Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pDYzwqYH_FMAWUIOHJfFDmQMjZ0.roa
File: pDYzwqYH_FMAWUIOHJfFDmQMjZ0.roa (raw, json)
Hash identifier: C4h5CT+pdzZKL8NYUBCQVXLmUs1cMMBiAHUWxE8wGkA=
Subject key identifier: A4:36:33:C2:A6:07:FC:53:00:59:42:0E:1C:97:C5:0E:64:0C:8D:9D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1D4DD48A14AA21E08806BF5D0B4F32D52
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pDYzwqYH_FMAWUIOHJfFDmQMjZ0.roa
Signing time: Fri 13 Nov 2026 12:23:54 +0000
ROA not before: Fri 13 Nov 2026 12:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.56.150.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.162.0/23 maxlen: 24
31.57.164.0/23 maxlen: 24
31.57.180.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:dd:48:a1:4a:a2:1e:08:80:6b:f5:d0:b4:f3:2d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 13 12:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a43633c2a607fc530059420e1c97c50e640c8d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:c0:57:ac:a0:3b:e9:4c:ee:24:ac:c7:b0:
13:18:50:96:fd:ee:d9:b8:c1:0e:64:5b:38:c9:1a:
be:e7:d4:c3:0f:63:59:24:71:cc:41:72:72:5f:c4:
2d:2d:7f:3a:c1:63:3c:ef:b6:cb:f7:45:a8:78:94:
d9:26:ef:eb:6d:0f:7a:d9:ad:eb:66:37:27:a6:2f:
63:34:14:c8:33:62:91:a2:0b:c6:7b:c2:af:e9:d0:
a1:ee:ac:67:38:bb:e6:c9:7d:18:b1:9d:ac:ae:b9:
12:29:7a:c4:61:67:f9:5f:8a:53:f5:16:d6:d9:f7:
10:94:d4:a0:50:28:01:c1:d7:8f:17:93:5a:88:1a:
49:d3:75:42:60:46:57:5c:2a:2a:04:e2:63:2e:5c:
c8:da:56:b8:0b:6f:f7:e8:7c:dc:10:cd:fb:45:33:
14:a9:c1:02:ea:6e:1b:27:23:16:91:8f:9f:14:82:
dd:87:ea:dc:cb:d0:42:ad:22:15:cc:dd:ac:86:5e:
50:d7:49:b9:71:32:f1:3a:30:58:66:4a:87:db:8e:
11:73:69:f1:40:23:ed:c4:d0:ea:bc:9e:2e:df:c3:
df:cf:54:5c:90:4e:83:79:11:e3:38:01:23:32:1b:
89:7b:62:de:54:1e:98:b7:23:7c:26:c4:3f:e9:eb:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:36:33:C2:A6:07:FC:53:00:59:42:0E:1C:97:C5:0E:64:0C:8D:9D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pDYzwqYH_FMAWUIOHJfFDmQMjZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.56.150.0/24
31.57.122.0/24
31.57.124.0/23
31.57.162.0-31.57.165.255
31.57.180.0/24
31.58.42.0/24
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
42:82:f0:c9:df:44:28:af:78:a2:ee:23:6d:ad:33:33:f3:a4:
68:47:80:2f:bb:5b:f2:f7:02:45:46:a5:f1:67:7d:2f:be:c8:
fa:fa:08:58:de:75:d0:39:46:73:c3:89:ee:07:b6:45:93:8c:
62:d2:61:cb:0b:e8:65:59:80:d0:97:00:7c:2d:48:ab:d7:2c:
87:25:0d:9f:9c:3e:4b:9c:74:0e:67:fa:71:a8:02:b2:ee:1d:
5d:47:e7:2c:e1:c6:62:e5:46:3b:da:17:90:db:0f:4e:db:3a:
9b:c8:fb:fa:b4:b1:aa:d0:ae:e0:26:54:ee:19:99:9f:4a:ff:
9a:09:d5:dd:c1:c2:dd:59:a3:5c:b1:9f:e4:b7:5b:ee:a8:14:
08:90:aa:d1:b7:d6:24:ae:e3:a9:95:df:6c:75:42:f0:31:04:
9b:f6:84:08:47:96:b8:7b:41:3e:ff:d6:ff:6c:2a:b8:21:21:
dc:79:ed:a8:0d:0b:61:2d:ec:67:c6:e7:76:0b:ba:5c:63:55:
59:4d:01:09:9d:18:4f:8e:97:16:7f:c7:43:58:88:02:f2:91:
b5:37:72:1e:e6:2d:1c:99:49:cc:c1:c0:97:6c:b3:ae:ea:d9:
67:93:d2:11:cc:c1:b7:60:fa:8f:c8:c3:8e:97:b8:3c:f3:07:
0b:58:c3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:46:05 2026 by rpki-client