Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-MmyQKw9NG9ZenqsihB-3_kzQ8.roa
File: K-MmyQKw9NG9ZenqsihB-3_kzQ8.roa (raw, json)
Hash identifier: j7P8oXBkKI089kTRwJMHIvsLUrTAtTIgMWQ7Epx9/v8=
Subject key identifier: 2B:E3:26:C9:02:B0:F4:D1:BD:65:E9:EA:B2:28:41:FB:7F:E4:CD:0F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D2B0E6465A427E47CCCF22DAF97851F1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-MmyQKw9NG9ZenqsihB-3_kzQ8.roa
Signing time: Fri 22 Aug 2025 16:51:05 +0000
ROA not before: Fri 22 Aug 2025 16:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199414
IP address blocks: 31.56.0.0/24 maxlen: 24
31.57.96.0/24 maxlen: 24
31.58.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d2:b0:e6:46:5a:42:7e:47:cc:cf:22:da:f9:78:51:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 22 16:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2be326c902b0f4d1bd65e9eab22841fb7fe4cd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:aa:e2:2e:25:73:80:ae:ac:4d:1b:34:45:
37:11:7d:8a:99:7c:de:82:46:e7:4f:41:bc:75:13:
2a:d9:df:10:81:68:f6:98:f0:20:01:91:a1:c2:42:
07:55:d1:04:15:fe:e2:26:2a:8c:f6:71:0f:68:8e:
f0:2d:ff:f9:16:24:2d:07:44:ea:65:dd:ee:d5:6f:
9d:7b:9a:40:a9:03:5f:a2:be:18:46:52:81:8f:43:
49:e2:22:c7:cf:8b:e3:ba:1a:22:36:58:39:ba:2b:
1f:3b:02:7a:fa:fd:2e:35:d1:6f:b0:7f:63:d4:fa:
81:0a:e6:f4:60:e8:7c:ff:ca:a4:c2:fb:ac:15:2f:
8d:e1:f5:24:9c:d7:8f:6d:bc:48:dd:07:7e:19:41:
d6:5d:7e:0d:2a:0d:72:1d:8f:0b:b7:32:9d:e3:7c:
ec:eb:c3:9b:d8:00:61:25:d2:90:3b:bc:d4:5a:6a:
ad:cc:43:58:e9:02:24:de:c5:cc:ed:48:55:91:7d:
d1:2e:ad:88:90:ea:eb:f0:72:34:6f:e0:5c:2e:3a:
72:03:d5:59:29:7f:10:5b:b0:15:83:5f:2c:f0:21:
b8:44:b3:e8:ba:65:8e:69:dd:c7:04:6e:ec:e0:18:
26:b3:c8:c3:38:1c:ae:17:a3:b0:c4:20:76:9e:db:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:26:C9:02:B0:F4:D1:BD:65:E9:EA:B2:28:41:FB:7F:E4:CD:0F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K-MmyQKw9NG9ZenqsihB-3_kzQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.0.0/24
31.57.96.0/24
31.58.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d9:52:f0:82:55:c9:1d:dc:f2:f7:0b:ce:9c:21:ec:61:d9:
48:45:ec:4a:ab:b4:d9:8f:69:81:a5:17:7a:2e:79:b3:b9:c3:
fb:43:d8:a8:d2:48:4f:85:1f:9c:5c:8c:cb:2e:e8:27:9a:2c:
73:7f:c5:34:7f:3f:7f:1b:44:98:5f:69:8b:d8:f5:8f:5b:2a:
d8:eb:b3:68:4c:97:97:47:9a:01:5a:48:d3:bc:d8:c9:78:52:
a1:8f:45:11:62:32:d0:d8:9d:e0:a1:70:a4:6b:0b:37:22:c2:
57:f5:d4:af:46:c4:d3:0a:4b:64:e8:13:44:57:b6:4e:bc:d5:
9e:01:05:18:76:ef:55:b5:e2:e7:9b:74:0f:df:a9:95:dd:24:
32:96:68:69:61:52:54:b1:cc:58:5b:d0:47:67:da:05:0a:af:
51:72:70:b8:ec:d6:3a:26:08:ea:fd:cd:1f:79:e3:fe:39:81:
64:8a:8f:79:11:d4:7c:03:96:96:a3:46:55:d6:44:46:ba:2c:
47:81:19:e0:75:d9:13:4b:3a:04:6b:f9:3e:f2:b7:c0:e2:a3:
76:a8:2d:f9:97:81:1c:dc:92:d6:36:30:67:08:94:22:a6:5c:
65:ba:01:09:3b:c9:fd:1c:64:7d:21:ea:6a:6f:2e:e4:5a:3e:
23:13:05:e0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZjSsOZGWkJ+R8zPItr5eFHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODIyMTY1MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmUzMjZjOTAyYjBmNGQxYmQ2NWU5ZWFiMjI4NDFmYjdmZTRjZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKqq4i4lc4CurE0bNEU3EX2KmXze
gkbnT0G8dRMq2d8QgWj2mPAgAZGhwkIHVdEEFf7iJiqM9nEPaI7wLf/5FiQtB0Tq
Zd3u1W+de5pAqQNfor4YRlKBj0NJ4iLHz4vjuhoiNlg5uisfOwJ6+v0uNdFvsH9j
1PqBCub0YOh8/8qkwvusFS+N4fUknNePbbxI3Qd+GUHWXX4NKg1yHY8LtzKd43zs
68Ob2ABhJdKQO7zUWmqtzENY6QIk3sXM7UhVkX3RLq2IkOrr8HI0b+BcLjpyA9VZ
KX8QW7AVg18s8CG4RLPoumWOad3HBG7s4Bgms8jDOByuF6OwxCB2ntslSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCvjJskCsPTRvWXp6rIoQft/5M0PMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSy1NbXlRS3c5Tkc5WmVucXNpaEItM19relE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzgAAwQA
HzlgAwQAHzrkMA0GCSqGSIb3DQEBCwUAA4IBAQBN2VLwglXJHdzy9wvOnCHsYdlI
RexKq7TZj2mBpRd6LnmzucP7Q9io0khPhR+cXIzLLugnmixzf8U0fz9/G0SYX2mL
2PWPWyrY67NoTJeXR5oBWkjTvNjJeFKhj0URYjLQ2J3goXCkaws3IsJX9dSvRsTT
Cktk6BNEV7ZOvNWeAQUYdu9VteLnm3QP36mV3SQylmhpYVJUscxYW9BHZ9oFCq9R
cnC47NY6Jgjq/c0feeP+OYFkio95EdR8A5aWo0ZV1kRGuixHgRngddkTSzoEa/k+
8rfA4qN2qC35l4Ec3JLWNjBnCJQiplxlugEJO8n9HGR9Iepqby7kWj4jEwXg
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:33:56 2025 by rpki-client