Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wXi69cZyjXurlWYrSohcbTlyT1Q.roa
File: wXi69cZyjXurlWYrSohcbTlyT1Q.roa (raw, json)
Hash identifier: wFhG6FKybe1sI+TEAnXvdHa6A2JAudV7o51sayf6lAE=
Subject key identifier: C1:78:BA:F5:C6:72:8D:7B:AB:95:66:2B:4A:88:5C:6D:39:72:4F:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019E180E1D1BBE5E52BB06D1B970F8F63B4B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wXi69cZyjXurlWYrSohcbTlyT1Q.roa
Signing time: Mon 11 May 2026 17:20:38 +0000
ROA not before: Mon 11 May 2026 17:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.57.30.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:18:0e:1d:1b:be:5e:52:bb:06:d1:b9:70:f8:f6:3b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 11 17:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c178baf5c6728d7bab95662b4a885c6d39724f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:8b:5d:9f:40:50:80:13:21:84:22:7f:0e:
3d:88:c9:73:2b:0f:01:c9:72:4b:cf:53:00:10:2e:
e0:8a:b1:3b:66:ce:8c:58:b0:4f:d4:87:59:75:37:
b4:f9:2e:c0:e8:ca:98:17:62:c9:8f:4f:8c:7f:8e:
77:ad:75:4c:82:50:a1:db:d3:3d:8c:ab:0f:77:d3:
43:0b:a3:34:d5:c8:64:a4:6b:7c:44:80:73:a1:31:
70:dd:96:6c:81:33:c3:98:f1:7a:5d:ba:f9:b3:96:
c4:95:8f:5c:27:3a:e7:b8:65:43:6e:c7:4c:bd:7e:
1f:b9:1a:b3:9f:f9:ef:e1:34:fa:30:6a:43:df:33:
30:44:1e:e9:32:e0:ef:81:7e:06:b0:12:2c:f0:75:
a0:c6:cf:c4:30:2d:af:ea:d5:49:c7:a6:b7:a5:c9:
c0:81:23:25:72:0a:89:01:62:15:d7:ce:7f:3a:e3:
85:cb:5f:42:3b:04:41:4d:f6:99:95:30:4e:64:2a:
ee:4b:d7:ef:08:b5:d5:fd:4d:73:eb:69:d3:8f:a2:
c5:f1:f3:37:d6:d5:31:95:f9:97:6b:5e:73:5b:3c:
0e:55:59:e6:45:4b:54:16:d8:7c:1d:77:9b:6b:78:
8a:82:c9:a4:ce:f8:cb:43:46:57:ac:ea:89:7e:63:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:BA:F5:C6:72:8D:7B:AB:95:66:2B:4A:88:5C:6D:39:72:4F:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wXi69cZyjXurlWYrSohcbTlyT1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.57.30.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.58.71.0/24
31.58.160.0/24
31.59.14.0/24
31.59.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7d:47:a9:d9:f5:ff:1f:b6:b3:8c:07:00:e1:0c:7a:6a:cc:
ca:f9:fe:f7:f3:0d:40:0c:4f:d4:ae:8d:a2:40:3b:76:4e:4c:
73:7b:5d:aa:3d:a4:e1:0a:ba:c8:ba:99:e2:c8:1e:0e:b8:31:
00:fd:46:21:f6:66:08:44:75:84:51:4c:da:97:2f:d9:00:a3:
16:9f:e1:81:12:81:3b:d2:ca:cd:eb:b3:6c:37:a4:12:43:72:
f9:c2:23:97:1b:f1:a8:0b:1a:eb:24:7c:1f:03:b7:54:44:9e:
7e:98:5c:d4:e2:d6:c4:2a:04:4b:18:e2:b7:b2:e2:0a:09:47:
d7:92:4f:10:a3:1e:93:c8:91:d2:45:3a:44:34:c8:34:3d:e4:
8f:3c:5a:5d:28:85:20:32:4d:ff:0d:38:b7:90:2d:63:d9:b9:
54:14:62:7d:bf:e8:c3:51:8d:aa:70:9c:b2:d4:d9:bb:76:e6:
5b:1d:ff:6b:80:36:69:c2:1e:9e:ab:c5:30:03:4e:63:c1:3d:
61:38:c4:f1:fc:0e:32:5f:6f:99:77:c4:ad:ed:9b:1d:b4:7b:
a7:e7:52:e9:32:cd:f7:61:64:61:2d:7e:46:98:86:e7:50:ae:
d6:6f:8d:95:ea:f2:05:6b:3b:0d:95:62:fa:a4:c9:df:f6:6b:
9c:3b:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:03 2026 by rpki-client