Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2RpzZvwAGQcYThBedMRvuVoMo64.roa
File: 2RpzZvwAGQcYThBedMRvuVoMo64.roa (raw, json)
Hash identifier: 5yUSRFbSdbEg62ExEjmvs3/Mn50RMA94DnM3DhMYXvo=
Subject key identifier: D9:1A:73:66:FC:00:19:07:18:4E:10:5E:74:C4:6F:B9:5A:0C:A3:AE
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198B832ABDF3BA72451AC80EC090CBE30AC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2RpzZvwAGQcYThBedMRvuVoMo64.roa
Signing time: Sun 17 Aug 2025 13:23:05 +0000
ROA not before: Sun 17 Aug 2025 13:23:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.121.0/24 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.57.225.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.58.224.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b8:32:ab:df:3b:a7:24:51:ac:80:ec:09:0c:be:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 17 13:23:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d91a7366fc001907184e105e74c46fb95a0ca3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:cc:13:26:9c:14:d6:a6:44:03:82:93:a2:
96:07:d6:6b:40:1c:eb:0a:a0:9b:a8:76:55:47:bc:
85:1b:3b:73:95:e1:ec:b2:22:3b:22:cc:05:ce:2f:
65:10:34:5d:65:38:93:66:85:d6:f3:dd:87:56:49:
80:14:ba:ae:9c:f1:5f:90:c2:11:dd:21:0f:c5:03:
fe:6b:1d:2a:ec:a0:2b:81:1b:28:de:25:0e:82:95:
75:35:b9:a9:0a:14:eb:9e:04:5c:b7:6b:02:36:68:
36:7d:70:29:bd:c2:c1:0c:b0:94:40:f5:dd:31:1f:
97:f5:34:78:8c:24:94:44:06:e1:37:57:9b:53:20:
12:ab:4c:85:85:9d:25:0a:7d:e3:62:f4:73:e0:b6:
7d:01:f6:75:a6:03:51:af:3f:9e:4f:e4:d4:da:5c:
1f:35:80:b9:ed:11:e1:e4:db:1e:28:73:af:99:59:
3f:95:86:56:53:ff:39:da:e2:54:66:4e:73:88:a8:
9f:fe:60:b8:0b:b1:05:86:90:61:e9:fc:aa:ff:fe:
0b:81:33:09:b9:27:d6:84:9e:ad:f4:e6:8f:82:0f:
20:3b:9b:4e:2e:f3:97:bf:4a:ba:3c:d7:0d:cd:5f:
6f:4d:19:9d:a1:5a:b3:43:70:d1:f0:71:a8:53:5c:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1A:73:66:FC:00:19:07:18:4E:10:5E:74:C4:6F:B9:5A:0C:A3:AE
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2RpzZvwAGQcYThBedMRvuVoMo64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.156.0/24
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.35.0/24
31.57.121.0/24
31.57.129.0/24
31.57.132.0/24
31.57.142.0/24
31.57.151.0/24
31.57.191.0/24
31.57.206.0/24
31.57.225.0/24
31.58.33.0/24
31.58.90.0/24
31.58.157.0/24
31.58.160.0/24
31.58.163.0/24
31.58.168.0/24
31.58.224.0/24
31.58.230.0/23
31.59.57.0/24
31.59.108.0-31.59.110.255
31.59.171.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
84:f5:52:47:38:da:cb:a9:cb:c4:28:d5:66:6f:44:a5:68:1f:
c0:3f:16:f5:a6:3f:26:b1:c0:49:b3:68:3d:70:d1:16:87:f5:
33:9a:71:5f:60:dc:46:ad:e1:50:1b:cb:2c:58:4b:48:11:32:
78:c9:7f:44:0d:2e:85:28:49:5d:f9:ba:f2:35:84:dd:e2:2e:
58:8b:80:fb:9f:41:c4:c7:3a:46:42:4d:61:34:47:34:ab:cf:
8b:f0:86:ab:75:2e:58:e6:27:fb:6b:07:61:cc:47:30:0f:af:
98:f5:69:7f:c1:e0:08:50:ec:eb:92:91:4f:c1:3a:c1:fa:da:
cf:be:0f:54:41:4e:16:26:61:d3:79:2e:9d:31:d7:50:cf:29:
18:2c:65:c4:08:ea:cf:30:5c:af:aa:27:b4:11:d3:f8:42:78:
4a:cb:66:f4:8a:9e:2e:bc:2a:80:7b:a2:53:70:ef:28:9f:6d:
7b:10:dd:c9:e7:58:bc:5c:44:55:0e:3f:0a:ee:c7:8c:85:3c:
5e:b1:42:de:d9:f6:9d:8b:2c:3b:90:d6:e1:50:81:17:e1:79:
c7:bd:26:4d:2e:54:c0:04:7f:a5:bb:26:32:b4:75:01:ff:08:
54:14:e0:5d:f9:b8:d1:7b:04:f8:68:40:14:02:5a:13:37:99:
7b:c4:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:39 2025 by rpki-client