Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h_dywyEpVL5_qbjCPtzpQMrdhks.roa
File: h_dywyEpVL5_qbjCPtzpQMrdhks.roa (raw, json)
Hash identifier: yi0uMIdIzhQzWuiy17lHc1CFEVdVu9X1pXMB2btJb9w=
Subject key identifier: 87:F7:72:C3:21:29:54:BE:7F:A9:B8:C2:3E:DC:E9:40:CA:DD:86:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1CB856AAD56733C5611D6105EDBB076F8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h_dywyEpVL5_qbjCPtzpQMrdhks.roa
Signing time: Wed 11 Nov 2026 16:51:20 +0000
ROA not before: Wed 11 Nov 2026 16:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.98.0/24 maxlen: 24
31.56.102.0/24 maxlen: 24
31.56.103.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.98.0/24 maxlen: 24
31.57.121.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.57.225.0/24 maxlen: 24
31.57.241.0/24 maxlen: 24
31.58.17.0/24 maxlen: 24
31.58.31.0/24 maxlen: 24
31.58.47.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.58.186.0/24 maxlen: 24
31.59.23.0/24 maxlen: 24
31.59.31.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
31.59.181.0/24 maxlen: 24
31.59.189.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:85:6a:ad:56:73:3c:56:11:d6:10:5e:db:b0:76:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 11 16:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87f772c3212954be7fa9b8c23edce940cadd864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0f:66:0c:f0:72:c2:cf:eb:f6:45:54:15:80:
3b:84:9a:36:bd:48:31:a2:e5:27:1c:15:ff:77:73:
09:56:a0:b2:07:eb:e3:8c:f2:99:93:74:bc:75:48:
2d:a6:16:c7:d6:e6:ca:1a:3b:12:2e:02:54:56:1e:
ac:4b:2e:48:e6:12:cc:56:ff:fb:6e:92:09:3b:ce:
06:97:97:fa:8d:b3:47:c5:40:c7:88:14:27:47:f9:
49:17:6c:76:fc:ba:55:44:33:89:fe:57:6d:55:2d:
17:2a:f5:bb:0c:2d:5e:e4:12:5b:c6:ee:b7:b1:7b:
bb:8b:ec:1f:05:1f:9e:1a:72:4c:29:65:47:3e:fd:
cd:e5:ce:7b:f4:e5:e3:5b:c5:2f:ed:3b:f3:0b:da:
a6:82:fd:cd:b2:9a:d7:62:fa:11:01:c5:9b:6e:72:
34:5d:63:cc:c0:49:7a:43:46:f8:4c:a0:63:d5:8d:
a8:48:0f:74:7b:0a:b2:5b:7d:cc:0c:22:33:ea:38:
94:c0:f6:04:33:fb:0e:ad:9e:c2:57:00:5d:f2:b5:
58:6b:82:41:53:09:6e:b8:90:d4:dd:1d:02:a5:d2:
f2:a6:5d:2d:0a:2e:9f:28:c8:b7:95:f6:2d:0c:b6:
92:1d:34:23:2d:5c:58:35:f1:5d:ea:d5:98:08:86:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F7:72:C3:21:29:54:BE:7F:A9:B8:C2:3E:DC:E9:40:CA:DD:86:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/h_dywyEpVL5_qbjCPtzpQMrdhks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.98.0/24
31.56.102.0/23
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.35.0/24
31.57.98.0/24
31.57.121.0/24
31.57.206.0/24
31.57.225.0/24
31.57.241.0/24
31.58.17.0/24
31.58.31.0/24
31.58.47.0/24
31.58.90.0/24
31.58.168.0/24
31.58.186.0/24
31.59.23.0/24
31.59.31.0/24
31.59.70.0/24
31.59.173.0/24
31.59.181.0/24
31.59.189.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:fb:67:30:8f:f7:83:a3:9a:07:cb:e4:0b:92:58:0e:31:47:
91:3d:41:92:b7:f3:fe:e6:9d:fa:97:d5:7c:21:2f:8a:8f:eb:
59:2e:ae:4f:66:6e:46:90:04:06:ae:8f:4d:ab:5e:32:c3:ed:
cd:30:96:a5:47:61:3c:19:c8:41:46:d7:e8:6f:76:e0:0c:84:
5f:50:d8:0b:f9:96:f2:29:62:3c:af:f5:20:53:9b:b1:2f:2b:
5a:46:cd:6c:f6:41:cf:85:18:50:81:eb:e2:a5:45:12:15:54:
a2:31:4b:61:c0:65:ac:af:07:bf:ae:66:92:d8:7a:79:81:6f:
2e:7a:99:8e:ec:b8:65:f5:fb:62:de:02:31:2d:73:35:6a:bd:
04:a1:ac:fc:e2:c1:4e:c6:6f:79:36:70:e6:1c:e2:a5:13:07:
8b:38:81:0b:4e:97:b0:91:ec:9a:2a:c9:7a:d3:84:54:02:b7:
fc:e8:fe:ce:49:79:c8:ca:12:03:d4:58:70:e9:c2:97:60:12:
15:93:8b:67:c7:44:f3:5c:aa:05:47:ec:83:ae:ba:85:a8:06:
e4:97:8c:dc:48:85:fb:1c:33:2f:da:67:90:56:f0:ec:dd:af:
28:82:38:48:37:0d:09:b1:a9:f5:58:1a:03:fc:fe:ea:eb:95:
75:04:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:50 2026 by rpki-client