Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dUMHKBnx7zhsnnOJfN8Uwah3Lmc.roa
File: dUMHKBnx7zhsnnOJfN8Uwah3Lmc.roa (raw, json)
Hash identifier: 4r3hjmTfwoh7aHy4LufolgIhUT2wsQCCPvMUED93nwI=
Subject key identifier: 75:43:07:28:19:F1:EF:38:6C:9E:73:89:7C:DF:14:C1:A8:77:2E:67
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199E40381ED92E1F0BC293DE259AACEEC98
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dUMHKBnx7zhsnnOJfN8Uwah3Lmc.roa
Signing time: Tue 14 Oct 2025 18:37:39 +0000
ROA not before: Tue 14 Oct 2025 18:37:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.196.0/24 maxlen: 24
31.56.197.0/24 maxlen: 24
31.56.204.0/24 maxlen: 24
31.56.205.0/24 maxlen: 24
31.56.206.0/24 maxlen: 24
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.26.0/24 maxlen: 24
31.57.27.0/24 maxlen: 24
31.57.28.0/23 maxlen: 24
31.57.28.0/24 maxlen: 24
31.57.29.0/24 maxlen: 24
31.57.46.0/24 maxlen: 24
31.57.47.0/24 maxlen: 24
31.57.61.0/24 maxlen: 24
31.57.62.0/24 maxlen: 24
31.57.63.0/24 maxlen: 24
31.57.92.0/24 maxlen: 24
31.57.93.0/24 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.220.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.40.0/24 maxlen: 24
31.59.41.0/24 maxlen: 24
31.59.120.0/24 maxlen: 24
31.59.121.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/24 maxlen: 24
31.59.139.0/24 maxlen: 24
31.59.170.0/24 maxlen: 24
31.59.174.0/24 maxlen: 24
31.59.175.0/24 maxlen: 24
94.183.182.0/24 maxlen: 24
94.183.183.0/24 maxlen: 24
94.183.184.0/24 maxlen: 24
94.183.185.0/24 maxlen: 24
94.183.186.0/24 maxlen: 24
94.183.187.0/24 maxlen: 24
94.183.188.0/24 maxlen: 24
94.183.189.0/24 maxlen: 24
94.183.190.0/24 maxlen: 24
94.183.191.0/24 maxlen: 24
94.183.232.0/24 maxlen: 24
94.183.233.0/24 maxlen: 24
94.183.234.0/24 maxlen: 24
94.183.235.0/24 maxlen: 24
217.60.36.0/24 maxlen: 24
217.60.37.0/24 maxlen: 24
217.60.38.0/24 maxlen: 24
217.60.39.0/24 maxlen: 24
217.60.248.0/24 maxlen: 24
217.60.249.0/24 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:03:81:ed:92:e1:f0:bc:29:3d:e2:59:aa:ce:ec:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 18:37:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7543072819f1ef386c9e73897cdf14c1a8772e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:da:a7:f8:d4:d7:8a:d6:07:0a:1c:44:dc:
f2:ec:21:7a:18:0b:2c:bf:b3:6c:33:d3:7c:f4:5f:
dd:24:b5:0e:a7:d9:62:bd:96:b7:38:d1:3d:6e:ee:
56:fc:b8:01:f6:29:5a:2a:9a:96:90:9d:a7:f3:34:
2f:2e:e4:f7:65:88:40:50:c8:c0:d0:9a:dd:b7:a0:
6b:53:8f:b3:34:d1:b3:1e:9d:35:ff:dd:9d:3c:7e:
86:33:5b:97:a5:da:1d:a5:46:f5:8d:5d:89:34:03:
85:2d:23:e8:f4:5d:bc:e5:c1:3a:b4:43:1d:0b:41:
53:c3:7f:77:b1:11:76:f6:7b:59:06:80:f7:21:e7:
22:ee:75:1b:ff:36:b5:5a:f4:58:4d:e2:47:da:da:
a2:96:1a:32:3b:a0:82:84:96:86:ba:8c:67:ab:8a:
aa:a6:d3:8b:0a:ca:7c:f7:b8:23:f4:f6:82:ac:75:
3c:d7:c8:26:17:8c:60:df:1c:1f:17:9f:d9:86:ba:
a4:44:c3:90:96:bf:ab:9c:46:48:25:6b:79:13:4f:
38:37:61:e9:b1:9b:06:3f:21:1c:e1:bf:79:86:c9:
d6:33:b5:75:a5:5c:db:cb:ae:a7:67:6f:58:fa:2a:
c0:64:04:b7:90:6e:38:15:8d:26:c2:db:d2:be:02:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:07:28:19:F1:EF:38:6C:9E:73:89:7C:DF:14:C1:A8:77:2E:67
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dUMHKBnx7zhsnnOJfN8Uwah3Lmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.27.0-31.56.28.255
31.56.48.0/24
31.56.113.0/24
31.56.117.0/24
31.56.146.0/24
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0/24
31.57.24.0/24
31.57.26.0-31.57.29.255
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.105.0-31.57.109.255
31.57.118.0/24
31.57.157.0-31.57.158.255
31.58.50.0/24
31.58.87.0/24
31.58.134.0/24
31.58.171.0/24
31.58.220.0/24
31.58.226.0/24
31.59.40.0/23
31.59.120.0/23
31.59.136.0/24
31.59.138.0/23
31.59.170.0/24
31.59.174.0/23
94.183.182.0-94.183.191.255
94.183.232.0/22
217.60.36.0/22
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2f:f2:0b:4b:82:33:ee:b3:e3:c4:8d:3f:0b:60:26:65:90:
a3:27:16:72:4a:2a:6d:84:e6:fa:ad:75:a0:11:91:f0:5d:21:
6a:27:ba:ca:49:52:9d:1b:93:97:01:47:be:20:cc:60:9f:42:
8b:1b:b6:75:85:0f:33:48:2e:23:3b:0b:1d:78:36:9f:01:5e:
30:e3:ca:87:ff:69:58:a6:45:7a:8c:49:76:54:68:40:bf:e9:
e1:74:61:a8:e3:ec:0c:b7:32:88:65:b2:22:51:2f:bc:e5:22:
f7:9d:d5:72:61:e0:4a:1d:b6:53:9b:19:9c:e5:a8:f4:f5:01:
df:57:fd:ad:fa:e2:8b:09:14:38:60:c4:45:8b:42:bb:5f:5c:
af:92:be:59:68:ec:e9:7a:5f:c8:e9:83:d0:89:3b:62:e5:81:
65:8c:f1:17:7d:35:31:b2:18:16:55:d2:3f:86:49:cc:ab:ca:
99:50:23:6b:0e:5c:b5:b1:e8:cf:b7:d4:5e:a9:cc:20:c2:7a:
d1:d8:8f:09:27:43:66:63:b6:57:92:a2:37:73:70:bc:ae:f2:
11:92:27:3a:f5:b0:03:2f:fa:e8:13:b8:56:aa:98:4a:8e:ca:
be:b5:da:1b:f6:8f:15:21:f9:ea:61:62:6d:55:27:e0:83:8d:
39:06:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:23:12 2025 by rpki-client