Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cVOPf7ZVFbtWZqd9uJkBPeEUFds.roa
File: cVOPf7ZVFbtWZqd9uJkBPeEUFds.roa (raw, json)
Hash identifier: u7lf/6BCqNVgUO4yKWNBsfUmpqNSbiXY2GgqE8UKf+Q=
Subject key identifier: 71:53:8F:7F:B6:55:15:BB:56:66:A7:7D:B8:99:01:3D:E1:14:15:DB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1DE31E52FA3B3D4CEBE5FA2991FB92262
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cVOPf7ZVFbtWZqd9uJkBPeEUFds.roa
Signing time: Sun 15 Nov 2026 07:52:54 +0000
ROA not before: Sun 15 Nov 2026 07:52:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 31.56.151.0/24 maxlen: 24
31.56.161.0/24 maxlen: 24
31.56.162.0/24 maxlen: 24
31.56.167.0/24 maxlen: 24
31.57.146.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:31:e5:2f:a3:b3:d4:ce:be:5f:a2:99:1f:b9:22:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 07:52:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71538f7fb65515bb5666a77db899013de11415db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:56:a6:0d:48:e1:b8:b5:d6:65:3d:d0:02:13:
81:3e:72:d9:1c:89:36:e2:1c:5c:6e:ec:a5:e2:7a:
7a:cd:f8:2f:13:43:8e:b9:9d:4a:fd:d6:65:77:ec:
d5:d3:b4:97:b7:8c:6b:8a:b6:b8:0b:17:b6:ff:fc:
86:99:45:43:8c:70:56:05:88:bf:c8:09:1c:5b:ab:
26:5b:9e:b4:a8:42:66:e0:b4:12:bb:be:d3:9d:71:
56:c6:82:21:b3:ca:3e:20:84:8a:64:a4:60:67:54:
ca:e5:87:d5:6f:04:5d:4b:d3:83:8f:85:bc:79:7f:
ef:12:65:f1:2d:d1:fb:da:fb:61:a7:85:ef:d2:ef:
28:cc:f2:26:aa:e8:bc:41:96:d2:76:e9:56:8d:d7:
15:38:8d:02:ec:ac:b0:b1:ef:8e:88:87:45:c4:31:
94:51:8c:aa:c0:f5:ae:5f:b7:73:4b:78:37:31:ce:
59:5d:ef:cd:83:02:57:e7:41:c6:72:39:01:fd:3e:
4d:44:86:02:bc:6a:4a:05:0c:78:c0:4b:08:2b:9d:
6e:4c:aa:b2:4e:d4:4b:f1:a0:59:a0:30:fb:93:bb:
db:6e:ea:21:b5:fd:b5:73:e6:4b:c0:55:fa:a7:e7:
f5:48:b7:43:7e:19:84:c2:85:3c:5c:e2:f9:c9:35:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:53:8F:7F:B6:55:15:BB:56:66:A7:7D:B8:99:01:3D:E1:14:15:DB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cVOPf7ZVFbtWZqd9uJkBPeEUFds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.151.0/24
31.56.161.0-31.56.162.255
31.56.167.0/24
31.57.146.0/24
31.59.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:eb:a3:7a:28:29:10:fd:af:85:b4:37:7b:fa:b3:91:6e:1c:
ab:ea:9c:71:44:81:fa:04:e5:d9:c4:ad:ce:42:79:99:2a:29:
7f:c5:34:8d:11:bb:98:69:a8:28:19:c7:f0:89:c5:ba:89:2e:
9b:e9:81:02:d8:b0:e8:28:79:5f:cc:49:f9:7f:20:ea:26:64:
63:f7:71:b3:51:cb:5f:55:d3:44:10:64:a2:9d:44:9c:ae:c2:
79:e3:9e:cf:a1:66:d0:24:21:2a:47:7d:ac:63:bc:17:5c:f8:
c1:26:36:94:39:aa:58:bf:ad:ca:76:47:9b:3b:87:3e:ef:f0:
ab:4f:31:29:c8:27:7f:ec:17:63:18:20:d2:23:2f:1b:da:91:
e2:ed:ad:e0:86:03:5f:d0:4b:6a:e4:2e:ac:f4:3f:9d:7e:e4:
b2:1b:fd:46:ff:bf:cd:0c:e5:b4:5f:c1:4b:64:e6:bd:4d:b9:
28:a6:31:1e:77:94:c0:e6:c8:42:82:42:2c:6c:90:cf:c0:27:
e3:f4:f7:99:6c:b2:f5:9e:57:15:58:5e:63:e3:10:ba:47:0c:
45:81:f7:85:d4:77:32:c2:6c:1a:8e:e5:08:55:fd:f9:8a:ec:
af:a1:01:ee:78:ec:d1:5a:d2:09:6d:4e:a8:f1:b3:c0:e0:8e:
4a:2a:b1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:53:49 2026 by rpki-client