Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jBAnTBaqHOHJ2SHtLDR2xahvT0E.roa
File: jBAnTBaqHOHJ2SHtLDR2xahvT0E.roa (raw, json)
Hash identifier: EiNGqZk+l8MRg2Ed7gg7d+lfCx436mCdjdPgwSo5HzQ=
Subject key identifier: 8C:10:27:4C:16:AA:1C:E1:C9:D9:21:ED:2C:34:76:C5:A8:6F:4F:41
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A17C6FD4B71A80DBD318AC14550975F530
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jBAnTBaqHOHJ2SHtLDR2xahvT0E.roa
Signing time: Tue 27 Oct 2026 08:17:45 +0000
ROA not before: Tue 27 Oct 2026 08:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209373
IP address blocks: 31.56.209.0/24 maxlen: 24
217.60.102.0/24 maxlen: 24
217.60.103.0/24 maxlen: 24
217.60.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:6f:d4:b7:1a:80:db:d3:18:ac:14:55:09:75:f5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 08:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c10274c16aa1ce1c9d921ed2c3476c5a86f4f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:96:01:eb:7c:16:61:1f:4b:4e:95:1b:33:
8b:a1:64:61:a1:35:fa:ad:01:d7:cb:96:53:de:d1:
ff:51:14:90:a3:06:c6:28:04:8f:b6:5f:27:c2:c9:
d8:4b:43:12:c2:d8:81:6d:3b:7b:36:6b:53:6b:8b:
40:12:49:2e:65:15:b6:6c:c0:df:d7:a3:2e:27:06:
2e:7a:3c:da:20:d8:b6:ae:06:a7:67:06:99:f3:29:
c2:d5:bb:73:c6:df:de:d0:09:a1:26:58:04:c7:3f:
75:a3:54:03:aa:63:b8:20:37:d2:0a:ca:80:3a:ce:
a7:49:9a:0b:bf:f5:5c:6f:db:3b:39:c0:82:bb:d3:
cd:9c:cd:4e:e4:4c:8b:9b:b4:71:9d:34:7c:0d:04:
15:b6:c2:16:09:d3:7b:0f:05:06:b7:f2:92:3c:0b:
bf:3a:e9:02:4f:69:98:8e:00:de:b7:40:83:5c:4a:
0e:53:6c:60:02:36:86:3b:7f:8a:35:26:8d:89:c6:
47:90:43:6f:a2:f2:b5:96:f5:f0:e2:85:26:3e:91:
8d:c6:65:65:b8:6a:f5:64:40:56:bc:9b:68:59:ed:
1d:7f:1c:e9:de:7d:de:58:86:a4:bf:be:34:58:b3:
d3:db:35:11:b4:56:d9:c1:50:fe:20:7f:43:ff:ec:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:10:27:4C:16:AA:1C:E1:C9:D9:21:ED:2C:34:76:C5:A8:6F:4F:41
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jBAnTBaqHOHJ2SHtLDR2xahvT0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.209.0/24
217.60.102.0/23
217.60.195.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:83:18:dc:05:4d:5e:c4:17:1a:14:65:64:2b:db:3e:ab:86:
4b:1f:79:ff:cf:58:0b:06:e0:99:b6:f5:1c:b3:3f:f8:da:0d:
f9:51:42:3d:f1:ba:f8:b4:14:45:b4:e2:46:06:72:89:99:4e:
46:8c:e4:2a:6b:76:6d:a3:55:28:ab:68:a3:8a:a3:a9:08:f4:
87:80:d6:43:a9:b9:ca:9f:b9:59:4d:ab:99:fc:a1:ae:f5:ff:
4a:b1:98:fd:03:07:47:68:93:2b:ca:2b:2a:07:b0:c9:ad:b0:
7c:a4:84:89:5e:ed:fe:65:29:3b:17:64:36:73:71:83:fa:b2:
ed:d8:f1:c0:c0:5a:bc:79:1f:95:2b:fb:fa:38:6c:5e:21:9b:
28:60:b1:ca:28:69:4d:a3:3d:6d:63:d0:a0:37:5e:39:e7:88:
93:91:ad:f8:54:8d:27:66:61:ff:d1:f3:eb:d6:8c:e8:32:22:
bc:51:94:d9:d6:99:dc:ce:d9:dc:f0:e7:97:d5:fb:31:56:56:
1e:9e:4b:1c:bb:46:04:a8:3b:c7:8a:0d:80:ec:0b:84:5a:b9:
a6:88:16:d5:d8:29:b0:7e:cc:f9:1d:c0:ef:aa:87:a4:d9:ad:
78:9d:8a:17:1e:9a:cb:9c:1c:22:89:92:18:54:45:ad:c5:12:
d9:4e:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:52 2026 by rpki-client