Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vVW3jSzsG79NETZBFitQPc9D-38.roa
File: vVW3jSzsG79NETZBFitQPc9D-38.roa (raw, json)
Hash identifier: s8L8UDvSEgzghNE3GY2OmI2U7GIAzdQrP1AQm/bn2ds=
Subject key identifier: BD:55:B7:8D:2C:EC:1B:BF:4D:11:36:41:16:2B:50:3D:CF:43:FB:7F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A0BFA2BD0213B3D03FE46F58427882F3E5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vVW3jSzsG79NETZBFitQPc9D-38.roa
Signing time: Sun 20 Sep 2026 16:25:08 +0000
ROA not before: Sun 20 Sep 2026 16:25:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.35.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
2a14:6e40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:a2:bd:02:13:b3:d0:3f:e4:6f:58:42:78:82:f3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 20 16:25:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd55b78d2cec1bbf4d113641162b503dcf43fb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:d7:2a:8c:73:dc:57:f3:fb:1d:7d:8f:75:
75:3d:21:a6:83:53:b5:d9:55:fa:81:e8:64:0a:94:
ac:30:4f:ce:4b:f1:b6:c0:e9:bd:f6:48:ec:01:11:
bc:b8:b2:bd:ce:d6:4a:3e:6b:48:76:be:94:b1:99:
a3:4f:40:9d:7e:e2:4b:1e:06:e3:6d:56:d9:fc:0a:
f0:91:c0:95:8a:fa:dd:45:31:4b:ac:45:f0:85:5e:
cf:8f:62:93:81:65:47:5b:19:78:8a:f3:a3:13:30:
fc:a4:9d:91:22:23:fe:dd:34:6a:f1:a4:7d:d1:5d:
ba:98:1d:8a:07:d7:e0:95:f6:80:4c:3e:f6:7b:61:
46:e2:9d:89:cd:d4:c5:67:0d:39:9b:b2:0b:ff:e9:
8c:3e:5d:29:b0:9f:49:49:51:dd:0d:17:f9:bd:21:
66:18:4f:50:24:79:18:d4:7c:23:fc:76:3d:11:e3:
6c:17:b8:8b:55:64:e9:cb:0a:43:47:b5:01:45:6c:
96:ba:87:a0:19:a4:04:fa:fd:ce:35:16:78:2e:33:
0b:5e:5d:65:7e:35:f3:2c:87:99:a7:40:f4:9c:04:
9e:b0:40:09:75:10:42:0e:8e:ec:58:7c:aa:fd:a3:
79:5a:1b:d9:41:f3:25:24:1d:97:3a:58:e6:01:2c:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:55:B7:8D:2C:EC:1B:BF:4D:11:36:41:16:2B:50:3D:CF:43:FB:7F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vVW3jSzsG79NETZBFitQPc9D-38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.35.0/24
31.56.107.0/24
31.56.126.0/24
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
IPv6:
2a14:6e40:2::/48
Signature Algorithm: sha256WithRSAEncryption
ad:8a:ca:a3:54:54:d5:a0:93:12:47:09:30:68:f5:fe:e7:34:
0f:ae:1e:1f:bb:11:12:ce:29:96:35:e5:ab:3f:f6:e0:7f:b7:
ac:43:0e:88:18:28:e6:81:24:f2:4e:cb:c1:41:8a:94:b4:0d:
38:4a:23:8c:f4:3b:f0:d3:4f:cc:e4:94:d5:cf:3f:c6:a9:f4:
a0:36:b8:33:1a:79:d2:b8:06:9c:d5:67:49:43:71:2b:82:ad:
75:77:c9:0c:25:84:66:9e:18:6e:86:74:5b:6a:53:ea:3b:7b:
7f:32:5e:7e:07:ed:0a:37:be:13:89:2f:05:64:35:f9:66:17:
7f:d2:6d:4e:72:47:21:3a:0b:04:f4:5c:1a:b5:b3:81:2d:35:
e2:a6:a4:d2:b2:fa:50:2c:92:7a:98:e7:a0:78:6e:03:1f:b3:
38:c8:24:fa:39:84:6d:77:56:7a:0a:53:e9:1b:83:ba:71:ed:
07:a4:57:b3:b1:12:24:4f:92:9b:fc:61:28:6c:86:40:8b:60:
48:d0:d3:75:ff:64:85:21:86:06:07:1d:c0:b3:e2:89:bb:7e:
ae:78:08:31:c3:16:fc:22:ae:6f:c3:aa:62:ed:7d:30:35:d6:
26:8d:15:89:7a:f9:a4:79:99:f8:b6:b0:91:48:87:2b:2a:2b:
88:10:f3:e2
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAaC/or0CE7PQP+RvWEJ4gvPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYwOTIwMTYyNTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDU1Yjc4ZDJjZWMxYmJmNGQxMTM2NDExNjJiNTAzZGNmNDNmYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWfXKoxz3Ffz+x19j3V1PSGmg1O1
2VX6gehkCpSsME/OS/G2wOm99kjsARG8uLK9ztZKPmtIdr6UsZmjT0CdfuJLHgbj
bVbZ/ArwkcCVivrdRTFLrEXwhV7Pj2KTgWVHWxl4ivOjEzD8pJ2RIiP+3TRq8aR9
0V26mB2KB9fglfaATD72e2FG4p2JzdTFZw05m7IL/+mMPl0psJ9JSVHdDRf5vSFm
GE9QJHkY1Hwj/HY9EeNsF7iLVWTpywpDR7UBRWyWuoegGaQE+v3ONRZ4LjMLXl1l
fjXzLIeZp0D0nASesEAJdRBCDo7sWHyq/aN5WhvZQfMlJB2XOljmASxC3QIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFL1Vt40s7Bu/TRE2QRYrUD3PQ/t/MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdlZXM2pTenNHNzlORVRaQkZpdFFQYzlELTM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTA2BAIAATAwAwQDHzgIAwQA
HzgjAwQAHzhrAwQAHzh+AwQAHzlyAwQAHzl0AwQAHztPAwQAHzvkMA8EAgACMAkD
BwAqFG5AAAIwDQYJKoZIhvcNAQELBQADggEBAK2KyqNUVNWgkxJHCTBo9f7nNA+u
Hh+7ERLOKZY15as/9uB/t6xDDogYKOaBJPJOy8FBipS0DThKI4z0O/DTT8zklNXP
P8ap9KA2uDMaedK4BpzVZ0lDcSuCrXV3yQwlhGaeGG6GdFtqU+o7e38yXn4H7Qo3
vhOJLwVkNflmF3/SbU5yRyE6CwT0XBq1s4EtNeKmpNKy+lAsknqY56B4bgMfszjI
JPo5hG13VnoKU+kbg7px7QekV7OxEiRPkpv8YShshkCLYEjQ03X/ZIUhhgYHHcCz
4om7fq54CDHDFvwirm/DqmLtfTA11iaNFYl6+aR5mfi2sJFIhysqK4gQ8+I=
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:13:57 2026 by rpki-client