Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/brqz7sCcAO4YxQbjjpVLoxlrVZA.roa
File: brqz7sCcAO4YxQbjjpVLoxlrVZA.roa (raw, json)
Hash identifier: jAuQNrXrPKqPOXIM8OwfdWdiCQmNyHqKx6AoxVEVuAQ=
Subject key identifier: 6E:BA:B3:EE:C0:9C:00:EE:18:C5:06:E3:8E:95:4B:A3:19:6B:55:90
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1B2D29B73852F89E440330E872BEE759A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/brqz7sCcAO4YxQbjjpVLoxlrVZA.roa
Signing time: Fri 06 Nov 2026 21:45:08 +0000
ROA not before: Fri 06 Nov 2026 21:45:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219506
IP address blocks: 31.57.210.0/24 maxlen: 24
31.58.241.0/24 maxlen: 24
31.59.156.0/24 maxlen: 24
31.59.157.0/24 maxlen: 24
31.59.158.0/24 maxlen: 24
31.59.159.0/24 maxlen: 24
31.59.188.0/24 maxlen: 24
31.59.190.0/24 maxlen: 24
31.59.191.0/24 maxlen: 24
31.59.209.0/24 maxlen: 24
31.59.210.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
94.183.167.0/24 maxlen: 24
94.183.206.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
217.60.27.0/24 maxlen: 24
217.60.30.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
217.60.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b2:d2:9b:73:85:2f:89:e4:40:33:0e:87:2b:ee:75:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 6 21:45:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ebab3eec09c00ee18c506e38e954ba3196b5590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:fa:46:f8:24:b9:89:8d:88:74:8d:7b:77:
a9:ce:71:47:83:ad:5e:3f:ef:34:11:fc:c9:30:06:
e1:ca:90:92:4f:2b:9f:1a:4e:09:aa:92:bc:1b:f9:
3e:9e:fb:8b:ac:86:89:67:98:84:8a:f9:75:6b:c0:
75:d0:48:51:7e:01:85:27:e1:7d:da:e6:ca:5c:f4:
9d:ef:12:b1:c0:85:64:4a:c1:43:f2:a5:aa:5d:e8:
3e:79:94:8a:5d:2a:87:90:0e:18:7c:39:90:ee:d9:
59:f5:64:e0:1f:c6:34:57:5f:ee:91:69:03:32:35:
bf:5a:57:fe:11:29:85:da:cd:cf:e0:e6:cf:74:82:
15:8a:95:50:2b:f7:21:fa:b0:d9:a3:02:08:3f:11:
af:f4:d1:e6:b8:ec:ab:91:39:af:e5:d5:5d:68:7d:
dc:fb:a9:31:2d:d6:e1:bc:a6:73:fe:88:2a:7d:62:
97:08:f4:ab:e7:f2:a7:13:da:74:12:c2:21:d3:dd:
0e:d9:54:a1:a9:72:f7:ac:15:60:1d:eb:29:d4:18:
95:32:c0:a4:ca:a5:4d:18:74:e3:ee:39:7a:77:d8:
eb:18:72:8c:54:0c:b3:91:fe:96:07:8c:c8:d3:f4:
22:91:6c:78:86:19:d9:1e:19:69:b6:d5:d2:9d:c4:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BA:B3:EE:C0:9C:00:EE:18:C5:06:E3:8E:95:4B:A3:19:6B:55:90
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/brqz7sCcAO4YxQbjjpVLoxlrVZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.210.0/24
31.58.241.0/24
31.59.156.0/22
31.59.188.0/24
31.59.190.0/23
31.59.209.0-31.59.210.255
31.59.222.0/24
94.183.164.0/24
94.183.167.0/24
94.183.206.0/24
94.183.226.0/24
217.60.22.0/24
217.60.27.0/24
217.60.30.0/24
217.60.99.0/24
217.60.236.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:51:7e:06:4b:66:08:f2:d2:de:98:05:f8:85:43:0a:89:91:
e2:02:60:e9:e4:dd:32:79:72:c6:e6:6d:2d:3e:07:9a:34:0f:
7a:e5:7f:d9:bd:e8:3b:3c:db:87:2d:88:c5:f3:72:84:d5:aa:
3b:d5:ee:88:ab:a7:6d:ef:51:83:0f:6a:c9:9c:f4:30:00:e9:
e8:74:61:b4:35:df:ff:13:50:ad:d1:fe:3f:57:cd:b3:cc:8c:
10:ec:d1:f4:88:b3:85:96:8e:09:63:1c:d5:2e:f1:cf:b6:d8:
b6:22:05:1b:f7:f0:a0:fd:00:3f:6d:c6:9e:7d:62:e5:b5:02:
3e:4c:8e:ce:97:44:a6:32:4a:18:ee:37:ed:cb:13:ff:39:65:
48:e2:63:22:50:82:a8:87:e1:f9:3a:d9:ea:b7:e2:39:2a:1d:
9d:ed:1e:3f:ae:21:b1:79:51:b6:42:47:65:19:c1:08:52:d0:
92:92:14:46:ef:f3:66:3c:ed:5c:4c:54:ca:43:4d:bd:3e:3c:
88:8e:9f:31:71:6a:e4:df:28:2d:3c:c6:2d:f0:96:e0:98:3c:
53:e5:ed:12:e1:cd:00:26:9a:90:82:35:e5:bc:a3:ae:97:fb:
a1:d2:99:15:28:56:0a:92:cc:d5:cb:eb:ba:43:66:04:f3:af:
b9:7a:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:58 2026 by rpki-client