Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A9g_s0mbz5XgJFI-ETd1sxIAow8.roa
File: A9g_s0mbz5XgJFI-ETd1sxIAow8.roa (raw, json)
Hash identifier: brJdUx0oWi/6c32ve8A+QuK6cUO/YmYQVjbJRFj5rR0=
Subject key identifier: 03:D8:3F:B3:49:9B:CF:95:E0:24:52:3E:11:37:75:B3:12:00:A3:0F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019DA68586E3D5177B08E621325F727137BB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A9g_s0mbz5XgJFI-ETd1sxIAow8.roa
Signing time: Sun 19 Apr 2026 16:14:21 +0000
ROA not before: Sun 19 Apr 2026 16:14:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.15.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:85:86:e3:d5:17:7b:08:e6:21:32:5f:72:71:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 19 16:14:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03d83fb3499bcf95e024523e113775b31200a30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:0b:b4:ef:4b:dd:34:78:30:76:10:a1:52:
b6:07:21:8e:f2:ad:45:02:23:0a:e2:3c:e1:b4:fd:
11:5a:da:7f:dc:d1:15:b3:e9:23:12:67:ce:18:c5:
02:72:c1:98:c1:e8:32:3a:09:0f:e0:3e:9f:ec:9d:
63:9d:11:4a:99:3e:5c:10:09:d0:ae:20:9c:cb:48:
65:31:e4:c3:c6:70:eb:5b:f1:69:d8:41:f7:80:8f:
23:a9:da:31:42:b6:0b:e4:df:6e:86:46:bd:51:05:
a2:7c:52:60:d5:b9:e6:45:9f:ff:5b:45:1d:8f:2a:
23:5f:e5:72:df:ea:f7:73:af:f3:05:13:eb:13:ae:
9f:d4:32:8b:0b:cf:ba:fa:87:d7:35:77:a9:5c:5e:
6c:25:a2:ae:f2:ec:a4:09:6f:eb:e6:f2:f1:50:5d:
00:78:aa:5d:a5:45:f2:cd:56:ee:01:fc:d4:aa:5c:
33:28:64:4c:22:7c:f9:99:67:f0:45:34:d4:69:50:
46:dd:02:14:51:e0:4b:03:80:44:a9:02:27:6b:2e:
56:f6:93:6e:f2:40:0e:4b:e0:4a:22:9d:20:73:9d:
42:a9:21:63:2c:dd:71:94:1a:9f:40:f9:96:bf:c1:
f4:3c:b3:48:e0:8a:36:eb:3c:10:83:85:d5:27:0b:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:3F:B3:49:9B:CF:95:E0:24:52:3E:11:37:75:B3:12:00:A3:0F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A9g_s0mbz5XgJFI-ETd1sxIAow8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.107.0/24
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.15.0/24
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8e:f7:8a:2f:fb:9e:6e:39:61:b8:46:af:e8:b9:0f:4c:da:
2b:d9:0c:84:a0:4c:32:c9:b4:e8:dc:3e:79:7b:4d:86:1d:ce:
58:1b:1e:80:0f:1c:c0:a3:5c:8e:a0:bd:db:da:78:b6:ae:b4:
1d:eb:a4:15:11:76:50:6a:3a:08:0b:d9:b1:a5:ad:f7:0e:a5:
3f:7f:df:a6:63:83:95:be:68:b6:f4:b9:c1:18:be:4f:3e:63:
8c:cd:5b:b0:61:a3:82:eb:56:c4:e5:4d:5a:b4:a5:02:36:8d:
4e:aa:86:26:5e:c7:98:b0:22:b7:d7:6f:8e:d2:c3:b9:72:79:
a0:b1:be:0c:be:4e:ef:b2:58:30:51:72:84:7c:83:17:8e:fd:
6e:d0:22:af:ce:f7:e2:20:68:de:53:36:dc:f4:57:31:a2:e0:
59:fd:75:01:54:23:d4:36:7d:85:f5:13:b9:39:a9:04:5d:0c:
8c:89:cb:99:64:01:63:3d:8f:35:d5:ce:7e:1f:66:a5:2c:dc:
34:03:b4:5f:dd:b7:8b:a3:f6:a3:e0:28:f0:24:c6:81:fa:42:
a5:dc:86:67:f9:bc:8e:62:d2:00:b9:1f:01:09:a3:d2:29:aa:
3b:1a:c7:6f:ec:ee:31:6a:17:94:69:91:a0:e6:b7:13:0a:2e:
c1:42:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:14 2026 by rpki-client