Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w1Q5NljcXfgYaro4w0CPR5Yphec.roa
File: w1Q5NljcXfgYaro4w0CPR5Yphec.roa (raw, json)
Hash identifier: nLXEIxpGf7iXorhKnKPydGeUNzbHaVdexFX5s3yV9/k=
Subject key identifier: C3:54:39:36:58:DC:5D:F8:18:6A:BA:38:C3:40:8F:47:96:29:85:E7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A1C1B62ED135AE9713EAB72F5682A34CEB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w1Q5NljcXfgYaro4w0CPR5Yphec.roa
Signing time: Mon 09 Nov 2026 19:08:24 +0000
ROA not before: Mon 09 Nov 2026 19:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218986
IP address blocks: 31.56.52.0/23 maxlen: 24
31.56.52.0/24 maxlen: 24
31.56.53.0/24 maxlen: 24
31.58.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:b6:2e:d1:35:ae:97:13:ea:b7:2f:56:82:a3:4c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 9 19:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c354393658dc5df8186aba38c3408f47962985e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:21:64:d5:bd:d9:7a:1c:c8:8a:2e:89:79:
2f:1b:b9:1a:94:30:c8:25:9a:a8:4c:d5:4e:af:a6:
9a:60:4a:70:47:9e:02:14:8d:ad:c0:e4:f8:76:0e:
c9:84:2c:2b:e6:af:ed:75:fe:9e:91:ec:6c:f2:f9:
e6:b1:8d:02:93:4f:72:39:23:7e:89:04:3a:14:80:
a1:b8:83:c1:4b:8e:4f:24:92:39:81:f9:bc:b9:d1:
87:c9:7e:c0:2a:9d:c7:18:08:fe:48:26:aa:bf:cf:
e0:9f:eb:7f:07:8d:18:29:b6:2e:5c:61:82:ba:a2:
ba:58:97:94:c2:85:9e:26:16:90:a8:9a:34:8f:e1:
30:6d:ab:ee:42:4d:74:08:14:4c:86:7e:94:5a:96:
97:f4:c4:f6:f7:92:fd:28:9c:6c:ed:68:ac:43:e1:
e6:f4:70:67:a0:c3:1c:29:31:a6:f0:b7:cd:b9:e2:
99:bb:42:bb:1f:b0:c7:2b:32:97:a4:cd:b6:64:19:
ca:7a:30:58:be:20:39:a3:d6:00:74:4d:44:7f:76:
aa:10:9a:eb:0d:bf:17:53:75:bd:d4:89:cb:dd:0c:
e8:af:28:cd:bc:ec:de:11:01:c8:82:a0:50:00:c9:
53:09:c9:8b:c4:10:10:03:0b:a7:84:14:25:b4:a0:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:54:39:36:58:DC:5D:F8:18:6A:BA:38:C3:40:8F:47:96:29:85:E7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/w1Q5NljcXfgYaro4w0CPR5Yphec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/23
31.58.97.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e7:e0:99:1f:cc:71:1d:ed:67:de:c9:17:eb:11:86:32:cf:
54:76:13:d2:46:0c:77:3f:56:51:16:00:88:90:3f:21:3e:aa:
25:db:b0:52:1c:ee:8e:69:2c:97:eb:67:3d:23:41:4d:88:e7:
c2:72:6b:6a:08:c6:56:a0:44:35:1c:b5:5e:51:9d:d0:67:a4:
c2:d8:c9:66:03:b8:10:3b:26:19:78:43:21:d7:f4:cd:65:eb:
4d:14:42:b2:82:0c:08:86:13:39:e5:58:49:c2:de:a4:91:c6:
09:60:9a:53:62:d6:23:00:7f:13:9e:3e:e6:4a:4a:43:30:ef:
61:45:6c:cc:d0:09:48:48:58:12:cf:15:3a:da:4b:7b:14:02:
7d:91:de:86:02:7f:25:a9:51:e3:ee:f8:09:a7:a5:5f:c2:47:
72:5c:c3:05:ee:97:4e:33:8b:82:a3:28:18:ee:55:d0:d1:34:
d4:93:72:aa:86:15:6e:2b:68:e3:b5:1d:f3:01:2f:f4:36:5e:
64:74:01:1e:e4:9a:1e:46:05:f7:ec:3c:01:5f:d6:c4:31:c7:
a6:1f:15:e8:9f:79:da:ac:39:da:ad:a0:ff:35:1f:37:60:23:
08:16:51:f9:9b:70:5d:aa:da:71:f7:9c:77:43:4b:5a:16:20:
2f:6d:fe:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaHBti7RNa6XE+q3L1aCo0zrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjYxMTA5MTkwODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzU0MzkzNjU4ZGM1ZGY4MTg2YWJhMzhjMzQwOGY0Nzk2Mjk4NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl8hZNW92XocyIouiXkvG7kalDDI
JZqoTNVOr6aaYEpwR54CFI2twOT4dg7JhCwr5q/tdf6ekexs8vnmsY0Ck09yOSN+
iQQ6FIChuIPBS45PJJI5gfm8udGHyX7AKp3HGAj+SCaqv8/gn+t/B40YKbYuXGGC
uqK6WJeUwoWeJhaQqJo0j+EwbavuQk10CBRMhn6UWpaX9MT295L9KJxs7WisQ+Hm
9HBnoMMcKTGm8LfNueKZu0K7H7DHKzKXpM22ZBnKejBYviA5o9YAdE1Ef3aqEJrr
Db8XU3W91InL3QzoryjNvOzeEQHIgqBQAMlTCcmLxBAQAwunhBQltKAcbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMNUOTZY3F34GGq6OMNAj0eWKYXnMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdzFRNU5samNYZmdZYXJvNHcwQ1BSNVlwaGVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHzg0AwQA
HzphMA0GCSqGSIb3DQEBCwUAA4IBAQBk5+CZH8xxHe1n3skX6xGGMs9UdhPSRgx3
P1ZRFgCIkD8hPqol27BSHO6OaSyX62c9I0FNiOfCcmtqCMZWoEQ1HLVeUZ3QZ6TC
2MlmA7gQOyYZeEMh1/TNZetNFEKyggwIhhM55VhJwt6kkcYJYJpTYtYjAH8Tnj7m
SkpDMO9hRWzM0AlISFgSzxU62kt7FAJ9kd6GAn8lqVHj7vgJp6VfwkdyXMMF7pdO
M4uCoygY7lXQ0TTUk3KqhhVuK2jjtR3zAS/0Nl5kdAEe5JoeRgX37DwBX9bEMcem
HxXon3narDnaraD/NR83YCMIFlH5m3Bdqtpx95x3Q0taFiAvbf68
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:06:44 2026 by rpki-client