Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4gDCIxvlyJjCgtD-8Nn526Ig9fc.roa
File: 4gDCIxvlyJjCgtD-8Nn526Ig9fc.roa (raw, json)
Hash identifier: 3qCfK+TyqVqYATYVjIAhhD46lzOzWfeA5456EzBHQFU=
Subject key identifier: E2:00:C2:23:1B:E5:C8:98:C2:82:D0:FE:F0:D9:F9:DB:A2:20:F5:F7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1DAA031C52BB8635E234FD6FC1946B0A6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4gDCIxvlyJjCgtD-8Nn526Ig9fc.roa
Signing time: Sat 14 Nov 2026 15:14:53 +0000
ROA not before: Sat 14 Nov 2026 15:14:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.56.55.0/24 maxlen: 24
31.56.182.0/24 maxlen: 24
31.56.188.0/24 maxlen: 24
31.56.214.0/24 maxlen: 24
31.57.22.0/24 maxlen: 24
31.57.23.0/24 maxlen: 24
31.58.92.0/24 maxlen: 24
31.58.93.0/24 maxlen: 24
31.58.116.0/24 maxlen: 24
31.58.117.0/24 maxlen: 24
31.58.118.0/24 maxlen: 24
31.58.119.0/24 maxlen: 24
31.58.176.0/24 maxlen: 24
31.58.177.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.191.0/24 maxlen: 24
31.58.213.0/24 maxlen: 24
31.58.234.0/24 maxlen: 24
31.58.235.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.252.0/24 maxlen: 24
31.58.253.0/24 maxlen: 24
31.58.254.0/24 maxlen: 24
31.58.255.0/24 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.116.0/24 maxlen: 24
31.59.117.0/24 maxlen: 24
31.59.124.0/24 maxlen: 24
31.59.125.0/24 maxlen: 24
31.59.127.0/24 maxlen: 24
31.59.142.0/24 maxlen: 24
31.59.149.0/24 maxlen: 24
31.59.169.0/24 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.161.0/24 maxlen: 24
94.183.200.0/24 maxlen: 24
94.183.201.0/24 maxlen: 24
94.183.202.0/24 maxlen: 24
94.183.204.0/24 maxlen: 24
94.183.205.0/24 maxlen: 24
94.183.217.0/24 maxlen: 24
94.183.219.0/24 maxlen: 24
94.183.221.0/24 maxlen: 24
94.183.228.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
94.183.230.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
94.183.242.0/24 maxlen: 24
94.183.243.0/24 maxlen: 24
94.183.246.0/24 maxlen: 24
94.183.253.0/24 maxlen: 24
94.183.255.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.23.0/24 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.31.0/24 maxlen: 24
217.60.64.0/24 maxlen: 24
217.60.65.0/24 maxlen: 24
217.60.68.0/24 maxlen: 24
217.60.94.0/24 maxlen: 24
217.60.95.0/24 maxlen: 24
217.60.176.0/24 maxlen: 24
217.60.181.0/24 maxlen: 24
217.60.205.0/24 maxlen: 24
217.60.206.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:a0:31:c5:2b:b8:63:5e:23:4f:d6:fc:19:46:b0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 14 15:14:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e200c2231be5c898c282d0fef0d9f9dba220f5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:e1:7f:a6:70:ab:fe:84:3e:e5:94:1d:c6:
