Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d-zD6cT4c4JGURPQK54EHNYQqqg.roa
File: d-zD6cT4c4JGURPQK54EHNYQqqg.roa (raw, json)
Hash identifier: Krd4cBIt7kWpHLwqGV31up2HsN8czbu8KAV1bRDCHEA=
Subject key identifier: 77:EC:C3:E9:C4:F8:73:82:46:51:13:D0:2B:9E:04:1C:D6:10:AA:A8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D7879C3AE58B2A88A295BF2E941C60E4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d-zD6cT4c4JGURPQK54EHNYQqqg.roa
Signing time: Sat 23 Aug 2025 15:24:05 +0000
ROA not before: Sat 23 Aug 2025 15:24:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135040
IP address blocks: 31.56.66.0/24 maxlen: 24
31.57.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:87:9c:3a:e5:8b:2a:88:a2:95:bf:2e:94:1c:60:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 23 15:24:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77ecc3e9c4f87382465113d02b9e041cd610aaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:de:98:12:fa:fa:89:21:c3:78:e7:d0:e9:
8f:31:b2:08:de:5d:62:54:67:7b:cf:03:81:7c:48:
db:96:22:bd:ef:d6:00:55:b0:c6:7b:59:01:87:88:
3d:37:a4:ba:e6:45:f8:a8:2a:48:06:13:c3:0e:be:
34:01:b4:a4:87:0b:b4:a5:a6:16:92:d4:3d:6d:97:
e4:72:c9:00:12:eb:ea:77:1d:fc:63:df:9c:17:a0:
23:cf:77:8b:f7:81:ab:a2:51:59:bc:4e:3c:81:0a:
e2:8a:74:5e:8c:c9:7b:9f:79:e2:7b:93:93:28:55:
2f:43:45:cb:8a:59:80:6c:11:a9:27:fe:38:74:62:
f2:7c:2f:d5:58:84:59:77:1f:f2:9d:54:52:9e:05:
6c:d6:1b:75:24:ef:e6:8e:25:d2:b3:48:01:c2:78:
98:22:15:80:21:c4:87:f0:05:98:85:12:cc:2d:d1:
44:e2:c4:40:43:f6:93:a1:9d:ab:ff:97:69:fd:95:
9f:ad:c1:d9:63:26:59:8f:e8:1f:f7:7f:d5:0b:d6:
99:cf:be:4b:ab:c2:0c:0e:f2:ec:65:a1:ff:86:bb:
d9:e7:85:90:4e:7a:cc:3c:04:ef:e7:ff:d5:7c:23:
fd:9a:f1:fa:5b:3f:dc:81:2e:28:e7:a5:ad:9e:90:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EC:C3:E9:C4:F8:73:82:46:51:13:D0:2B:9E:04:1C:D6:10:AA:A8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d-zD6cT4c4JGURPQK54EHNYQqqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
31.57.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:cc:a0:33:82:e8:95:fe:8f:38:50:25:e7:cc:c2:78:68:bd:
27:f8:61:52:19:1b:84:84:a9:a7:1c:f3:bd:b9:60:b7:d5:c4:
9b:57:fe:40:f1:08:df:56:77:3e:c7:8f:07:c0:5e:9c:bc:be:
0e:00:b4:94:2d:1b:b7:68:3e:db:e7:80:75:61:5d:70:c6:00:
3a:87:f5:c9:d2:6f:15:a8:11:31:7e:f0:db:11:7a:7e:05:06:
f9:b9:a3:23:4b:4e:65:1e:07:1a:b0:05:80:04:32:f3:3e:7f:
2c:73:6b:95:53:ab:03:9f:c1:a9:b2:e5:73:b9:4a:81:e3:dc:
e2:17:de:9b:cb:9a:af:fc:79:17:e6:3c:bf:f9:df:41:88:57:
f7:e1:1e:3f:95:b2:c0:93:3a:0b:c3:a8:7c:06:4b:47:38:69:
cf:29:56:82:b0:84:16:09:e6:25:39:28:e1:88:ba:72:a0:92:
4f:a4:d1:32:ff:26:d0:42:f6:0c:8e:e6:4e:64:2c:4b:c0:a5:
f0:00:cd:6d:55:89:40:89:85:2b:05:27:08:f1:8e:4f:f8:17:
1a:a7:7d:f3:19:c7:d8:71:43:b3:9d:03:63:55:14:b3:e2:02:
44:18:4a:68:d6:6e:06:85:af:28:2e:ed:cf:f4:12:9e:f3:d3:
65:18:f5:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjXh5w65YsqiKKVvy6UHGDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODIzMTUyNDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2VjYzNlOWM0Zjg3MzgyNDY1MTEzZDAyYjllMDQxY2Q2MTBhYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YHemBL6+okhw3jn0OmPMbII3l1i
VGd7zwOBfEjbliK979YAVbDGe1kBh4g9N6S65kX4qCpIBhPDDr40AbSkhwu0paYW
ktQ9bZfkcskAEuvqdx38Y9+cF6Ajz3eL94GrolFZvE48gQriinRejMl7n3nie5OT
KFUvQ0XLilmAbBGpJ/44dGLyfC/VWIRZdx/ynVRSngVs1ht1JO/mjiXSs0gBwniY
IhWAIcSH8AWYhRLMLdFE4sRAQ/aToZ2r/5dp/ZWfrcHZYyZZj+gf93/VC9aZz75L
q8IMDvLsZaH/hrvZ54WQTnrMPATv5//VfCP9mvH6Wz/cgS4o56WtnpD7swIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHfsw+nE+HOCRlET0CueBBzWEKqoMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZC16RDZjVDRjNEpHVVJQUUs1NEVITllRcXFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhCAwQA
Hzn4MA0GCSqGSIb3DQEBCwUAA4IBAQBrzKAzguiV/o84UCXnzMJ4aL0n+GFSGRuE
hKmnHPO9uWC31cSbV/5A8QjfVnc+x48HwF6cvL4OALSULRu3aD7b54B1YV1wxgA6
h/XJ0m8VqBExfvDbEXp+BQb5uaMjS05lHgcasAWABDLzPn8sc2uVU6sDn8GpsuVz
uUqB49ziF96by5qv/HkX5jy/+d9BiFf34R4/lbLAkzoLw6h8BktHOGnPKVaCsIQW
CeYlOSjhiLpyoJJPpNEy/ybQQvYMjuZOZCxLwKXwAM1tVYlAiYUrBScI8Y5P+Bca
p33zGcfYcUOznQNjVRSz4gJEGEpo1m4Gha8oLu3P9BKe89NlGPVN
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:02:36 2025 by rpki-client