Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5L2i95rwIIsXQxUd9pIxpfbcyzo.roa
File: 5L2i95rwIIsXQxUd9pIxpfbcyzo.roa (raw, json)
Hash identifier: bsoXR3GmFWMnvSCAUn5yw0MsnBkVDqcuNTFoYnUZUsM=
Subject key identifier: E4:BD:A2:F7:9A:F0:20:8B:17:43:15:1D:F6:92:31:A5:F6:DC:CB:3A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199D91C0D988F88DF378EF9048AA39FFE4D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5L2i95rwIIsXQxUd9pIxpfbcyzo.roa
Signing time: Sun 12 Oct 2025 15:48:38 +0000
ROA not before: Sun 12 Oct 2025 15:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.116.0/24 maxlen: 24
31.56.127.0/24 maxlen: 24
31.57.192.0/24 maxlen: 24
31.57.193.0/24 maxlen: 24
31.57.195.0/24 maxlen: 24
31.57.232.0/24 maxlen: 24
31.57.233.0/24 maxlen: 24
31.57.234.0/24 maxlen: 24
31.57.235.0/24 maxlen: 24
31.58.141.0/24 maxlen: 24
31.58.145.0/24 maxlen: 24
31.58.148.0/24 maxlen: 24
31.58.149.0/24 maxlen: 24
31.58.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d9:1c:0d:98:8f:88:df:37:8e:f9:04:8a:a3:9f:fe:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 12 15:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4bda2f79af0208b1743151df69231a5f6dccb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:69:2c:42:ab:41:a2:4a:5a:e7:cb:88:38:
93:e9:80:e0:f0:e8:ec:db:02:44:81:3e:62:3b:53:
8b:3f:22:2b:74:a5:b4:14:54:d7:b2:c9:72:8c:7f:
f3:07:f3:c8:05:e5:85:6a:ac:6d:52:57:b3:a3:3e:
da:af:aa:c4:54:ec:7a:8d:dc:7c:70:4f:ab:2c:ba:
0e:40:23:0d:d9:94:09:ba:80:84:ba:2c:58:40:17:
f3:27:47:e1:01:8d:9a:64:20:c8:f7:04:b6:2c:51:
33:bc:94:28:2f:f5:61:8f:10:dd:b2:fd:e4:39:47:
79:2c:33:d9:b4:01:93:67:13:fa:54:b3:29:e2:6e:
79:9e:21:d5:21:0e:6c:86:86:e4:22:a5:64:9b:52:
7f:ef:ee:df:f4:c0:f2:6c:54:60:9e:c4:ad:29:2c:
66:83:71:56:52:ca:7d:5d:05:31:9c:38:ba:3d:bd:
61:07:25:41:a9:4d:d9:c1:91:7d:24:cc:bf:1b:28:
13:9f:19:c2:d7:ad:db:9d:ae:20:7b:d1:b6:35:33:
0c:de:37:a1:2c:b0:42:25:70:10:cc:d9:e3:99:40:
ce:91:12:bd:bd:fa:4c:c0:36:ac:21:59:5d:5f:59:
fa:6b:d2:23:8c:21:d6:a0:1b:8c:53:04:22:7d:68:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:A2:F7:9A:F0:20:8B:17:43:15:1D:F6:92:31:A5:F6:DC:CB:3A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/5L2i95rwIIsXQxUd9pIxpfbcyzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.116.0/24
31.56.127.0/24
31.57.192.0/23
31.57.195.0/24
31.57.232.0/22
31.58.141.0/24
31.58.145.0/24
31.58.148.0/23
31.58.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b6:3a:f7:99:12:fb:13:c6:a0:fc:a5:8d:f7:a3:d3:e2:46:
b4:a6:66:64:e3:04:a8:6d:2a:60:4c:6a:ba:3d:19:51:01:84:
c7:a7:ba:15:9d:65:e3:be:9f:18:20:68:e7:2f:59:d5:59:32:
33:36:9b:5d:f4:1a:f2:cf:54:b8:ce:a5:c8:a1:05:37:f1:30:
42:f7:da:f2:2a:ea:e8:da:63:b8:49:c9:e1:b0:32:21:b9:95:
11:d4:24:05:8a:69:19:7b:94:e0:99:71:32:7c:19:ab:48:43:
08:92:73:69:de:53:0a:dd:31:41:1b:0a:a4:76:8b:65:d9:f3:
1e:0c:2f:bb:1a:3d:0b:b4:17:e2:e6:ec:b7:60:9e:be:d7:84:
97:fd:dc:fc:0e:22:22:6b:8a:fe:5a:ff:f4:cd:de:e4:75:f0:
22:95:57:fe:23:c7:8c:23:31:01:10:ba:2f:25:5d:d4:71:31:
c8:fd:7a:e8:a4:5e:54:31:1f:bb:d2:17:23:c4:4f:37:d6:43:
6e:02:78:3c:92:75:9f:d9:e2:5f:41:89:23:8a:4c:66:f6:79:
ab:d5:61:b4:03:83:36:ed:a5:44:21:7e:b0:a0:d9:40:48:83:
b5:2f:41:6b:3c:7e:c0:0e:43:21:e9:b0:21:a3:09:1b:b7:06:
a6:02:e3:24
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZnZHA2Yj4jfN475BIqjn/5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDEyMTU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGJkYTJmNzlhZjAyMDhiMTc0MzE1MWRmNjkyMzFhNWY2ZGNjYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HdpLEKrQaJKWufLiDiT6YDg8Ojs
2wJEgT5iO1OLPyIrdKW0FFTXsslyjH/zB/PIBeWFaqxtUlezoz7ar6rEVOx6jdx8
cE+rLLoOQCMN2ZQJuoCEuixYQBfzJ0fhAY2aZCDI9wS2LFEzvJQoL/VhjxDdsv3k
OUd5LDPZtAGTZxP6VLMp4m55niHVIQ5shobkIqVkm1J/7+7f9MDybFRgnsStKSxm
g3FWUsp9XQUxnDi6Pb1hByVBqU3ZwZF9JMy/GygTnxnC163bna4ge9G2NTMM3jeh
LLBCJXAQzNnjmUDOkRK9vfpMwDasIVldX1n6a9IjjCHWoBuMUwQifWgdYQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFOS9ovea8CCLF0MVHfaSMaX23Ms6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNUwyaTk1cndJSXNYUXhVZDlwSXhwZmJjeXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAHzg7AwQA
Hzh0AwQAHzh/AwQBHznAAwQAHznDAwQCHznoAwQAHzqNAwQAHzqRAwQBHzqUAwQA
HzqXMA0GCSqGSIb3DQEBCwUAA4IBAQALtjr3mRL7E8ag/KWN96PT4ka0pmZk4wSo
bSpgTGq6PRlRAYTHp7oVnWXjvp8YIGjnL1nVWTIzNptd9Bryz1S4zqXIoQU38TBC
99ryKuro2mO4ScnhsDIhuZUR1CQFimkZe5TgmXEyfBmrSEMIknNp3lMK3TFBGwqk
dotl2fMeDC+7Gj0LtBfi5uy3YJ6+14SX/dz8DiIia4r+Wv/0zd7kdfAilVf+I8eM
IzEBELovJV3UcTHI/XropF5UMR+70hcjxE831kNuAng8knWf2eJfQYkjikxm9nmr
1WG0A4M27aVEIX6woNlASIO1L0FrPH7ADkMh6bAhowkbtwamAuMk
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:57 2025 by rpki-client