Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aC6YpOglJev6xMOB4wJm8dcm_3U.roa
File: aC6YpOglJev6xMOB4wJm8dcm_3U.roa (raw, json)
Hash identifier: F0LGYxr18QqPSaMs36bvXVzsKRsiomiB4/OLI6EBpHY=
Subject key identifier: 68:2E:98:A4:E8:25:25:EB:FA:C4:C3:81:E3:02:66:F1:D7:26:FF:75
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1864E988C04D69D70941B65690198C5E3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aC6YpOglJev6xMOB4wJm8dcm_3U.roa
Signing time: Thu 29 Oct 2026 06:17:40 +0000
ROA not before: Thu 29 Oct 2026 06:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 31.56.54.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
94.183.192.0/24 maxlen: 24
94.183.216.0/24 maxlen: 24
94.183.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:4e:98:8c:04:d6:9d:70:94:1b:65:69:01:98:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 29 06:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=682e98a4e82525ebfac4c381e30266f1d726ff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:f2:84:c9:1e:a8:19:8d:27:ce:d9:0c:e3:
19:46:b5:31:67:99:08:70:b8:db:f0:89:88:51:a3:
08:81:48:81:87:20:1d:fb:f5:3f:cb:be:7d:63:40:
2c:47:51:f7:97:17:5f:5f:5f:5a:6b:bd:37:2a:f0:
9c:58:d3:12:4e:18:7d:76:83:02:2b:fe:c8:4c:7f:
ad:56:95:9d:94:86:3a:9c:38:e7:57:7d:17:90:e0:
65:4f:4e:99:35:1d:f2:c5:79:7b:3d:66:dc:1e:42:
f5:3d:ba:af:b4:0e:a4:f8:42:56:e0:b6:4d:86:ff:
3a:54:99:0e:d4:97:e8:ab:81:21:61:81:ab:90:0a:
3b:02:97:b5:cd:87:97:96:99:0c:1f:8e:aa:97:be:
89:00:68:87:c3:20:bd:9d:ee:9b:35:5c:80:8f:04:
57:fd:17:46:18:8e:86:f9:48:70:d8:93:a3:99:ca:
80:d1:18:91:00:c8:c4:8f:ed:a7:41:84:f9:7a:44:
f7:c1:e0:44:12:21:d9:7e:7e:28:63:a4:63:cf:1d:
aa:4d:cf:e4:3b:8a:6c:ce:c3:43:da:e3:d3:82:7b:
37:f4:d7:2d:31:4e:dc:31:f1:18:1e:66:86:f0:c1:
c5:19:d2:69:82:47:f3:d2:05:e2:4f:4c:ea:f6:33:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2E:98:A4:E8:25:25:EB:FA:C4:C3:81:E3:02:66:F1:D7:26:FF:75
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/aC6YpOglJev6xMOB4wJm8dcm_3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.54.0/24
94.183.160.0/24
94.183.192.0/24
94.183.216.0/24
94.183.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:55:40:02:8e:58:0d:76:0f:5e:dd:df:56:ee:68:a5:f8:d8:
49:34:90:fa:c4:b4:24:7e:44:fc:65:cd:eb:95:ef:70:d0:1f:
c9:23:2c:b2:40:11:8f:be:07:52:86:68:9e:10:47:43:ea:3a:
84:5f:c8:f3:8b:48:b5:c2:7e:64:70:db:ad:d2:b5:cf:2c:3f:
74:1f:0d:bf:51:b8:52:4f:c5:47:47:57:e2:9c:65:47:9c:24:
e3:4d:e1:f2:f9:db:d5:4e:58:a8:ca:af:39:75:91:a5:76:d1:
cb:d7:c8:60:d4:a3:5e:6c:05:a7:1e:ec:a6:9f:df:31:fa:4a:
8c:05:08:04:9b:7d:29:01:4c:02:1f:dc:7b:68:51:da:29:22:
84:66:10:0c:bf:1f:fe:04:9e:da:38:a4:93:eb:19:03:89:bc:
7b:66:b1:9e:f6:54:84:01:06:37:8a:4a:c4:0b:53:7b:54:21:
6e:e5:dd:7d:37:b8:7a:c6:20:06:3f:cb:12:29:7b:53:8a:2f:
d0:49:82:0d:5d:fb:54:58:7e:6e:c2:23:09:01:7d:a2:40:f1:
4c:33:f1:30:47:e1:cd:5d:0f:16:cd:3d:ca:f1:48:b5:e7:43:
4e:f4:03:82:d8:c6:33:4a:ae:81:08:0f:c5:0b:92:ba:f8:d1:
01:85:c9:f7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaGGTpiMBNadcJQbZWkBmMXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMDI5MDYxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODJlOThhNGU4MjUyNWViZmFjNGMzODFlMzAyNjZmMWQ3MjZmZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/7yhMkeqBmNJ87ZDOMZRrUxZ5kI
cLjb8ImIUaMIgUiBhyAd+/U/y759Y0AsR1H3lxdfX19aa703KvCcWNMSThh9doMC
K/7ITH+tVpWdlIY6nDjnV30XkOBlT06ZNR3yxXl7PWbcHkL1PbqvtA6k+EJW4LZN
hv86VJkO1Jfoq4EhYYGrkAo7Ape1zYeXlpkMH46ql76JAGiHwyC9ne6bNVyAjwRX
/RdGGI6G+Uhw2JOjmcqA0RiRAMjEj+2nQYT5ekT3weBEEiHZfn4oY6Rjzx2qTc/k
O4pszsND2uPTgns39NctMU7cMfEYHmaG8MHFGdJpgkfz0gXiT0zq9jOJRwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGgumKToJSXr+sTDgeMCZvHXJv91MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYUM2WXBPZ2xKZXY2eE1PQjR3Sm04ZGNtXzNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHzg2AwQA
XregAwQAXrfAAwQAXrfYAwQAXrfaMA0GCSqGSIb3DQEBCwUAA4IBAQAeVUACjlgN
dg9e3d9W7mil+NhJNJD6xLQkfkT8Zc3rle9w0B/JIyyyQBGPvgdShmieEEdD6jqE
X8jzi0i1wn5kcNut0rXPLD90Hw2/UbhST8VHR1finGVHnCTjTeHy+dvVTlioyq85
dZGldtHL18hg1KNebAWnHuymn98x+kqMBQgEm30pAUwCH9x7aFHaKSKEZhAMvx/+
BJ7aOKST6xkDibx7ZrGe9lSEAQY3ikrEC1N7VCFu5d19N7h6xiAGP8sSKXtTii/Q
SYINXftUWH5uwiMJAX2iQPFMM/EwR+HNXQ8WzT3K8Ui150NO9AOC2MYzSq6BCA/F
C5K6+NEBhcn3
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:24:41 2026 by rpki-client