Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JaQ8rMSLociN2zYNA854rbmawP8.roa
File: JaQ8rMSLociN2zYNA854rbmawP8.roa (raw, json)
Hash identifier: oxCJZvbp7Jcl6BttzLc5JX6hH88AeEPWzp0l2UeHiVw=
Subject key identifier: 25:A4:3C:AC:C4:8B:A1:C8:8D:DB:36:0D:03:CE:78:AD:B9:9A:C0:FF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BFA2BD76D53390523BBEA87388C87B70
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JaQ8rMSLociN2zYNA854rbmawP8.roa
Signing time: Sun 20 Sep 2026 16:25:08 +0000
ROA not before: Sun 20 Sep 2026 16:25:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
2a14:6e40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:a2:bd:76:d5:33:90:52:3b:be:a8:73:88:c8:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 20 16:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25a43cacc48ba1c88ddb360d03ce78adb99ac0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:9a:3d:d3:c6:d2:72:93:39:b8:cd:55:53:
0d:39:97:be:ba:60:d3:e4:f3:af:5e:fc:24:4f:4e:
14:39:d6:9a:08:f5:c6:47:22:c4:60:18:f2:b2:83:
d4:f5:0b:6a:0c:5f:9f:d8:1a:f8:ec:f7:be:7f:0f:
69:a3:95:5b:d8:be:67:e4:d5:d6:59:92:56:36:61:
b9:50:a9:2e:8d:23:37:79:2a:3e:01:74:17:22:bb:
a6:9c:c2:4c:5e:51:0d:62:5d:d5:88:28:e8:79:2d:
10:94:5e:cb:08:34:ac:4a:0d:90:26:05:8f:2c:92:
0d:c0:ed:90:34:87:9d:c2:4a:7b:40:dd:f0:2a:1d:
ab:6f:1d:3c:a2:6f:1d:de:4e:ba:40:57:da:6c:22:
e9:7e:fa:82:37:f9:df:53:a9:f3:4d:af:d4:cc:fe:
db:14:cb:d0:9d:9a:75:ad:f6:4c:eb:85:4f:c2:3a:
64:4f:66:44:b3:3b:aa:86:13:b4:cb:49:30:df:6f:
d4:16:0c:47:a2:98:1c:ca:23:0b:f2:60:ac:0b:ec:
35:94:63:de:d9:f9:7d:1c:d1:86:66:99:12:27:23:
32:b7:0b:ca:fc:20:7d:94:2e:7a:f1:c7:4d:ef:92:
f9:1d:71:7f:92:19:5a:5e:a2:76:66:9e:e9:e9:05:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:3C:AC:C4:8B:A1:C8:8D:DB:36:0D:03:CE:78:AD:B9:9A:C0:FF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JaQ8rMSLociN2zYNA854rbmawP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.35.0/24
31.56.107.0/24
31.56.126.0/24
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
IPv6:
2a14:6e40:2::/48
Signature Algorithm: sha256WithRSAEncryption
35:e2:44:9f:80:6e:54:92:20:02:33:a9:1d:6c:5e:f9:52:a7:
23:b4:24:99:ed:1f:d1:30:f8:b3:1d:68:5d:be:be:8b:85:d7:
d9:05:48:05:ec:2d:ea:00:12:47:ed:18:f8:ed:9b:12:f6:03:
34:35:89:4d:b5:d7:39:90:bd:3c:a9:4a:03:53:30:f8:81:b3:
b4:19:ae:35:e8:89:ab:9a:64:fa:72:52:e9:1a:94:05:07:f0:
4a:5f:0d:d8:4d:8e:6f:3b:1a:a3:45:c4:42:2f:1f:a9:ba:6a:
d8:6d:2b:6c:e7:a8:3b:a1:91:92:ed:61:41:f9:b6:8a:97:86:
0c:ea:14:ec:5d:f6:a0:52:e4:27:02:34:4f:7b:f0:db:1b:de:
d9:2f:a4:60:d2:41:63:ba:45:96:12:f0:4c:36:90:35:3b:07:
cb:58:48:b8:8e:08:a9:84:e1:9a:89:e5:c3:b1:b6:2e:06:d4:
77:97:82:91:b5:7a:4d:ae:fb:74:d9:0b:3a:48:b1:ac:74:a5:
f4:c1:18:63:c2:5b:f6:4f:a3:17:b3:5e:86:ad:15:04:0f:85:
df:1d:52:82:32:5a:fd:d6:fc:0f:7b:b4:29:80:16:eb:46:29:
0b:52:b6:80:41:54:d4:cc:19:49:97:88:f4:44:c9:e0:69:7e:
6f:5f:4d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:58 2026 by rpki-client