Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5P7Mbus7tEMndhBDlGV53oRMZ4I.roa
File: 5P7Mbus7tEMndhBDlGV53oRMZ4I.roa (raw, json)
Hash identifier: fLiIOFlhoJCKGbCrW6gTyE+Agx+UQ7r6xSNdpTT/6Ps=
Subject key identifier: E4:FE:CC:6E:EB:3B:B4:43:27:76:10:43:94:65:79:DE:84:4C:67:82
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1D5CC3D6294308FAAD3AE5A5FCDF2C246
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5P7Mbus7tEMndhBDlGV53oRMZ4I.roa
Signing time: Fri 13 Nov 2026 16:44:54 +0000
ROA not before: Fri 13 Nov 2026 16:44:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218499
IP address blocks: 31.56.122.0/24 maxlen: 24
31.59.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:cc:3d:62:94:30:8f:aa:d3:ae:5a:5f:cd:f2:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 13 16:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e4fecc6eeb3bb44327761043946579de844c6782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:0d:f0:6f:18:b8:48:3c:83:f7:6a:e9:ec:
51:53:9b:93:7a:13:a9:99:11:97:c3:84:f2:1a:e7:
47:20:c5:1c:a8:ab:08:84:bf:58:a1:94:ed:4c:77:
ab:c9:3c:24:d1:bf:4f:48:46:4f:76:14:c7:0f:db:
a3:74:85:fa:ae:93:fd:e2:5f:43:48:33:aa:1e:90:
bd:b2:86:b2:44:43:9f:51:56:5e:2b:f3:e1:ed:96:
8d:64:d2:2b:fc:a8:c5:99:7c:8c:c9:50:2f:8f:0a:
c4:cb:4c:f9:0d:6f:45:d8:c2:ae:3c:b4:5f:96:fd:
8e:6b:42:3c:0e:88:bd:c1:e4:99:ca:af:76:81:be:
a9:06:7a:b0:ab:d5:70:e1:0c:b0:5f:8d:d5:db:07:
ce:77:81:ad:43:da:3e:d5:8a:ad:2b:1a:0b:3a:08:
3a:3e:96:3a:4c:f6:2a:d7:86:09:e2:e4:c7:82:72:
da:b9:97:4a:5e:e7:07:2f:10:30:16:fc:b1:34:fd:
06:de:87:50:6e:b2:5c:06:7a:91:06:ac:db:23:71:
60:18:06:14:9a:bb:b6:0e:46:43:69:e8:45:a3:ad:
5c:c5:7c:bb:db:c8:88:6a:a9:c6:b6:2e:e4:1e:34:
55:3b:51:95:68:a0:99:04:c8:36:c1:5f:48:50:70:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FE:CC:6E:EB:3B:B4:43:27:76:10:43:94:65:79:DE:84:4C:67:82
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5P7Mbus7tEMndhBDlGV53oRMZ4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.122.0/24
31.59.73.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ce:8a:c3:ea:4f:ff:9c:0a:5c:00:af:0a:8d:25:f8:83:4c:
28:fb:5a:13:c8:9b:5e:c6:fd:87:e0:98:2c:29:9f:ac:4c:76:
9a:32:3d:68:24:92:9b:1b:a6:23:54:68:5c:f3:55:24:02:83:
8b:2d:d2:c0:ce:9e:69:0c:a0:be:87:f6:99:d0:d2:d4:18:41:
ff:7d:5d:de:87:01:27:82:be:f5:26:6c:8a:fd:4f:fa:75:bc:
07:10:fb:a6:90:04:84:59:cc:8a:4a:b5:02:8f:ae:a0:61:c0:
96:9a:99:cc:c0:3f:72:c3:b7:d5:21:77:d0:57:6e:69:06:de:
bf:e0:b8:58:fe:db:63:63:32:6c:1b:13:f4:42:b8:64:2e:9a:
5d:b9:41:45:01:8d:84:4e:18:fa:33:04:f1:06:c0:da:68:8d:
6a:6b:3c:31:7c:d1:ed:e3:89:ec:f2:40:71:57:eb:a0:36:5d:
53:d0:22:fc:4b:ea:05:d8:9e:4f:0f:b4:73:52:d4:05:84:23:
13:c4:bb:f7:c0:62:fd:29:bb:7a:36:30:0d:da:a7:94:60:d5:
b4:45:0b:00:18:d0:b7:7e:67:50:0c:6e:a9:09:f4:ba:b9:6c:
37:ad:3b:df:22:ee:ee:e0:fd:22:fb:9d:fa:b6:c6:94:71:c1:
3c:6f:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:57:57 2026 by rpki-client