Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u4hGc2NvUrlGE6AI76g9MEIpCWE.roa
File: u4hGc2NvUrlGE6AI76g9MEIpCWE.roa (raw, json)
Hash identifier: p0JBuxNQ3pZxZx2PyH5YCA0c7phzJejhZtJVOLksYdU=
Subject key identifier: BB:88:46:73:63:6F:52:B9:46:13:A0:08:EF:A8:3D:30:42:29:09:61
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019CD3CAD89AAF956628E84428F89E52E72E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u4hGc2NvUrlGE6AI76g9MEIpCWE.roa
Signing time: Mon 09 Mar 2026 18:10:11 +0000
ROA not before: Mon 09 Mar 2026 18:10:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205463
IP address blocks: 31.56.214.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.236.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:ca:d8:9a:af:95:66:28:e8:44:28:f8:9e:52:e7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Mar 9 18:10:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb884673636f52b94613a008efa83d3042290961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:9a:1e:b8:4c:63:76:94:78:e3:08:de:cd:
29:0d:3d:50:4a:80:7b:f5:10:bb:48:da:ed:98:b5:
b9:51:c9:8f:60:04:20:62:9e:9f:7c:ad:fe:d7:c2:
f8:e7:9e:bd:62:2a:3f:c0:b8:de:45:86:0e:fb:b6:
83:b6:25:2e:0f:9a:75:68:a9:61:ba:a4:f5:8b:26:
bf:1b:2f:f6:91:08:78:c8:4a:05:f7:e1:5d:23:c1:
e5:3b:ba:16:1f:ed:e4:70:af:2a:9c:65:aa:ec:62:
56:9a:d1:56:24:3f:4a:9d:5d:e6:28:6b:b2:86:76:
9a:6b:44:f7:b7:67:ad:a7:12:05:39:fc:67:a9:78:
4d:c4:5b:eb:08:5c:d1:2e:78:84:2a:32:e4:07:fd:
6a:b3:76:9a:31:c1:99:7d:29:51:39:72:1a:5b:0a:
0c:b2:6f:bf:8b:ae:9c:96:83:00:6d:c6:b1:d5:ff:
7e:b6:dc:a5:91:34:b6:dd:24:12:04:30:be:d5:35:
d2:dc:0c:25:a4:42:ac:07:2e:8a:e3:99:fc:86:2d:
8a:e6:7f:86:82:a3:2f:a2:db:f6:6e:8f:8d:bc:4f:
e2:42:fe:5f:11:b6:c1:09:f3:70:ab:bc:5b:27:50:
66:aa:8d:2c:60:d8:03:39:4e:06:98:e3:c6:7c:dd:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:46:73:63:6F:52:B9:46:13:A0:08:EF:A8:3D:30:42:29:09:61
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u4hGc2NvUrlGE6AI76g9MEIpCWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.214.0/24
31.58.41.0/24
31.58.236.0/24
31.58.247.0/24
31.58.250.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:02:d6:4e:0e:14:fa:f7:be:c7:bf:fa:23:f4:d0:2f:fd:2b:
3e:2d:a3:e9:7a:75:af:79:68:e4:f6:6d:c9:e5:ff:e7:da:b9:
85:85:87:d9:0b:fd:47:18:69:4c:16:9c:02:e5:ff:4e:ad:db:
d8:c3:fc:3c:b0:eb:72:18:3e:49:a7:ea:5a:c6:db:ce:58:29:
16:b2:7c:85:44:e5:3b:84:3d:ac:79:f4:54:1b:08:c5:f9:ce:
e3:8f:14:01:4a:94:2d:96:57:47:79:ca:50:67:0d:d0:f5:4f:
1f:cc:1e:29:9a:ec:37:59:48:f4:56:b3:72:fd:29:20:0d:b0:
f0:ff:52:57:74:e3:22:b3:de:4f:58:a1:96:be:eb:95:31:c3:
87:27:32:45:6c:67:79:7d:ef:67:ed:38:b9:6a:a5:e3:45:cc:
00:11:0b:fa:e1:5e:b8:1b:fe:e5:6f:5f:fa:30:2c:b0:01:db:
e1:dd:6d:77:a6:9c:2f:93:a9:e8:2c:87:90:2b:f2:6f:6c:ca:
40:e3:bf:d1:50:6c:5d:6a:1f:fd:5a:82:39:0e:2c:06:27:a3:
73:37:80:f4:7a:37:f3:77:a9:be:d7:cd:f9:76:09:fd:8b:5b:
3e:18:c7:44:ce:f9:2e:e7:4f:d9:e4:de:7a:e3:fd:fa:35:eb:
54:1f:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:16:32 2026 by rpki-client