Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jlx1yQJCvz6hAHrgexrn-PJc_xc.roa
File: jlx1yQJCvz6hAHrgexrn-PJc_xc.roa (raw, json)
Hash identifier: XKRXFgX9PCn8oL17fomHsDZwVxLMg2f4GipIidYR6Mc=
Subject key identifier: 8E:5C:75:C9:02:42:BF:3E:A1:00:7A:E0:7B:1A:E7:F8:F2:5C:FF:17
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F6EE3717C87BEAC7B82BFE3A907EE511D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jlx1yQJCvz6hAHrgexrn-PJc_xc.roa
Signing time: Fri 17 Jul 2026 07:03:47 +0000
ROA not before: Fri 17 Jul 2026 07:03:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 31.56.188.0/24 maxlen: 24
31.58.92.0/24 maxlen: 24
31.58.93.0/24 maxlen: 24
31.58.176.0/24 maxlen: 24
31.58.177.0/24 maxlen: 24
31.59.36.0/24 maxlen: 24
31.59.142.0/24 maxlen: 24
31.59.149.0/24 maxlen: 24
94.183.157.0/24 maxlen: 24
94.183.200.0/24 maxlen: 24
94.183.201.0/24 maxlen: 24
94.183.202.0/24 maxlen: 24
94.183.204.0/24 maxlen: 24
94.183.205.0/24 maxlen: 24
94.183.217.0/24 maxlen: 24
94.183.219.0/24 maxlen: 24
94.183.220.0/22 maxlen: 24
94.183.220.0/24 maxlen: 24
94.183.221.0/24 maxlen: 24
94.183.222.0/24 maxlen: 24
94.183.223.0/24 maxlen: 24
94.183.228.0/24 maxlen: 24
94.183.229.0/24 maxlen: 24
94.183.241.0/24 maxlen: 24
94.183.255.0/24 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.16.0/22 maxlen: 24
217.60.16.0/24 maxlen: 24
217.60.17.0/24 maxlen: 24
217.60.18.0/24 maxlen: 24
217.60.19.0/24 maxlen: 24
217.60.20.0/24 maxlen: 24
217.60.21.0/24 maxlen: 24
217.60.22.0/24 maxlen: 24
217.60.23.0/24 maxlen: 24
217.60.68.0/24 maxlen: 24
217.60.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:e3:71:7c:87:be:ac:7b:82:bf:e3:a9:07:ee:51:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 17 07:03:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8e5c75c90242bf3ea1007ae07b1ae7f8f25cff17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:25:e8:08:98:ea:fc:3d:a6:8a:fd:fb:29:
98:9d:69:b2:77:b7:46:0e:75:1f:d0:2e:e6:79:f9:
31:99:97:36:52:5c:05:5e:bd:fb:a7:84:fd:16:cb:
d2:9b:34:f7:5a:73:7a:10:25:d2:4c:8d:5b:e6:0d:
ee:31:81:8f:8c:58:f1:6d:11:a7:4d:aa:d7:2b:77:
c2:67:86:6b:e3:f8:60:4b:c1:72:1d:eb:1d:c6:9b:
d9:f4:e3:4b:3b:8c:d5:4b:34:93:fe:a7:5f:6d:a1:
76:97:e8:c3:e3:0b:0b:6a:80:32:81:ff:fa:0c:ae:
2b:7a:f4:7b:dc:8c:5c:c7:08:d9:7f:cb:78:83:56:
bf:05:64:75:f6:97:f1:f2:c9:f4:10:08:44:c5:ea:
d1:fc:66:7a:3e:cf:03:80:66:dd:ec:25:ed:8c:53:
b1:0e:67:98:ac:c4:28:d7:83:1e:26:11:25:a1:fe:
2b:ed:1f:09:8d:72:d9:7e:1c:c1:11:f8:f0:5c:89:
62:36:47:e2:db:7d:97:ae:7c:0f:5e:a7:3d:74:00:
f8:4a:27:b6:51:9e:73:a0:cf:86:39:9a:14:78:e0:
55:f2:44:1c:dd:c3:4b:21:84:91:b8:49:e4:2e:6a:
cb:d1:cd:eb:2f:12:25:ef:1f:dd:ce:8c:f1:35:8f:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:75:C9:02:42:BF:3E:A1:00:7A:E0:7B:1A:E7:F8:F2:5C:FF:17
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jlx1yQJCvz6hAHrgexrn-PJc_xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.188.0/24
31.58.92.0/23
31.58.176.0/23
31.59.36.0/24
31.59.142.0/24
31.59.149.0/24
94.183.157.0/24
94.183.200.0-94.183.202.255
94.183.204.0/23
94.183.217.0/24
94.183.219.0-94.183.223.255
94.183.228.0/23
94.183.241.0/24
94.183.255.0/24
217.60.12.0/23
217.60.16.0/21
217.60.68.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:2e:5c:22:3d:60:a2:09:e8:c2:19:72:88:38:7a:95:f7:22:
fd:b0:a2:6d:40:79:34:07:ac:7a:5f:43:ff:22:57:e9:af:dc:
c1:12:91:7e:49:d7:86:21:3e:ad:18:27:48:7f:af:a5:d9:88:
57:0d:0e:2d:c8:ae:24:35:b1:a9:a3:c3:7b:6f:17:e7:28:98:
79:29:3a:09:a1:8c:f6:5a:24:4e:ca:76:0c:23:f8:3d:be:e0:
10:57:ef:6e:dc:6b:28:42:b5:03:da:cc:30:08:ec:37:3d:b4:
3b:f7:31:80:fe:ea:b2:3d:ca:5a:86:fb:6f:22:02:82:79:4e:
33:09:f6:47:2f:01:f4:41:c9:12:f0:47:d0:d6:e9:00:99:d1:
16:b1:d0:d3:fa:97:7f:c0:ae:62:b9:fb:c9:47:0d:fe:fa:6f:
24:53:61:f5:97:ec:91:d0:34:10:05:b3:47:8a:4f:d6:b5:ac:
85:cc:bb:dc:11:0f:c2:b9:c1:89:66:8e:5b:0e:cb:22:ea:f3:
d8:0a:fb:ac:91:f0:54:99:c5:cc:ec:e5:e8:08:f4:39:12:58:
8a:ce:a0:38:4f:81:54:8a:37:81:f5:0a:77:97:08:fc:1d:2e:
7c:c9:05:60:08:aa:86:86:f8:73:a1:89:db:2f:b9:c9:25:7d:
35:8c:7f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:48 2026 by rpki-client