Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pKczbMbpPfNg4tpPAKPHFkG880o.roa
File: pKczbMbpPfNg4tpPAKPHFkG880o.roa (raw, json)
Hash identifier: 01s8at3g6GXBuHXdKwsipbK+a8dHdG1Y39AlGhdHSOU=
Subject key identifier: A4:A7:33:6C:C6:E9:3D:F3:60:E2:DA:4F:00:A3:C7:16:41:BC:F3:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C98287E5C4F662BD04A7380AC995F2C5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pKczbMbpPfNg4tpPAKPHFkG880o.roa
Signing time: Wed 11 Nov 2026 07:28:57 +0000
ROA not before: Wed 11 Nov 2026 07:28:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 31.56.46.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.58.18.0/24 maxlen: 24
31.58.22.0/24 maxlen: 24
31.58.28.0/24 maxlen: 24
31.58.32.0/24 maxlen: 24
31.59.15.0/24 maxlen: 24
31.59.20.0/24 maxlen: 24
31.59.21.0/24 maxlen: 24
31.59.27.0/24 maxlen: 24
31.59.28.0/24 maxlen: 24
31.59.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:82:87:e5:c4:f6:62:bd:04:a7:38:0a:c9:95:f2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 11 07:28:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4a7336cc6e93df360e2da4f00a3c71641bcf34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:2c:f1:a0:e1:20:ed:8f:1c:8d:89:09:32:
74:86:c0:67:c0:f3:a5:21:96:4b:c8:ba:f0:d0:58:
b9:05:e6:ae:c1:6a:49:c1:24:3f:de:a7:5c:df:cf:
9e:b5:1e:4c:6e:da:06:1e:d8:78:cb:96:1d:04:70:
60:93:21:5e:f0:2a:6b:81:28:54:63:f1:3e:3c:24:
0c:a1:c7:f2:3d:8a:98:8d:45:7e:50:ba:5b:9b:ea:
f3:ee:c3:a5:0b:33:da:8c:40:ea:8c:e3:5c:04:97:
01:9c:cb:a1:56:dd:f2:9f:a4:e4:ab:ae:5c:7b:77:
e5:f2:37:e3:6c:ad:d0:32:29:b5:40:f5:d3:c7:32:
77:6f:af:9b:be:0e:63:ff:5b:fd:f0:3b:7d:d5:4b:
bf:4a:ff:c2:d0:5c:11:a2:fa:42:cb:9a:ea:b1:e9:
7f:f5:fd:78:63:d4:dd:38:e5:33:df:b7:8a:4e:1d:
80:b5:60:dc:69:2e:00:28:da:66:0b:e3:9f:e8:54:
5e:06:fa:25:28:b5:25:bb:b6:e1:aa:ed:dc:f1:f3:
41:3c:1c:8c:d7:29:50:6b:2a:47:34:ea:03:c9:a7:
df:65:ae:d9:7d:62:04:b7:c8:78:39:ef:cf:ec:2e:
af:07:25:d2:95:c6:9e:99:db:ff:dd:42:e4:a2:f6:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:33:6C:C6:E9:3D:F3:60:E2:DA:4F:00:A3:C7:16:41:BC:F3:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pKczbMbpPfNg4tpPAKPHFkG880o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.46.0/24
31.56.73.0/24
31.58.18.0/24
31.58.22.0/24
31.58.28.0/24
31.58.32.0/24
31.59.15.0/24
31.59.20.0/23
31.59.27.0-31.59.28.255
31.59.33.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b5:90:39:be:1c:1b:8f:ec:48:07:d7:40:c3:0b:4a:4d:d7:
b0:30:7d:57:50:34:86:b8:85:08:58:e5:a2:24:0e:56:c1:70:
78:bf:55:41:4f:36:48:8a:6a:da:de:40:03:b2:30:42:ab:9a:
61:7c:ed:93:11:f7:59:5a:89:88:ef:9b:25:89:6f:ae:a4:75:
f1:02:d9:4d:bb:a6:a8:b8:1b:ec:ec:79:d6:24:9f:0a:83:9f:
cf:9e:a1:95:99:c1:20:ea:07:2f:52:b6:79:ee:d6:93:14:ee:
dd:94:56:e4:5d:44:56:fd:53:fe:6c:ba:e1:12:c5:01:25:48:
35:9b:68:0f:0c:cc:17:02:8d:4d:24:aa:77:31:50:83:22:0d:
2b:3b:bc:a8:c4:6f:c7:98:4e:26:78:27:5e:1a:11:2f:e0:f6:
6e:9f:cb:dd:c6:ab:3e:17:20:66:bb:37:c4:99:96:8b:b1:86:
a9:30:63:1a:24:b2:10:56:58:db:b8:7f:bf:be:5f:7f:e8:b7:
a3:7a:57:f0:32:4a:4e:a5:f2:cc:e8:a4:13:c6:c4:05:c4:11:
fd:a6:f2:ce:07:37:45:39:31:3e:07:c4:26:18:16:5e:a9:16:
85:9e:f1:17:a1:0f:8f:7d:40:ea:c3:a8:62:84:35:cf:30:cc:
e6:0b:9f:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:30:39 2026 by rpki-client