Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HWVAr9bmmefu-hlY-7Kim2P1bFw.roa
File: HWVAr9bmmefu-hlY-7Kim2P1bFw.roa (raw, json)
Hash identifier: alnLBKWMCWaWtznxFqVn6B6Vzv4SYp8vWN2Nrmb4qjM=
Subject key identifier: 1D:65:40:AF:D6:E6:99:E7:EE:FA:19:58:FB:B2:A2:9B:63:F5:6C:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0CD89658313F106CB87CC5705D70567C1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HWVAr9bmmefu-hlY-7Kim2P1bFw.roa
Signing time: Wed 23 Sep 2026 09:12:08 +0000
ROA not before: Wed 23 Sep 2026 09:12:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.56.16.0/24 maxlen: 24
31.56.18.0/24 maxlen: 24
31.56.54.0/24 maxlen: 24
31.56.188.0/24 maxlen: 24
31.57.16.0/24 maxlen: 24
31.57.17.0/24 maxlen: 24
31.57.18.0/24 maxlen: 24
31.57.19.0/24 maxlen: 24
31.57.20.0/24 maxlen: 24
31.57.21.0/24 maxlen: 24
31.57.22.0/24 maxlen: 24
31.57.23.0/24 maxlen: 24
31.58.92.0/24 maxlen: 24
31.58.93.0/24 maxlen: 24
31.58.176.0/24 maxlen: 24
31.58.177.0/24 maxlen: 24
31.58.218.0/24 maxlen: 24
31.58.240.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.58.242.0/24 maxlen: 24
31.58.243.0/24 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.124.0/24 maxlen: 24
31.59.125.0/24 maxlen: 24
31.59.126.0/24 maxlen: 24
31.59.127.0/24 maxlen: 24
31.59.142.0/24 maxlen: 24
31.59.149.0/24 maxlen: 24
31.59.208.0/24 maxlen: 24
31.59.219.0/24 maxlen: 24
31.59.220.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.223.0/24 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.200.0/24 maxlen: 24
94.183.201.0/24 maxlen: 24
94.183.202.0/24 maxlen: 24
94.183.204.0/24 maxlen: 24
94.183.205.0/24 maxlen: 24
94.183.217.0/24 maxlen: 24
94.183.219.0/24 maxlen: 24
94.183.220.0/22 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.221.0/24 maxlen: 24
94.183.222.0/24 maxlen: 24
94.183.223.0/24 maxlen: 24
94.183.228.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
94.183.253.0/24 maxlen: 24
94.183.255.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.17.0/24 maxlen: 24
217.60.21.0/24 maxlen: 24
217.60.23.0/24 maxlen: 24
217.60.64.0/24 maxlen: 24
217.60.65.0/24 maxlen: 24
217.60.68.0/24 maxlen: 24
217.60.69.0/24 maxlen: 24
217.60.83.0/24 maxlen: 24
217.60.176.0/24 maxlen: 24
217.60.181.0/24 maxlen: 24
217.60.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:89:65:83:13:f1:06:cb:87:cc:57:05:d7:05:67:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 23 09:12:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d6540afd6e699e7eefa1958fbb2a29b63f56c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:7f:71:87:c1:6d:24:e7:e0:cb:8f:b4:06:
0a:b7:03:31:59:9b:52:aa:83:cc:c5:4d:a1:1a:23:
95:42:b1:f3:ab:74:59:aa:c6:9c:0f:67:f0:d8:38:
1e:df:c8:b1:42:c7:e8:1d:0e:d3:e5:8e:73:18:31:
1b:e1:70:7c:d8:a7:b9:75:0f:a0:4f:b8:29:b3:6f:
59:f1:d7:e1:59:ce:0f:7c:39:7f:e9:61:02:7c:18:
d5:ef:d5:73:b8:b8:36:9d:db:73:2d:ae:c4:37:6a:
83:f9:1f:00:d5:24:a7:a2:ed:ba:ca:38:5d:96:75:
53:e0:eb:f8:bb:70:04:d8:1d:30:58:6b:aa:e8:f4:
fd:93:cc:a1:36:ac:6f:72:a3:6f:35:33:da:b8:2f:
aa:49:b2:80:77:0d:7e:c6:77:bb:93:ee:0f:8c:0a:
be:b6:68:ac:76:c0:d6:81:ff:8e:0c:33:f0:13:c0:
c7:e7:c2:44:f0:4c:c9:8b:d2:b9:2e:f3:08:8a:41:
67:99:0f:18:21:c1:07:d1:39:0c:60:b3:06:58:86:
68:e1:7a:11:83:b4:cf:1f:f6:1a:84:e2:59:f8:82:
8b:a7:dd:1d:36:2b:53:5c:65:a5:23:0f:c1:87:ce:
50:6f:c8:7b:3d:56:75:e3:03:9c:d5:e4:70:b7:87:
c9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:65:40:AF:D6:E6:99:E7:EE:FA:19:58:FB:B2:A2:9B:63:F5:6C:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HWVAr9bmmefu-hlY-7Kim2P1bFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/24
31.56.18.0/24
31.56.54.0/24
31.56.188.0/24
31.57.16.0/21
31.58.92.0/23
31.58.176.0/23
31.58.218.0/24
31.58.240.0/22
31.59.36.0/24
31.59.124.0/22
31.59.142.0/24
31.59.149.0/24
31.59.208.0/24
31.59.219.0-31.59.221.255
31.59.223.0/24
94.183.152.0/24
94.183.157.0/24
94.183.200.0-94.183.202.255
94.183.204.0/23
94.183.217.0/24
94.183.219.0-94.183.223.255
94.183.228.0/23
94.183.241.0/24
94.183.253.0/24
94.183.255.0/24
217.60.13.0/24
217.60.17.0/24
217.60.21.0/24
217.60.23.0/24
217.60.64.0/23
217.60.68.0/23
217.60.83.0/24
217.60.176.0/24
217.60.181.0/24
217.60.251.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1f:02:b8:ec:fa:03:57:be:b1:ef:b0:f0:31:01:fb:a6:f2:
00:35:50:01:2a:91:03:11:de:70:24:a5:3e:da:e0:a8:f8:3d:
03:91:62:3b:40:61:9b:ab:e6:48:ec:06:09:d6:66:f2:f3:a9:
07:38:e0:8b:df:58:1c:7e:7d:b6:38:fe:a0:d9:af:24:86:67:
68:57:a4:04:4f:d1:81:38:68:11:7d:55:bc:a8:7f:47:c7:24:
34:88:cf:6b:35:2d:6c:40:fd:1b:30:a2:4e:7c:99:bf:55:f9:
d8:13:f1:ac:0e:c5:10:03:5e:21:81:b7:45:3f:67:40:42:f0:
0e:84:26:14:c5:b6:4c:44:05:e5:2c:ef:3d:62:64:b8:4f:b4:
41:bb:57:37:e4:f0:ce:ef:21:21:81:4c:01:9b:b2:0d:dc:8e:
94:23:6e:6f:af:47:5e:ed:5b:9f:4a:a6:ab:3e:17:98:e4:23:
c2:c6:b8:a3:de:3d:9d:43:1f:8e:a0:74:5a:7d:e5:bb:e3:f3:
8c:c4:e5:03:af:ac:8a:06:44:9b:33:fd:72:de:6d:9e:dc:06:
07:77:fe:6b:6a:b2:50:ef:f7:53:cd:aa:c4:4f:72:a5:e4:30:
d9:04:3d:02:02:b1:09:cf:e3:7f:cc:f1:01:2c:92:24:8c:25:
d5:49:f7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:40 2026 by rpki-client