Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WDg6n88aJlaQ4IyQlGM9wAJ4sUo.roa
File: WDg6n88aJlaQ4IyQlGM9wAJ4sUo.roa (raw, json)
Hash identifier: PwsNwjwauqk1aWc/q85XS0JTr5WeEWXId1oC/WPj2Dc=
Subject key identifier: 58:38:3A:9F:CF:1A:26:56:90:E0:8C:90:94:63:3D:C0:02:78:B1:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A18C9AC55DABA79F0DCDA03D6D07C1864C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WDg6n88aJlaQ4IyQlGM9wAJ4sUo.roa
Signing time: Fri 30 Oct 2026 11:38:35 +0000
ROA not before: Fri 30 Oct 2026 11:38:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 31.56.0.0/24 maxlen: 24
31.56.11.0/24 maxlen: 24
31.58.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:9a:c5:5d:ab:a7:9f:0d:cd:a0:3d:6d:07:c1:86:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 11:38:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58383a9fcf1a265690e08c9094633dc00278b14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:71:90:3e:80:5d:1c:d8:a8:59:6b:42:b2:
36:ea:c3:20:ea:23:3f:05:9d:ab:a0:2b:fb:d1:7c:
10:c5:ae:4b:69:24:ee:d7:1f:ab:60:c7:17:85:22:
3c:3f:e4:53:9e:97:12:4b:aa:bf:d3:1a:45:84:47:
92:37:b8:65:34:75:f1:15:25:8f:9e:8b:07:4b:6a:
28:23:cd:ab:85:95:53:26:8e:a8:ac:54:4d:28:3a:
81:54:c7:97:9d:55:15:ad:e3:0d:bf:7f:02:27:03:
09:6e:da:16:b6:f0:f1:85:07:91:68:8d:9a:f1:e5:
0f:26:7a:41:fc:cf:c5:60:86:34:ea:58:44:bd:15:
ec:64:f8:87:76:8a:94:83:da:51:1b:62:d4:ab:d8:
5b:58:90:0d:81:07:d1:12:ce:cf:25:b8:a8:9e:8b:
28:9d:d8:9a:d9:39:07:02:5e:aa:06:44:4b:9e:ed:
bf:ed:86:ff:1a:4b:85:75:99:3b:db:c3:f5:13:d9:
fc:b7:ea:e5:24:ea:f7:ae:fd:3a:87:0b:98:00:bf:
06:54:b2:b6:55:7f:65:f8:99:94:f2:b2:7b:c7:eb:
34:92:55:23:44:ed:db:0c:6a:51:24:28:2e:9a:95:
fa:51:6a:33:fd:43:79:3f:18:7e:d9:d7:9a:a9:9c:
95:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:38:3A:9F:CF:1A:26:56:90:E0:8C:90:94:63:3D:C0:02:78:B1:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WDg6n88aJlaQ4IyQlGM9wAJ4sUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/24
31.56.11.0/24
31.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:12:97:8e:45:86:e7:5e:61:12:c4:bd:b9:fd:9b:fe:0d:b2:
ec:f7:92:32:31:71:32:3d:a0:f7:01:88:ff:6b:bc:56:49:aa:
b3:fa:cb:45:3d:03:0f:1b:2d:b8:76:f6:ab:b2:da:50:1b:d0:
7e:6d:1d:80:ef:11:70:e0:50:e6:ee:c6:76:f4:00:d2:b2:f9:
3e:dd:e4:44:0e:28:6b:b2:07:56:ff:21:ee:98:41:d1:14:7e:
fe:e2:33:d2:51:30:f7:5a:56:58:bb:e2:55:9a:94:ff:f3:a5:
5c:d5:c3:26:30:e0:08:ef:62:6a:03:7b:33:ea:ae:8e:17:95:
bc:2c:5d:aa:33:c1:23:b5:95:ad:85:af:6f:f9:d3:09:ed:4a:
e6:1b:85:36:8a:f4:61:4c:fa:3d:e0:e4:0d:04:c8:5d:4b:e7:
f7:09:3f:e7:4e:5f:57:96:5b:58:c2:15:d4:9b:b2:1f:1b:83:
00:39:a4:0a:74:1a:1b:f9:e6:78:50:a5:aa:b0:34:f0:39:b9:
68:ab:06:0e:10:b5:a8:aa:16:5a:b9:e2:c7:33:8d:92:ed:8d:
7b:db:98:50:a1:07:2b:8b:fe:2c:10:4e:a3:81:b0:4c:d3:4f:
f8:85:82:7a:53:e5:ff:81:7d:40:3c:9b:d3:36:27:42:51:f7:
bf:73:28:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:37:13 2026 by rpki-client