Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ik32VmVDeTUoNm9oupzgMC8VVTw.roa
File: ik32VmVDeTUoNm9oupzgMC8VVTw.roa (raw, json)
Hash identifier: DP6SwtQYue7A76UjHc+mo9zh2eLKFznAkuYE1RThpZw=
Subject key identifier: 8A:4D:F6:56:65:43:79:35:28:36:6F:68:BA:9C:E0:30:2F:15:55:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199567203C239AFB8340CCB392D8F8E5A97
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ik32VmVDeTUoNm9oupzgMC8VVTw.roa
Signing time: Wed 17 Sep 2025 06:52:16 +0000
ROA not before: Wed 17 Sep 2025 06:52:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399073
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.115.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.216.0/24 maxlen: 24
31.56.221.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.224.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.40.0/24 maxlen: 24
31.57.52.0/24 maxlen: 24
31.57.67.0/24 maxlen: 24
31.57.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:72:03:c2:39:af:b8:34:0c:cb:39:2d:8f:8e:5a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 17 06:52:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a4df6566543793528366f68ba9ce0302f15553c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:29:93:5b:64:5e:38:9d:44:e3:98:85:81:
1c:ed:c5:1d:b2:17:47:ee:e3:0b:a7:27:fa:22:ac:
a5:8a:f8:f7:31:e6:16:24:d5:fe:f8:3b:75:72:6d:
2f:ed:fb:2c:1a:a5:58:71:60:ff:fd:7c:17:d9:b3:
e8:44:f3:3f:88:86:6f:b4:a4:06:2e:e7:8b:95:b4:
36:6d:3a:54:e5:a2:ab:41:a7:41:64:21:0d:40:22:
42:6c:0e:90:e5:b3:9e:e9:b6:49:ee:d6:5a:61:cc:
40:1c:ac:63:bc:3f:b3:e1:2d:b7:9a:2b:b3:29:ec:
20:97:0f:03:5f:96:d6:67:d1:91:e5:b2:39:1e:0a:
fd:7c:3f:e6:d7:c9:88:21:44:be:58:8f:57:fc:43:
8c:cf:84:ae:7f:df:38:3d:0a:a4:16:03:96:39:91:
4f:8a:42:6e:e6:bd:37:d1:06:0e:a7:95:97:c8:a8:
b7:e4:aa:56:4d:c3:00:70:c0:0e:fb:d7:0f:c2:5d:
f8:44:d8:c2:11:f9:bb:1d:74:13:01:dc:1a:98:7b:
8a:80:e4:a9:8f:ad:60:5d:4e:17:ef:5f:52:ce:18:
51:c1:d1:6c:5f:ef:9a:bd:3e:df:1b:83:c3:02:ff:
7e:5e:31:69:6c:77:ff:47:1d:e8:12:e7:6b:4c:04:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4D:F6:56:65:43:79:35:28:36:6F:68:BA:9C:E0:30:2F:15:55:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ik32VmVDeTUoNm9oupzgMC8VVTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.115.0/24
31.56.210.0/24
31.56.212.0/24
31.56.216.0/24
31.56.221.0/24
31.56.223.0-31.56.224.255
31.56.234.0/23
31.57.40.0/24
31.57.52.0/24
31.57.67.0/24
31.57.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f4:e8:2f:d9:c1:b0:3c:5f:9a:fd:5b:c1:4f:3d:5d:bb:5d:
98:ef:fc:24:42:cb:60:51:39:dd:2b:6a:5f:e2:ed:ba:f0:33:
b9:db:8e:c4:17:c9:28:78:c8:eb:32:da:a0:1b:75:6a:28:3d:
b4:72:a9:a5:96:f6:35:17:48:58:00:0b:dd:0b:37:ff:e7:84:
a8:61:ab:20:48:75:de:8d:0f:42:94:aa:60:4a:49:17:9a:0e:
d7:c6:5b:4d:c0:38:41:27:b6:45:6f:5a:c0:0b:d2:75:dd:55:
c0:2f:c4:86:b3:1e:cc:31:ff:76:4c:a5:03:67:2a:38:51:ed:
8c:3f:13:de:27:af:db:34:12:37:7d:7b:85:df:dd:e3:e5:72:
56:2e:31:7c:fb:38:d6:6e:44:dc:44:9a:7e:72:d8:9c:72:dc:
29:b0:b0:c9:90:28:70:b5:e9:f3:fa:95:cf:b2:4f:ab:7f:01:
f6:4e:22:03:3a:8a:8e:9d:36:4a:37:05:3d:0e:82:f1:36:bb:
77:e8:1d:77:1d:41:08:a9:11:c1:d4:fa:1c:eb:d4:64:ec:d0:
bb:18:ff:c6:55:17:2c:79:de:0d:c0:08:03:d0:a7:ea:69:bf:
d5:02:b0:56:a8:82:d7:73:07:c7:25:4a:7c:4d:d4:da:61:d5:
e3:8a:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:10 2025 by rpki-client