Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ga2i3Q_eJy-5YHPDvNSEGNvlA3g.roa
File: Ga2i3Q_eJy-5YHPDvNSEGNvlA3g.roa (raw, json)
Hash identifier: mI6w3TKF62nDc0uP7LEQbaOVTIa61wJXJ62vTQO1fUM=
Subject key identifier: 19:AD:A2:DD:0F:DE:27:2F:B9:60:73:C3:BC:D4:84:18:DB:E5:03:78
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A18968D50B4BD36565A1C3406F14BA79F1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ga2i3Q_eJy-5YHPDvNSEGNvlA3g.roa
Signing time: Thu 29 Oct 2026 20:45:11 +0000
ROA not before: Thu 29 Oct 2026 20:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.34.0/24 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:68:d5:0b:4b:d3:65:65:a1:c3:40:6f:14:ba:79:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 20:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19ada2dd0fde272fb96073c3bcd48418dbe50378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:38:22:62:8c:e8:e5:98:49:04:dd:bf:c8:
4e:ac:d5:c8:9e:3f:4a:e5:3f:4a:00:06:b2:34:b4:
dd:e3:91:70:b4:34:f4:62:1a:8d:e2:6a:b6:71:89:
3d:51:77:2d:af:89:f9:2e:55:c2:22:86:d5:0e:41:
0e:a1:f0:01:00:37:96:7e:c5:2a:55:93:3a:85:bf:
07:54:d5:31:e8:cd:0c:3c:2f:e7:9b:05:c2:68:66:
f5:27:98:46:0c:3a:80:c2:e4:f6:d2:11:01:89:43:
cf:b5:1f:e6:98:5c:8f:35:28:a7:03:91:a7:43:3d:
50:56:8d:ed:5c:9f:09:59:45:47:3f:fb:b6:d6:93:
19:6e:13:6d:a7:c5:8c:67:22:84:2f:ae:8c:1b:16:
3b:c6:4d:17:45:4e:61:3c:5c:02:0e:bb:47:6e:0a:
ee:95:7d:13:d2:ca:29:0d:aa:65:c0:e1:af:25:30:
f6:fd:34:30:48:a1:75:50:f4:50:da:7a:62:ae:ba:
b3:bd:ed:6d:ee:80:43:3f:14:d1:c2:ae:7b:92:7f:
f2:33:3b:b1:88:9c:d5:ba:56:2b:57:0d:d3:0b:11:
88:bc:c6:34:8d:bd:60:39:9b:94:d8:fe:13:18:10:
91:fb:eb:3d:0f:3a:f0:02:14:7e:f0:0a:f6:69:08:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AD:A2:DD:0F:DE:27:2F:B9:60:73:C3:BC:D4:84:18:DB:E5:03:78
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Ga2i3Q_eJy-5YHPDvNSEGNvlA3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.34.0/23
31.56.107.0/24
31.56.126.0/24
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
46:0b:53:41:f7:18:db:be:1c:8c:e6:4d:35:60:68:03:2d:90:
55:bb:07:19:b0:84:57:50:4a:db:ed:c3:05:18:11:e1:d1:1c:
d1:a9:d0:f0:df:1e:0b:40:77:25:53:8d:bb:6a:38:f1:de:71:
0d:86:30:83:cd:55:78:3c:58:81:a4:ba:9d:ac:fe:80:c8:7d:
13:9f:69:9a:13:21:16:e4:2b:a7:2e:11:1f:e5:ad:9a:bf:bd:
c1:1b:c2:d2:10:cd:4b:3d:6c:88:49:25:ca:c7:3e:a1:ee:54:
32:ae:fd:eb:55:1f:ad:0a:f0:73:b5:74:aa:66:28:2a:db:e2:
7c:13:5b:70:3d:02:eb:a6:ad:9b:d0:0b:61:33:e8:9c:78:9a:
22:ad:af:9e:db:d8:1a:07:68:4d:be:eb:b4:9f:87:6a:05:b4:
71:39:3d:1c:f3:ce:96:f6:28:7d:72:2f:9f:c3:0f:5e:c6:58:
2e:b2:fa:a9:ba:10:f1:f0:51:c4:31:a3:77:90:d1:95:aa:49:
20:27:2e:37:04:af:13:87:25:c2:b2:c9:ef:b8:89:cf:ea:c1:
57:c9:ad:bf:42:31:b8:01:5d:83:62:f2:cc:fd:bd:5e:e6:42:
ae:cb:50:b5:7a:f2:0d:2b:dd:37:8a:3a:5e:c3:4f:f9:a1:9a:
fa:ec:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:56:34 2026 by rpki-client