Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lYq5zRj1jROZ9H63QXi1spI0vl4.roa
File: lYq5zRj1jROZ9H63QXi1spI0vl4.roa (raw, json)
Hash identifier: xxiIYbZXOwUHmR9j60WHetjTNzP6kRh22jqGIXvLAqg=
Subject key identifier: 95:8A:B9:CD:18:F5:8D:13:99:F4:7E:B7:41:78:B5:B2:92:34:BE:5E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199F897C30C50E8B962B046931B3C7F3E6F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lYq5zRj1jROZ9H63QXi1spI0vl4.roa
Signing time: Sat 18 Oct 2025 18:31:59 +0000
ROA not before: Sat 18 Oct 2025 18:31:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.77.0/24 maxlen: 24
31.56.190.0/24 maxlen: 24
31.56.219.0/24 maxlen: 24
31.57.161.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:97:c3:0c:50:e8:b9:62:b0:46:93:1b:3c:7f:3e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 18 18:31:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=958ab9cd18f58d1399f47eb74178b5b29234be5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:de:11:8b:8c:46:8d:79:08:22:d3:f5:f0:
e5:69:d2:f2:7a:95:07:ea:16:ee:d0:da:b5:a1:21:
2e:5a:ee:7f:ce:c3:47:6e:58:0c:59:96:c8:fb:1b:
03:e8:53:d9:49:5f:f9:72:bf:12:e4:44:49:41:1b:
0d:4c:f0:0e:c5:48:b8:8a:d1:39:c4:4c:3c:13:41:
1f:54:db:6a:26:b4:76:2b:b5:4e:9d:00:c7:5c:22:
5d:2e:5e:7e:9d:5b:18:75:2d:35:1d:5f:c6:a1:f2:
9c:4e:8e:13:d2:d9:76:d7:a5:66:f7:25:ba:bc:6d:
77:b5:1c:38:51:ec:14:ac:40:55:7c:ba:5d:47:99:
19:f4:cb:19:a7:55:9b:cc:8c:15:d6:bf:4a:ca:5f:
bc:10:1c:36:98:37:91:c0:c4:20:34:47:c5:b2:67:
57:42:9f:35:9d:9a:88:15:4e:18:66:a3:4d:e1:0b:
72:ae:f6:08:62:a6:dc:2f:3c:c2:28:2e:9c:75:a0:
3b:a0:df:6c:f4:74:34:77:c6:33:f9:f9:10:73:f0:
75:4d:b0:3e:41:1b:c5:3d:6f:5f:6e:b4:45:55:60:
31:8c:6b:1e:12:2b:57:fc:e5:1c:b8:12:6f:61:cf:
9e:b2:b0:bc:39:44:cf:57:34:6e:00:e1:6f:bc:7b:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8A:B9:CD:18:F5:8D:13:99:F4:7E:B7:41:78:B5:B2:92:34:BE:5E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lYq5zRj1jROZ9H63QXi1spI0vl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.77.0/24
31.56.190.0/24
31.56.219.0/24
31.57.161.0/24
31.57.199.0/24
31.59.68.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fc:94:bc:8c:7b:e1:65:52:fe:20:4b:29:c4:07:10:80:0f:
e7:d1:91:77:74:13:20:53:13:c9:6e:e7:46:36:5f:b6:1d:53:
cd:d0:1f:b9:ef:67:0b:0c:86:91:09:09:9a:2f:87:d1:24:76:
a4:5e:f1:12:07:b1:a9:0e:fd:88:13:f5:3a:f5:ca:9d:81:c0:
e3:14:3b:11:42:85:67:11:ef:4d:b6:79:74:c2:2a:ef:9c:b7:
2e:2d:72:5b:e3:68:9e:b5:9d:8c:3f:38:c3:65:b9:88:fa:c5:
c3:b8:16:9f:8d:22:87:e1:44:a1:56:71:fb:b3:7d:32:48:c1:
90:79:a1:a8:77:82:02:83:8d:34:bf:43:57:0d:7e:bc:19:aa:
dd:06:54:80:4c:44:4b:fc:98:4c:66:8d:51:ba:95:a0:69:27:
bf:0f:90:62:2e:4b:f9:78:bd:fc:8c:2e:ec:2e:71:2d:4e:08:
44:72:f9:ba:74:54:3c:72:86:ca:4a:b9:fe:83:7e:68:30:13:
d2:81:12:30:eb:34:c4:64:65:a1:9d:57:17:c1:c3:e4:f3:23:
a2:69:52:1c:f4:09:ec:a5:08:49:32:41:51:a9:c4:83:c3:42:
fe:a3:49:c5:d9:84:5e:8e:03:c2:f3:1a:6c:d8:c9:de:91:0c:
81:20:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:14 2025 by rpki-client