Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lk1Y35jj1tSzXmI8RvyN6kxp4xA.roa
File: lk1Y35jj1tSzXmI8RvyN6kxp4xA.roa (raw, json)
Hash identifier: yfZE3oJsJaMFJP477niNB2qpHLL8c/zO0QDD8dkFG6A=
Subject key identifier: 96:4D:58:DF:98:E3:D6:D4:B3:5E:62:3C:46:FC:8D:EA:4C:69:E3:10
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199C8DEA584F5DA610D65197A957CDE8AB9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lk1Y35jj1tSzXmI8RvyN6kxp4xA.roa
Signing time: Thu 09 Oct 2025 12:07:38 +0000
ROA not before: Thu 09 Oct 2025 12:07:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44092
IP address blocks: 31.56.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:de:a5:84:f5:da:61:0d:65:19:7a:95:7c:de:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 9 12:07:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=964d58df98e3d6d4b35e623c46fc8dea4c69e310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:83:e7:2c:9a:a8:e1:5c:34:07:99:91:47:
f6:17:57:54:59:51:12:58:a6:8f:5e:e5:99:2a:6a:
db:db:9b:5f:72:df:14:e0:21:67:c8:c3:a0:14:b5:
a2:ac:23:7d:c1:ed:35:45:52:fc:63:d5:6b:b6:85:
ab:31:6b:4f:5b:d4:c1:86:38:a5:68:b3:53:f8:cf:
45:08:76:2d:a3:cc:da:0d:0e:fe:af:9f:e9:03:bd:
20:f6:35:db:f0:bf:13:80:fa:55:f1:8e:58:69:fa:
58:4c:66:01:fb:f6:a4:ed:54:af:1a:e7:0d:64:57:
21:15:b8:f2:53:fb:e8:91:8c:f0:91:7d:9a:1c:ef:
2d:5e:f1:b3:f2:89:83:2e:8d:60:ef:78:f9:50:4d:
48:f5:fa:41:40:a2:f7:c4:00:67:b8:1f:f4:82:dd:
a4:a9:19:fd:b0:53:49:6d:3b:2f:04:13:79:fd:e2:
c8:be:96:78:7d:00:d4:4f:f6:9c:29:4b:95:0b:67:
8f:53:8b:be:e6:6d:d6:29:23:12:0b:66:e4:c9:e3:
d6:4f:47:d9:70:34:c8:2e:51:d0:6f:c7:0a:76:c7:
43:47:61:d8:e3:bb:c8:a0:0c:4a:4f:15:c6:0e:19:
c0:b9:a3:44:d8:55:e5:51:cf:b7:90:e6:0d:6e:0e:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:58:DF:98:E3:D6:D4:B3:5E:62:3C:46:FC:8D:EA:4C:69:E3:10
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lk1Y35jj1tSzXmI8RvyN6kxp4xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7c:2f:24:f6:b0:79:ba:1b:f7:dd:26:3a:53:5a:b4:6b:62:
5c:14:bc:fc:69:06:b4:fd:21:dd:b4:6f:f1:46:df:b1:0d:6b:
e3:4e:9f:ea:a2:df:6a:68:ea:d4:5f:69:0a:9a:63:08:aa:7f:
57:4f:22:47:19:e7:cc:24:84:42:b7:b2:7e:b7:87:e9:0d:bb:
78:a8:15:d2:fb:0f:87:ba:1b:64:38:a2:78:49:df:7e:3a:fa:
13:82:06:d2:ae:42:c1:82:4d:a7:ff:12:54:2e:d9:1c:f2:8f:
08:85:1e:4f:3e:ee:c2:df:7f:3f:77:e8:2f:46:95:cd:96:cc:
80:27:cc:53:36:f6:da:2e:e4:dd:97:34:d0:c4:cb:a9:9e:f2:
e9:fd:fa:51:6c:8d:8f:bf:c3:32:10:0b:3d:f4:9a:bd:da:ec:
f9:2c:ff:d3:9b:c4:10:ec:f0:1c:c6:9b:f7:c7:0c:16:69:76:
74:b7:2e:d1:42:83:0a:e4:04:e9:b1:3a:1a:2b:84:e3:fc:75:
46:89:02:c2:43:64:0c:78:17:21:9a:58:e1:2d:09:4c:e5:e3:
2e:ed:d4:c9:58:bb:49:51:0f:47:81:cf:32:38:01:17:2b:3b:
5f:9e:83:06:96:14:ec:79:47:1e:71:97:22:f9:a9:c1:25:9a:
bf:58:1d:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnI3qWE9dphDWUZepV83oq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDA5MTIwNzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjRkNThkZjk4ZTNkNmQ0YjM1ZTYyM2M0NmZjOGRlYTRjNjllMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfyD5yyaqOFcNAeZkUf2F1dUWVES
WKaPXuWZKmrb25tfct8U4CFnyMOgFLWirCN9we01RVL8Y9VrtoWrMWtPW9TBhjil
aLNT+M9FCHYto8zaDQ7+r5/pA70g9jXb8L8TgPpV8Y5YafpYTGYB+/ak7VSvGucN
ZFchFbjyU/vokYzwkX2aHO8tXvGz8omDLo1g73j5UE1I9fpBQKL3xABnuB/0gt2k
qRn9sFNJbTsvBBN5/eLIvpZ4fQDUT/acKUuVC2ePU4u+5m3WKSMSC2bkyePWT0fZ
cDTILlHQb8cKdsdDR2HY47vIoAxKTxXGDhnAuaNE2FXlUc+3kOYNbg6WewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJZNWN+Y49bUs15iPEb8jepMaeMQMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbGsxWTM1amoxdFN6WG1JOFJ2eU42a3hwNHhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzgoMA0G
CSqGSIb3DQEBCwUAA4IBAQCffC8k9rB5uhv33SY6U1q0a2JcFLz8aQa0/SHdtG/x
Rt+xDWvjTp/qot9qaOrUX2kKmmMIqn9XTyJHGefMJIRCt7J+t4fpDbt4qBXS+w+H
uhtkOKJ4Sd9+OvoTggbSrkLBgk2n/xJULtkc8o8IhR5PPu7C338/d+gvRpXNlsyA
J8xTNvbaLuTdlzTQxMupnvLp/fpRbI2Pv8MyEAs99Jq92uz5LP/Tm8QQ7PAcxpv3
xwwWaXZ0ty7RQoMK5ATpsToaK4Tj/HVGiQLCQ2QMeBchmljhLQlM5eMu7dTJWLtJ
UQ9Hgc8yOAEXKztfnoMGlhTseUcecZci+anBJZq/WB3a
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:06 2025 by rpki-client