Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hu24F5Dc2pbT6ImyxneCEoM05Sw.roa
File: Hu24F5Dc2pbT6ImyxneCEoM05Sw.roa (raw, json)
Hash identifier: SE6+CU5Y6KNFTEelZngD847KHSAUozKR0gxYxsK+scc=
Subject key identifier: 1E:ED:B8:17:90:DC:DA:96:D3:E8:89:B2:C6:77:82:12:83:34:E5:2C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C22B5C92583924068EE64F76B0C0D8C4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hu24F5Dc2pbT6ImyxneCEoM05Sw.roa
Signing time: Mon 09 Nov 2026 21:16:24 +0000
ROA not before: Mon 09 Nov 2026 21:16:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218565
IP address blocks: 31.56.16.0/24 maxlen: 24
31.57.211.0/24 maxlen: 24
31.58.212.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
217.60.56.0/24 maxlen: 24
217.60.57.0/24 maxlen: 24
217.60.58.0/24 maxlen: 24
217.60.59.0/24 maxlen: 24
217.60.80.0/24 maxlen: 24
217.60.81.0/24 maxlen: 24
217.60.82.0/24 maxlen: 24
217.60.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:2b:5c:92:58:39:24:06:8e:e6:4f:76:b0:c0:d8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 9 21:16:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1eedb81790dcda96d3e889b2c67782128334e52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:ee:cd:af:25:0b:19:bb:16:d7:44:d9:8b:
a2:a0:07:cc:d9:0b:96:d1:d4:5f:b8:13:63:2d:03:
13:73:e7:79:62:56:fa:ae:b8:86:d8:b8:77:84:04:
b6:5f:cb:7a:eb:bd:cb:f4:29:e3:9f:40:6a:75:89:
59:37:6a:d9:ce:ef:90:1b:b7:32:e7:81:aa:20:34:
a8:24:91:14:d8:5c:20:68:65:c6:30:82:9b:0c:c3:
22:89:d7:cb:2a:8e:4a:4c:ca:b5:0c:23:1f:25:7c:
67:c4:f3:eb:c9:9f:73:ed:0c:59:ff:19:d5:b1:e0:
02:70:48:46:c2:9c:b0:d3:24:7f:e9:de:5d:37:55:
e9:e1:86:6d:4c:b8:a2:e0:70:70:ca:1c:fc:88:6b:
59:42:9d:66:f9:4a:10:29:be:c7:55:24:bd:57:b3:
e7:d4:27:9a:2c:6f:b0:08:1c:05:80:93:c0:c9:f4:
5f:01:57:6f:65:ce:ad:bf:aa:75:9d:80:07:74:fb:
9d:60:c9:62:fe:a3:69:c9:a2:5e:b3:3b:9a:be:fd:
ab:4b:a4:cd:49:1a:ee:cb:8d:a4:06:e0:6c:ea:48:
46:97:42:70:14:22:45:8a:a0:af:c8:0f:db:41:20:
81:19:9a:a3:36:20:77:23:22:3b:cf:86:72:ab:47:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:ED:B8:17:90:DC:DA:96:D3:E8:89:B2:C6:77:82:12:83:34:E5:2C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hu24F5Dc2pbT6ImyxneCEoM05Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.16.0/24
31.57.211.0/24
31.58.212.0/24
31.59.222.0/24
217.60.56.0/22
217.60.80.0/22
Signature Algorithm: sha256WithRSAEncryption
58:c4:4a:c4:7a:fe:cd:fd:dc:10:91:cd:b1:73:97:f4:6e:7d:
11:d2:fb:30:34:68:5a:e0:a0:e4:3d:fe:d0:8d:ae:fb:25:0e:
7d:f8:19:be:6d:41:9f:2d:8f:5f:0c:b3:37:17:00:ba:91:eb:
ac:49:94:07:4d:17:ab:9d:de:18:8d:6f:53:63:2e:58:e5:d6:
63:a1:51:d9:0d:a2:51:93:6d:fa:0f:f3:20:bf:81:ba:70:40:
c8:50:24:fc:7d:45:b7:23:6d:08:24:e5:31:fc:d6:9c:be:8a:
2f:af:d4:1f:d7:11:9a:56:12:56:28:2f:9d:15:c6:35:75:9f:
c1:c9:a5:6c:ae:df:14:e7:6f:7f:8e:f5:bc:08:51:85:39:4b:
cb:a7:bb:bf:a8:04:36:c1:59:77:ea:72:4d:71:22:42:cf:95:
96:22:8d:13:07:05:98:aa:7e:33:88:db:fc:29:ee:05:f6:ad:
dc:dc:5e:06:9e:47:8a:a3:81:44:2c:98:a8:c9:46:0a:32:a1:
91:4c:ef:12:00:b2:ef:58:42:4b:d7:66:3e:dd:d9:a8:ec:64:
e1:ee:40:c3:11:30:69:e3:b2:72:be:7d:36:df:b6:5e:dc:d6:
7b:ac:f3:ca:d4:00:5b:69:fa:7b:07:c0:82:ca:2f:07:31:d3:
c9:9b:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:55:32 2026 by rpki-client