Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PI8lE27Mg9dwumavhrgfKLoLozY.roa
File: PI8lE27Mg9dwumavhrgfKLoLozY.roa (raw, json)
Hash identifier: RwyoixRb1YsM1VOxQmSMelxotrvlWlEeGUWVXEXUvno=
Subject key identifier: 3C:8F:25:13:6E:CC:83:D7:70:BA:66:AF:86:B8:1F:28:BA:0B:A3:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198B387E9B892175275FBE3F8D82469C661
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PI8lE27Mg9dwumavhrgfKLoLozY.roa
Signing time: Sat 16 Aug 2025 15:38:05 +0000
ROA not before: Sat 16 Aug 2025 15:38:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.56.91.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b3:87:e9:b8:92:17:52:75:fb:e3:f8:d8:24:69:c6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 16 15:38:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c8f25136ecc83d770ba66af86b81f28ba0ba336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:3c:d5:dc:bf:d7:db:46:e1:29:47:e3:65:
f1:12:60:b1:6d:18:02:eb:e3:4b:55:87:3e:b5:90:
4c:0d:4c:82:c7:e5:27:ec:d9:e9:d1:1e:06:5c:d6:
7d:b6:be:39:9b:14:a8:83:d0:85:6f:93:26:4f:11:
81:5d:c7:33:c3:7f:b1:ec:c9:d5:8e:1e:48:2e:da:
af:82:0e:9e:51:33:4d:2d:e3:0a:7a:1e:bf:e8:26:
86:17:ee:12:14:5c:9b:7d:ac:ac:83:71:bb:5b:00:
96:a4:c3:89:e4:03:91:6a:78:a1:b4:1d:f4:7e:14:
07:fe:6f:55:c3:b8:1f:93:45:2f:94:be:c3:65:73:
f1:9c:85:69:07:69:73:20:da:db:d6:eb:89:10:53:
52:df:b8:6c:03:af:1d:79:d7:f4:9a:2f:f1:b0:56:
0f:d2:52:14:f0:93:2a:79:96:20:95:63:87:6d:e3:
1c:c5:f2:80:8f:47:30:f8:a9:41:12:c8:6a:6b:15:
e6:0c:3a:18:4a:b1:f0:c7:ea:4f:89:53:3e:07:98:
6f:b6:c3:d0:27:d6:cb:4b:36:4e:af:1a:94:e0:27:
2c:60:75:63:07:8b:ab:2b:1c:93:5f:d7:fe:83:a5:
4f:72:2d:4a:ad:b9:72:43:49:7e:9b:70:97:6c:67:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:25:13:6E:CC:83:D7:70:BA:66:AF:86:B8:1F:28:BA:0B:A3:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PI8lE27Mg9dwumavhrgfKLoLozY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.72.0/24
31.56.84.0/24
31.56.91.0/24
31.57.11.0/24
31.57.104.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
20:af:8e:55:da:a6:25:c7:19:ce:23:80:8f:bd:8d:70:e1:39:
dc:4b:b6:6c:c4:ff:ec:9e:85:29:07:c9:0c:98:5e:b4:99:58:
05:8d:e0:29:86:1b:5f:d2:28:9a:54:68:a8:ff:f0:18:f5:5d:
79:f5:75:66:f7:98:e4:b1:5b:80:e5:2a:eb:aa:2f:64:d1:6c:
a5:d8:f9:86:49:bb:9c:ce:21:5f:4a:27:9f:e2:4f:83:ac:ac:
ad:59:2f:50:20:1f:cf:0f:f2:99:7b:ff:01:f7:43:1d:16:ed:
ae:89:6b:e4:f0:8c:3b:12:d2:6a:cc:b7:c2:d5:a6:93:7b:0f:
b9:4e:de:d4:15:e6:7e:0d:0e:db:42:92:57:b4:63:2f:be:fa:
39:fd:ee:93:6b:3a:1b:5d:93:39:e4:e5:2a:e9:e9:f3:1b:97:
ce:ed:f8:bc:25:1a:2a:8d:16:a4:ea:50:ef:e4:28:e6:f4:e6:
4a:55:ce:f6:7c:0d:89:70:85:d9:30:e3:d5:2d:5c:79:5a:32:
e1:f0:ea:64:fe:2f:17:e3:d8:93:05:2c:fa:d9:c0:55:e4:38:
f2:dd:34:d5:3d:e9:f4:80:ad:36:9a:12:be:14:e2:81:b3:3c:
15:cb:d6:89:8b:8a:ba:b7:e4:4f:51:c1:14:c5:29:02:4c:b5:
1d:d9:6c:4a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZizh+m4khdSdfvj+NgkacZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODE2MTUzODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzhmMjUxMzZlY2M4M2Q3NzBiYTY2YWY4NmI4MWYyOGJhMGJhMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiog81dy/19tG4SlH42XxEmCxbRgC
6+NLVYc+tZBMDUyCx+Un7Nnp0R4GXNZ9tr45mxSog9CFb5MmTxGBXcczw3+x7MnV
jh5ILtqvgg6eUTNNLeMKeh6/6CaGF+4SFFybfaysg3G7WwCWpMOJ5AORanihtB30
fhQH/m9Vw7gfk0UvlL7DZXPxnIVpB2lzINrb1uuJEFNS37hsA68dedf0mi/xsFYP
0lIU8JMqeZYglWOHbeMcxfKAj0cw+KlBEshqaxXmDDoYSrHwx+pPiVM+B5hvtsPQ
J9bLSzZOrxqU4CcsYHVjB4urKxyTX9f+g6VPci1KrblyQ0l+m3CXbGdbqQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDyPJRNuzIPXcLpmr4a4Hyi6C6M2MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvUEk4bEUyN01nOWR3dW1hdmhyZ2ZLTG9Mb3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHzhIAwQA
HzhUAwQAHzhbAwQAHzkLAwQAHzloAwQBHzpYMA0GCSqGSIb3DQEBCwUAA4IBAQAg
r45V2qYlxxnOI4CPvY1w4TncS7ZsxP/snoUpB8kMmF60mVgFjeAphhtf0iiaVGio
//AY9V159XVm95jksVuA5Srrqi9k0Wyl2PmGSbucziFfSief4k+DrKytWS9QIB/P
D/KZe/8B90MdFu2uiWvk8Iw7EtJqzLfC1aaTew+5Tt7UFeZ+DQ7bQpJXtGMvvvo5
/e6TazobXZM55OUq6enzG5fO7fi8JRoqjRak6lDv5Cjm9OZKVc72fA2JcIXZMOPV
LVx5WjLh8Opk/i8X49iTBSz62cBV5Djy3TTVPen0gK02mhK+FOKBszwVy9aJi4q6
t+RPUcEUxSkCTLUd2WxK
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:45 2025 by rpki-client