Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hl5yUwKfQPRtjcJ84zc5Js6eQ5A.roa
File: hl5yUwKfQPRtjcJ84zc5Js6eQ5A.roa (raw, json)
Hash identifier: Qs94XhFgidKl9Klr6prR9lkE0nvfb4z006CVO3jy4LM=
Subject key identifier: 86:5E:72:53:02:9F:40:F4:6D:8D:C2:7C:E3:37:39:26:CE:9E:43:90
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0B5555957CF3D2C47D1B3BC607DE1383F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hl5yUwKfQPRtjcJ84zc5Js6eQ5A.roa
Signing time: Fri 18 Sep 2026 16:24:24 +0000
ROA not before: Fri 18 Sep 2026 16:24:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 31.58.232.0/23 maxlen: 24
31.59.39.0/24 maxlen: 24
94.183.203.0/24 maxlen: 24
94.183.208.0/24 maxlen: 24
94.183.209.0/24 maxlen: 24
94.183.226.0/24 maxlen: 24
94.183.238.0/24 maxlen: 24
94.183.239.0/24 maxlen: 24
94.183.254.0/24 maxlen: 24
217.60.8.0/23 maxlen: 24
217.60.24.0/24 maxlen: 24
217.60.67.0/24 maxlen: 24
217.60.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:55:59:57:cf:3d:2c:47:d1:b3:bc:60:7d:e1:38:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 18 16:24:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=865e7253029f40f46d8dc27ce3373926ce9e4390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:21:81:83:89:b4:56:30:b9:3e:be:62:83:
cd:4e:ce:9d:b3:e2:0b:d6:88:ef:89:96:b1:27:7a:
9d:d7:a6:09:3a:1c:48:dc:ed:29:e8:1e:eb:e1:70:
7b:0e:ee:08:07:79:df:dd:48:cd:27:b9:e3:21:38:
fb:69:a2:27:83:d5:76:0d:67:82:66:b3:99:24:dc:
c1:db:82:e2:7d:94:67:67:8f:f6:2d:42:3c:fc:e5:
81:e3:fd:84:9c:e4:1f:4b:2b:2e:06:eb:8e:4f:68:
01:4f:c1:af:f2:53:46:72:08:aa:76:11:6c:a2:59:
33:0b:a6:16:5c:77:45:02:16:af:2f:15:db:d3:b9:
42:3a:f9:d2:85:84:1d:d9:42:ba:4c:97:63:16:6a:
5e:0c:71:46:a0:08:30:24:28:de:9e:f4:8e:f2:cc:
7e:a2:53:d4:43:82:38:53:56:75:49:e4:cc:b6:c2:
a3:a6:93:7b:be:0f:33:d7:9c:35:0c:4b:c3:30:6f:
d5:1e:3d:a1:ea:8b:0b:ab:1b:3b:8c:8a:97:22:85:
fe:a0:00:ab:c4:21:eb:31:3e:3f:ed:b6:a6:22:c8:
94:cb:73:7f:86:dc:dd:d5:08:60:3e:62:48:c2:6c:
34:e4:87:60:0c:fa:ef:d7:16:dc:f8:38:9c:35:19:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5E:72:53:02:9F:40:F4:6D:8D:C2:7C:E3:37:39:26:CE:9E:43:90
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hl5yUwKfQPRtjcJ84zc5Js6eQ5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.232.0/23
31.59.39.0/24
94.183.203.0/24
94.183.208.0/23
94.183.226.0/24
94.183.238.0/23
94.183.254.0/24
217.60.8.0/23
217.60.24.0/24
217.60.67.0/24
217.60.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:88:5b:23:39:28:b8:d6:a3:b0:60:89:ff:e0:8d:8c:1c:d7:
72:b9:e7:63:90:84:bb:0c:b7:e1:0b:a9:e7:91:2a:02:ed:17:
25:2c:c4:a3:30:6b:e1:91:69:32:a6:62:fe:08:be:6d:dd:48:
2e:a1:59:f0:6a:06:ad:cb:d6:a8:56:41:d9:3f:d1:8b:f3:26:
a8:6f:0a:ce:07:d8:db:ee:c3:03:cb:e3:19:88:62:37:a4:30:
c7:8b:23:3e:d9:27:24:d0:e7:61:4f:7c:03:b6:8a:9f:4a:2e:
5c:b9:f7:76:1e:67:24:d2:df:01:4c:87:28:5c:aa:3b:63:6c:
cf:34:e7:d6:1a:b5:65:7c:0f:6d:61:30:21:26:68:25:a7:32:
ff:91:78:80:7b:47:1b:23:d1:ca:a3:c7:23:55:2c:ba:d8:12:
72:f4:21:12:19:41:82:29:86:01:a0:20:c2:e0:3c:46:bc:6c:
42:61:7f:f5:b4:d0:39:ab:9a:60:1e:1a:90:d3:6a:41:2e:17:
4c:65:0b:00:27:c1:aa:83:2a:2b:6d:8c:83:28:9e:6e:4f:1b:
8b:9b:c5:bd:6b:20:32:e4:7a:fa:19:81:32:f8:77:dd:9d:35:
b0:51:9c:e7:66:5f:25:87:8b:52:67:48:e6:f3:28:8a:8e:78:
ff:fa:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:50 2026 by rpki-client