Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WorTo4XBjPVvlButJ1V5cHLvJfI.roa
File: WorTo4XBjPVvlButJ1V5cHLvJfI.roa (raw, json)
Hash identifier: 4dBCtjjOHM9T42Wp1RVQ2c7TRmZ66vNgQvK5ly9cmeM=
Subject key identifier: 5A:8A:D3:A3:85:C1:8C:F5:6F:94:1B:AD:27:55:79:70:72:EF:25:F2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BFA2BDC1FCBBA5EB1FD7E2B75AF5F733
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WorTo4XBjPVvlButJ1V5cHLvJfI.roa
Signing time: Sun 20 Sep 2026 16:25:08 +0000
ROA not before: Sun 20 Sep 2026 16:25:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 31.56.80.0/24 maxlen: 24
31.56.238.0/24 maxlen: 24
31.57.213.0/24 maxlen: 24
31.58.49.0/24 maxlen: 24
31.58.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:a2:bd:c1:fc:bb:a5:eb:1f:d7:e2:b7:5a:f5:f7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 20 16:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a8ad3a385c18cf56f941bad2755797072ef25f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:a8:27:01:10:6c:ac:48:ab:0c:a7:13:03:
b9:e9:1f:fb:49:7f:86:48:36:c8:05:e7:38:04:de:
46:b5:66:39:7f:02:25:68:af:d6:8e:fb:f2:aa:c1:
e5:28:ce:ad:c4:7b:76:61:39:2e:96:20:dc:23:28:
4e:6f:34:78:56:88:83:c2:e3:3f:9c:07:f4:b9:8c:
00:e9:65:92:37:ac:02:9d:54:4c:f3:1d:35:c5:a8:
14:71:7a:47:5c:bf:85:1a:b1:b2:d4:05:15:16:e7:
c8:dd:ae:f8:4f:37:ad:54:07:b5:a9:24:d9:f9:75:
ab:4a:8c:ac:0c:2d:89:c1:34:ae:f4:db:af:83:9f:
49:50:06:4c:e6:e8:7c:b2:bc:27:9f:61:fc:d1:4d:
c5:8a:f8:c2:60:11:b4:c9:47:37:6b:3a:69:b0:92:
d0:0e:51:e2:69:35:2e:fd:16:b6:76:a7:a6:98:45:
55:5a:03:08:f9:3f:dd:1f:cb:14:d0:83:9a:0e:45:
73:ef:66:2c:a9:05:74:a1:8b:03:fc:82:a7:c5:44:
56:b4:38:43:15:45:d9:95:63:99:3a:a4:b0:00:15:
fc:35:9e:e9:51:43:ea:49:cd:1e:21:6e:b9:95:d6:
5a:97:5d:97:f4:b2:51:0c:43:b8:6b:e1:ab:8f:cf:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:D3:A3:85:C1:8C:F5:6F:94:1B:AD:27:55:79:70:72:EF:25:F2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/WorTo4XBjPVvlButJ1V5cHLvJfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.80.0/24
31.56.238.0/24
31.57.213.0/24
31.58.49.0/24
31.58.212.0/24
Signature Algorithm: sha256WithRSAEncryption
92:16:30:63:c8:63:e9:8d:c1:91:ba:bd:3a:77:a9:85:5d:aa:
eb:40:82:32:f6:25:5c:56:c9:71:41:56:d6:39:0e:63:40:80:
cb:68:7c:00:89:1e:9b:39:64:36:27:63:03:40:40:6d:d1:27:
4f:6e:1f:51:5a:d9:56:99:68:19:28:6d:87:65:42:8d:a9:5c:
3d:88:bb:6e:20:82:5c:ee:93:28:63:4a:bc:0a:97:5d:4d:db:
17:ab:74:05:5b:55:f9:9c:de:b8:05:00:b0:90:b4:8e:65:e0:
09:8d:61:e4:3b:ec:1f:20:46:80:71:71:69:d8:40:62:8c:45:
e0:55:92:10:b0:8a:91:6a:e4:27:cf:04:21:dc:a5:61:57:39:
d3:6b:70:5d:7b:00:80:5a:e8:86:19:a3:50:91:39:7d:20:fe:
01:31:40:9b:0a:1b:49:df:bc:08:51:5f:9e:b3:cb:bd:eb:8d:
c8:09:f2:9e:a7:09:9a:d8:44:04:45:28:6b:1d:5d:3f:d9:59:
b0:09:e3:a5:0e:c1:7a:19:11:67:33:84:96:b3:59:9b:52:5c:
54:bb:85:4d:5c:dd:34:ae:f2:ba:ca:d5:4c:0c:4c:51:98:54:
93:db:05:fd:9c:4c:73:95:d6:d4:df:c7:27:59:45:8c:74:62:
a0:7d:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:14:18 2026 by rpki-client