1c:2e:5a:8e:0b:aa:46:a8:de:95:00:10:4e:1f:fa:
a4:c4:36:10:dc:e0:4a:81:e8:b8:fb:cb:b3:0c:dc:
9f:c3:bf:27:53:49:2e:df:c2:5b:ef:e4:88:3f:dc:
b9:c6:ba:da:38:7a:47:3d:31:c6:75:14:78:55:59:
bc:f6:60:14:11:51:aa:4e:85:d8:9d:b2:68:0a:ef:
81:5c:ac:d9:36:41:f8:b6:4d:12:93:83:c5:e8:01:
e8:ab:ad:bd:1a:ab:58:51:fe:f9:8b:47:92:9f:42:
68:ba:3a:aa:44:a7:8c:63:09:b7:a8:7b:0c:f9:9d:
6c:a2:f9:21:9b:95:1a:a4:22:74:b2:ce:24:28:00:
8d:01:43:11:33:17:a8:b1:c3:74:07:8f:fb:ec:ec:
29:45:3f:83:77:10:c9:45:3f:84:8e:1a:d0:cf:a5:
e0:ec:1b:2c:1d:3f:fb:f6:3f:93:e6:18:f8:cd:75:
b7:fd:71:a8:4d:68:bf:0c:ae:83:43:e5:b2:47:da:
26:13:66:48:ef:b1:2b:9d:ed:5c:d0:da:1f:a2:3b:
1c:70:25:fd:e0:36:a5:b3:79:da:c0:e7:9a:67:ab:
08:c9:44:05:a3:c2:dd:60:65:4a:2b:b8:67:50:74:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:C2:23:1B:E5:C8:98:C2:82:D0:FE:F0:D9:F9:DB:A2:20:F5:F7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4gDCIxvlyJjCgtD-8Nn526Ig9fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.55.0/24
31.56.182.0/24
31.56.188.0/24
31.56.214.0/24
31.57.22.0/23
31.58.92.0/23
31.58.116.0/22
31.58.176.0/23
31.58.180.0/24
31.58.191.0/24
31.58.213.0/24
31.58.234.0/23
31.58.240.0/24
31.58.252.0/22
31.59.36.0/24
31.59.116.0/23
31.59.124.0/23
31.59.127.0/24
31.59.142.0/24
31.59.149.0/24
31.59.169.0/24
31.59.208.0/24
31.59.221.0/24
94.183.152.0/24
94.183.157.0/24
94.183.161.0/24
94.183.200.0-94.183.202.255
94.183.204.0/23
94.183.217.0/24
94.183.219.0/24
94.183.221.0/24
94.183.228.0-94.183.230.255
94.183.241.0-94.183.243.255
94.183.246.0/24
94.183.253.0/24
94.183.255.0/24
217.60.13.0/24
217.60.23.0-217.60.24.255
217.60.31.0/24
217.60.64.0/23
217.60.68.0/24
217.60.94.0/23
217.60.176.0/24
217.60.181.0/24
217.60.205.0-217.60.206.255
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ed:1b:a5:1e:da:e1:cd:fc:78:54:e5:3b:04:e1:56:ef:b6:
32:71:be:d4:9c:88:b2:b5:e8:bf:74:f0:ca:ff:22:9b:4c:00:
28:4f:7c:22:69:0d:21:73:ae:35:e0:d2:34:ff:6d:2c:f3:a2:
5e:7d:a0:58:61:cb:45:4e:6a:3b:32:a0:c9:44:67:e1:20:41:
4c:5d:67:4d:47:64:23:c1:3e:cb:39:34:d0:25:ab:51:82:32:
7b:6f:5e:12:79:d3:0a:70:ef:58:53:0b:9e:4d:ae:24:e7:ff:
d1:04:d3:f3:bb:0f:bd:d5:28:48:02:3b:6d:54:0c:68:1d:bb:
6b:5a:32:ac:b8:4b:e1:81:8c:29:36:7b:68:e9:57:b4:11:83:
1a:08:35:af:0e:41:9f:df:00:0a:cc:21:5d:c0:88:25:c9:f0:
6a:f1:d8:f4:23:a9:cd:fc:31:ea:4d:e9:61:b1:d9:ac:7b:aa:
c8:10:86:5d:62:c1:78:f7:a6:8e:e6:dc:4d:5c:0f:3c:94:7c:
ca:be:a3:8b:e4:e1:f5:1f:89:49:96:28:3f:7f:72:2d:52:d5:
d9:09:70:b1:a2:d3:1d:7c:51:89:5f:31:25:68:f3:28:0d:3c:
a4:91:d3:ae:13:4f:18:11:66:89:c7:c4:bf:df:f6:7c:49:fa:
fe:a8:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:47 2026 by rpki-client