Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m3M2LDZoaiRXdl22lIQ44WDuAm0.roa
File: m3M2LDZoaiRXdl22lIQ44WDuAm0.roa (raw, json)
Hash identifier: FeKSJDzXUPPgev0FcKBws8k3Naf1KUaWI/xP8xf2C9w=
Subject key identifier: 9B:73:36:2C:36:68:6A:24:57:76:5D:B6:94:84:38:E1:60:EE:02:6D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A18BD0F7EDEF73F191057080390505E4B9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m3M2LDZoaiRXdl22lIQ44WDuAm0.roa
Signing time: Fri 30 Oct 2026 07:58:10 +0000
ROA not before: Fri 30 Oct 2026 07:58:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197574
IP address blocks: 31.56.186.0/24 maxlen: 24
31.56.187.0/24 maxlen: 24
31.56.189.0/24 maxlen: 24
31.59.143.0/24 maxlen: 24
31.59.150.0/24 maxlen: 24
217.60.32.0/24 maxlen: 24
217.60.33.0/24 maxlen: 24
217.60.34.0/24 maxlen: 24
217.60.35.0/24 maxlen: 24
217.60.151.0/24 maxlen: 24
217.60.178.0/24 maxlen: 24
217.60.179.0/24 maxlen: 24
217.60.182.0/24 maxlen: 24
217.60.183.0/24 maxlen: 24
2a14:6e40:4::/48 maxlen: 48
2a14:6e40:5::/48 maxlen: 48
2a14:6e40:6::/48 maxlen: 48
2a14:6e40:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:d0:f7:ed:ef:73:f1:91:05:70:80:39:05:05:e4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 07:58:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b73362c36686a2457765db6948438e160ee026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:1c:02:8e:ef:87:43:9a:a2:c3:79:ba:04:
a8:5c:01:c9:db:75:46:9b:34:96:9b:12:d7:5c:99:
2a:8f:cf:94:86:51:9f:29:7a:35:6a:bd:78:65:dc:
04:39:64:e8:f3:33:da:ee:00:c8:77:c3:34:c2:da:
43:5b:34:01:5f:12:65:e4:d9:46:2d:41:b7:4a:f5:
da:41:6c:75:37:82:8a:67:0b:05:59:80:be:ad:c6:
9f:0a:4c:a6:4e:36:b9:a6:8c:06:66:03:f4:46:37:
ac:43:dc:ea:2c:1e:bd:d7:1b:a4:3b:f8:b1:e2:7f:
f5:7c:0e:09:51:bf:a6:02:de:f0:f2:7e:e9:46:c3:
62:5e:82:01:81:4f:7c:8b:de:ee:5b:bc:ab:48:6a:
91:75:36:88:29:c1:a5:71:a5:7e:b0:a8:58:a4:8d:
08:30:73:1d:6a:d3:0e:a2:6b:2e:f7:34:d7:0e:40:
25:31:2b:69:7c:62:c3:c0:fa:8f:f2:9d:77:91:9e:
93:d8:aa:ef:45:15:2b:6b:1b:60:a3:c7:20:df:5d:
c8:3e:17:1e:30:35:24:c0:93:36:b1:4e:e2:d8:ea:
25:16:46:fb:2c:db:34:b8:ba:e7:cb:7b:ef:6e:01:
fe:ea:a8:48:27:15:f9:26:e7:e8:8a:8b:72:43:50:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:73:36:2C:36:68:6A:24:57:76:5D:B6:94:84:38:E1:60:EE:02:6D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m3M2LDZoaiRXdl22lIQ44WDuAm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.186.0/23
31.56.189.0/24
31.59.143.0/24
31.59.150.0/24
217.60.32.0/22
217.60.151.0/24
217.60.178.0/23
217.60.182.0/23
IPv6:
2a14:6e40:4::/46
Signature Algorithm: sha256WithRSAEncryption
ac:3b:1a:ed:97:6a:64:c5:78:6b:c9:c0:ff:b6:6c:55:b9:c3:
e3:cd:b9:9f:3b:4d:4c:17:1a:44:5c:2e:42:00:5b:7e:b6:4a:
cc:9d:4f:13:f4:f0:bc:06:9e:08:d2:2e:83:30:18:14:26:58:
96:a0:30:97:0d:c4:9d:6d:83:e2:c2:48:80:88:c7:9d:58:d6:
7d:3b:35:a9:c3:92:26:99:9c:8b:60:a8:ba:d1:8a:e7:86:13:
ca:9d:de:a7:b6:af:32:34:ee:b6:e8:c4:4b:40:a6:dc:ee:42:
00:49:8e:83:cb:54:e1:33:42:a7:25:53:ac:74:c0:1a:b4:96:
81:f5:cb:da:89:51:8b:a4:be:6d:05:fd:aa:fa:0e:95:6d:c7:
5f:73:28:4e:70:74:9f:c9:c2:dc:c6:93:65:0e:dc:e3:f3:fe:
e0:bb:e7:7a:17:9c:7a:1d:30:84:2c:77:6e:40:e7:bb:09:94:
2d:ba:92:75:33:e8:65:1e:4e:47:98:b4:d5:7c:ab:f0:b7:67:
2f:30:f2:f8:68:7e:bd:68:c9:15:4b:70:6f:6b:d8:42:7f:07:
a1:c2:2a:f3:c8:af:1d:c2:23:e8:bd:ba:0c:9a:46:20:d9:ff:
5e:6d:ab:c9:45:d5:92:94:bf:07:7c:f3:31:d3:04:ae:17:71:
9f:49:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:30:40 2026 by rpki-client