Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dYe7fZYO5z6Xvg1UkJ47SPFVPjY.roa
File: dYe7fZYO5z6Xvg1UkJ47SPFVPjY.roa (raw, json)
Hash identifier: SpFoGLcmWWCjNDn47WYihct52AeVyrJQPus7WIk1A4o=
Subject key identifier: 75:87:BB:7D:96:0E:E7:3E:97:BE:0D:54:90:9E:3B:48:F1:55:3E:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0C9042B1E4151822A34786EA03FAAD481
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dYe7fZYO5z6Xvg1UkJ47SPFVPjY.roa
Signing time: Tue 22 Sep 2026 12:08:08 +0000
ROA not before: Tue 22 Sep 2026 12:08:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.17.0/24 maxlen: 24
31.56.182.0/24 maxlen: 24
31.56.183.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.178.0/24 maxlen: 24
31.58.180.0/24 maxlen: 24
31.58.192.0/20 maxlen: 24
31.58.217.0/24 maxlen: 24
31.58.219.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.252.0/22 maxlen: 24
31.59.80.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.161.0/24 maxlen: 24
31.59.162.0/24 maxlen: 24
31.59.188.0/22 maxlen: 24
31.59.192.0/22 maxlen: 24
31.59.216.0/24 maxlen: 24
31.59.217.0/24 maxlen: 24
31.59.218.0/24 maxlen: 24
31.59.221.0/24 maxlen: 24
31.59.222.0/24 maxlen: 24
94.183.164.0/24 maxlen: 24
94.183.179.0/24 maxlen: 24
94.183.194.0/24 maxlen: 24
217.60.16.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.66.0/24 maxlen: 24
217.60.80.0/24 maxlen: 24
217.60.81.0/24 maxlen: 24
217.60.82.0/24 maxlen: 24
217.60.108.0/22 maxlen: 24
217.60.112.0/22 maxlen: 24
217.60.128.0/22 maxlen: 24
217.60.132.0/22 maxlen: 24
217.60.136.0/22 maxlen: 24
217.60.140.0/22 maxlen: 24
217.60.144.0/22 maxlen: 24
217.60.148.0/22 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:04:2b:1e:41:51:82:2a:34:78:6e:a0:3f:aa:d4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 22 12:08:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7587bb7d960ee73e97be0d54909e3b48f1553e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:26:2d:d1:7c:a7:43:eb:f8:ec:7c:7d:13:
58:aa:13:31:f3:17:b5:b8:36:c4:ba:74:5b:e2:40:
89:d9:e5:6e:36:42:d7:e3:4a:65:89:f3:04:1c:80:
9e:7c:c6:35:a2:47:39:a1:85:1b:16:8e:44:ab:75:
ed:f2:36:93:1a:3a:b6:34:c1:c0:6a:cc:d0:57:c4:
c9:11:55:40:11:a6:26:4e:c0:e7:1a:f9:da:15:76:
3f:8b:e2:31:7a:c4:19:85:ab:36:52:3c:2e:d8:c6:
bd:dd:d0:54:19:4e:42:21:b7:fd:df:d5:64:c8:8d:
4a:19:3a:a7:25:1b:e4:ba:1d:41:29:cc:85:37:0c:
80:9b:84:55:96:c1:62:a0:5f:34:6d:de:81:a0:70:
bc:b9:13:ba:b8:59:ee:4e:8e:93:09:5a:5a:cb:f3:
fb:3d:d5:4b:8e:20:36:e5:ec:a9:b1:38:99:a4:01:
78:ce:60:49:85:ef:26:9e:c6:b2:ef:86:59:62:46:
3e:50:6f:92:dc:6c:f2:d2:f5:ff:f4:a9:72:2e:35:
53:2f:3e:fc:64:4d:28:01:f7:91:0b:16:fe:19:ba:
04:77:93:cd:cf:ac:a7:86:1c:39:11:76:b7:b0:3a:
64:25:3f:11:3b:de:fe:fd:b7:83:a3:3d:51:e5:72:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:87:BB:7D:96:0E:E7:3E:97:BE:0D:54:90:9E:3B:48:F1:55:3E:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dYe7fZYO5z6Xvg1UkJ47SPFVPjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.17.0/24
31.56.182.0/23
31.57.200.0/24
31.58.178.0/24
31.58.180.0/24
31.58.192.0/20
31.58.217.0/24
31.58.219.0/24
31.58.249.0/24
31.58.252.0/22
31.59.80.0/21
31.59.90.0/23
31.59.152.0/21
31.59.161.0-31.59.162.255
31.59.188.0-31.59.195.255
31.59.216.0-31.59.218.255
31.59.221.0-31.59.222.255
94.183.164.0/24
94.183.179.0/24
94.183.194.0/24
217.60.16.0/24
217.60.18.0-217.60.20.255
217.60.22.0/24
217.60.28.0/22
217.60.52.0-217.60.59.255
217.60.66.0/24
217.60.80.0-217.60.82.255
217.60.108.0-217.60.115.255
217.60.128.0-217.60.151.255
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
3e:a0:1c:f6:a1:f7:ef:31:bb:fd:91:44:11:cb:c0:ce:66:fe:
0a:86:38:d7:53:c8:38:99:5c:95:d8:8c:3f:eb:0d:a4:40:a6:
35:55:38:03:e5:25:f6:a7:51:9d:4b:eb:80:d6:7c:fa:cf:82:
f6:01:7f:6e:87:72:dd:0f:0e:95:47:3e:1a:58:65:cb:fd:37:
f7:6f:4a:d1:b5:b5:a1:de:2a:6c:df:bc:41:20:5e:25:94:be:
0d:e2:ca:b0:b2:11:82:e5:77:74:20:76:2c:84:4b:50:11:8e:
28:67:79:97:05:53:84:6c:58:0a:cd:e6:53:25:a2:12:64:33:
39:b1:29:15:f9:9a:9a:36:87:a2:37:b3:0f:e4:98:cd:77:00:
15:01:86:fb:94:4b:81:e0:8f:ff:99:da:d1:b3:25:6e:29:4a:
65:7d:6d:ce:bb:26:58:71:59:dc:9e:29:dd:85:07:48:10:bd:
7f:f1:79:d5:38:93:75:59:a6:40:81:83:71:72:03:a1:cd:ab:
af:46:28:73:93:dd:e9:96:cc:f9:74:51:0f:14:4e:55:47:cc:
f5:b2:ea:9f:5d:45:12:2a:c4:46:3e:e3:82:10:76:a1:52:96:
d6:53:2e:fa:02:6c:09:30:69:2c:3c:8f:66:46:4d:3c:0e:4a:
28:15:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:03 2026 by rpki-client