mar 2026 14:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.182.0/23 maxlen: 23
31.56.184.0/22 maxlen: 24
31.56.188.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.251.0/24 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.92.0/23 maxlen: 23
31.58.180.0/24 maxlen: 24
31.58.184.0/21 maxlen: 24
31.58.192.0/21 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/23 maxlen: 24
31.58.232.0/23 maxlen: 24
31.58.239.0/24 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.92.0/22 maxlen: 24
31.59.140.0/22 maxlen: 24
31.59.148.0/22 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/22 maxlen: 24
31.59.164.0/23 maxlen: 24
94.183.159.0/24 maxlen: 24
94.183.242.0/24 maxlen: 24
217.60.8.0/22 maxlen: 24
217.60.14.0/24 maxlen: 24
217.60.15.0/24 maxlen: 24
217.60.16.0/21 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.32.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.160.0/20 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/24 maxlen: 24
217.60.193.0/24 maxlen: 24
217.60.195.0/24 maxlen: 24
217.60.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:5c:bc:96:31:dd:c2:2d:64:ae:30:0f:b6:a0:d4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 25 14:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df3107a234dae5a763f043f63c99a95907dcc36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:cb:07:4e:6e:d6:f8:33:cb:a0:0e:c0:e8:
64:ae:50:4a:69:8a:da:68:81:8c:92:4e:6c:59:a3:
2e:0b:b5:e9:f3:95:b1:dd:a0:25:65:d8:22:f4:63:
d9:ad:35:c4:9c:bc:aa:6c:15:91:92:fe:e5:08:7c:
35:87:dc:1d:04:fe:09:c1:b6:3b:2b:08:b2:09:2e:
3c:ce:67:13:80:d8:5e:ce:2a:ea:d8:25:a3:76:c4:
e5:93:f0:67:2d:37:ee:61:73:72:c0:a8:e7:97:07:
ca:07:9b:14:df:91:e0:d8:b5:20:6b:d9:d4:34:20:
a7:78:8e:d7:21:a3:a2:22:b5:cc:83:16:ab:39:dc:
c3:cc:35:89:7f:1f:49:c2:2d:50:84:f3:f0:87:56:
84:bc:a8:25:b2:0e:0b:51:42:9e:b2:fe:73:ab:45:
a3:15:9c:ec:da:50:4b:7a:af:07:a2:04:2b:a6:4e:
0c:3b:af:2b:e1:27:89:ce:12:92:f7:43:c9:22:06:
79:aa:00:c6:1e:fc:fa:6e:3c:14:ef:3b:01:84:14:
1e:22:13:56:c0:b2:52:cd:5d:02:f5:81:ce:3a:90:
bc:ca:e1:5f:39:bb:3a:4d:61:0b:4f:78:e1:f6:f4:
2c:eb:eb:d3:61:e5:c0:79:68:b2:df:15:c4:f3:b7:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:31:07:A2:34:DA:E5:A7:63:F0:43:F6:3C:99:A9:59:07:DC:C3:6D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3zEHojTa5adj8EP2PJmpWQfcw20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.182.0-31.56.189.255
31.57.200.0/24
31.57.208.0/22
31.57.251.0/24
31.58.92.0/22
31.58.180.0/24
31.58.184.0-31.58.199.255
31.58.204.0-31.58.209.255
31.58.232.0/23
31.58.239.0/24
31.59.36.0/24
31.59.44.0/22
31.59.84.0/22
31.59.90.0-31.59.95.255
31.59.140.0/22
31.59.148.0-31.59.165.255
94.183.159.0/24
94.183.242.0/24
217.60.8.0/22
217.60.14.0-217.60.25.255
217.60.28.0-217.60.35.255
217.60.52.0-217.60.59.255
217.60.160.0-217.60.183.255
217.60.188.0-217.60.193.255
217.60.195.0/24
217.60.198.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:6a:cf:f3:29:97:af:6a:e4:8c:09:cf:5b:42:96:5f:89:c4:
0b:fc:9f:c7:22:58:19:9e:85:d5:ef:c6:b5:d7:27:de:4b:e3:
5e:4e:9b:31:0f:d2:05:c4:a3:74:61:4a:3d:9b:1e:58:ae:a3:
42:f9:fa:ad:68:19:39:05:0c:d1:0c:2e:34:f8:0a:40:af:c3:
83:70:27:d9:aa:f0:6a:fc:e9:19:41:3f:3e:a4:ba:aa:43:4b:
e1:b2:1d:ae:36:c4:e6:4a:21:f7:bc:33:3d:d9:28:cd:20:65:
d8:47:fd:3b:fd:a2:83:b5:16:14:4b:cc:43:a2:8b:57:63:78:
8e:e2:25:ac:e3:e5:9c:62:9a:b6:7d:85:00:65:d9:76:49:52:
23:29:93:a6:bb:e8:32:0f:7e:9f:8d:c9:55:e5:a1:6c:0f:28:
55:22:ea:74:62:55:60:66:dd:1b:0f:8e:57:a9:d1:e0:24:c1:
1d:c0:44:11:ef:86:3c:94:6d:70:37:d1:6a:8d:f6:71:10:24:
04:67:02:da:b1:d8:53:74:a3:d3:35:9d:f9:c7:cc:f6:de:e6:
69:f7:8a:85:fe:35:9e:e5:c5:7e:df:93:d3:bc:5b:23:11:9f:
7d:73:f1:31:06:75:08:97:15:a7:14:2f:78:68:4f:c1:87:06:
9c:74:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:29:12 2026 by rpki-client