Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wy6L50hM1460rcyBWXX09hCPT3A.roa
File: wy6L50hM1460rcyBWXX09hCPT3A.roa (raw, json)
Hash identifier: l4xiMKwdyC1yMfGb9RYcqQjtDyxnyDLTkNfg97rtdX8=
Subject key identifier: C3:2E:8B:E7:48:4C:D7:8E:B4:AD:CC:81:59:75:F4:F6:10:8F:4F:70
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019F483C64F705161F0E8FB1CBDA7B18D9DF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wy6L50hM1460rcyBWXX09hCPT3A.roa
Signing time: Thu 09 Jul 2026 18:55:45 +0000
ROA not before: Thu 09 Jul 2026 18:55:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.98.0/24 maxlen: 24
31.56.103.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.121.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.57.225.0/24 maxlen: 24
31.58.17.0/24 maxlen: 24
31.58.31.0/24 maxlen: 24
31.58.47.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.59.23.0/24 maxlen: 24
31.59.31.0/24 maxlen: 24
31.59.70.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:3c:64:f7:05:16:1f:0e:8f:b1:cb:da:7b:18:d9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 9 18:55:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c32e8be7484cd78eb4adcc815975f4f6108f4f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:c7:18:30:ea:4f:61:b2:e3:e0:73:9d:a0:
1f:9e:ae:ab:fc:67:f3:db:3c:bb:03:04:2f:18:47:
7d:e5:f7:58:7f:36:4e:d5:c9:f7:3e:f1:66:06:8a:
d1:d5:d2:49:b6:c1:cd:c6:35:39:f3:cf:da:ae:60:
ff:87:de:80:44:51:7e:0b:7a:f5:eb:f1:b8:e7:1f:
57:b1:28:07:ee:b1:37:f0:63:54:7a:90:a0:28:33:
b4:5b:8e:e2:13:d7:c7:71:56:ac:ea:54:7c:dc:05:
c3:05:43:95:1f:fe:bc:cd:4d:6a:40:72:77:bc:b8:
4f:49:73:81:fb:c0:27:29:46:47:9e:70:07:53:d5:
d4:d6:28:3b:63:42:a8:b6:64:38:a3:86:1b:7b:db:
ae:a5:45:b7:27:fb:21:c0:70:f3:90:1c:28:34:9a:
93:45:8b:1f:fa:13:27:eb:fa:eb:53:96:65:da:a8:
33:a6:fa:0d:5e:2e:12:7c:b6:4a:a4:9f:47:f1:08:
7a:63:5b:ad:e8:e0:c1:2b:77:57:b6:b7:aa:b9:6f:
50:17:b4:61:61:69:e3:6a:46:18:d5:1f:d5:b2:91:
3c:3d:f0:f3:04:63:f1:60:37:f5:92:4e:fc:df:da:
74:25:89:6e:83:a0:c9:a8:84:b2:70:3b:49:ec:97:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:8B:E7:48:4C:D7:8E:B4:AD:CC:81:59:75:F4:F6:10:8F:4F:70
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wy6L50hM1460rcyBWXX09hCPT3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.98.0/24
31.56.103.0/24
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.35.0/24
31.57.121.0/24
31.57.206.0/24
31.57.225.0/24
31.58.17.0/24
31.58.31.0/24
31.58.47.0/24
31.58.90.0/24
31.58.168.0/24
31.59.23.0/24
31.59.31.0/24
31.59.70.0/24
31.59.171.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3e:c0:94:bb:a6:11:5e:45:f1:a3:a4:66:e5:79:76:3c:00:
8d:5a:1c:af:9c:56:e2:6f:1e:f2:b4:dc:4b:2d:77:fd:c7:c1:
79:3c:32:66:11:1f:4c:01:c9:36:34:ae:ce:17:33:2b:17:2c:
00:55:0b:7e:7f:3c:7c:a6:9d:6c:43:c1:31:f3:85:36:0f:9b:
70:3c:95:82:86:5e:3b:14:3d:07:c0:09:3c:c3:e6:ed:cd:df:
99:ed:3a:59:b1:3f:f1:62:1f:d2:08:34:13:e7:58:3a:1e:e1:
9b:3b:74:c2:09:24:9e:a1:14:81:91:a0:b7:b9:8f:98:19:bf:
a4:ba:0e:19:bc:09:57:02:fa:08:85:f7:9e:ae:79:37:19:e6:
69:ec:c4:b8:ba:fe:45:4c:4a:74:f4:19:97:08:ff:a2:92:59:
14:5d:32:c9:fe:e1:3b:7c:d8:87:86:67:55:75:3a:32:c3:6e:
e5:48:ad:95:82:9a:a7:85:28:50:3c:a6:d6:61:a6:31:46:b1:
8f:6a:06:65:e5:37:e6:77:a2:5b:11:70:10:51:4d:fb:8c:43:
94:be:1e:bf:b3:80:95:7a:26:f4:bc:e9:70:32:c2:b8:c8:8e:
7e:2a:02:48:3c:21:82:ea:a9:7d:c4:7c:51:98:6a:cf:f7:52:
fc:27:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:15 2026 by rpki-client