Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xQ1Hqlghowmk38rtDNHba7D1W1Q.roa
File: xQ1Hqlghowmk38rtDNHba7D1W1Q.roa (raw, json)
Hash identifier: 04isfiConvR8/jN5d/hwSeI1LSXhCspib2mg3f5uPlw=
Subject key identifier: C5:0D:47:AA:58:21:A3:09:A4:DF:CA:ED:0C:D1:DB:6B:B0:F5:5B:54
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019883AA1D77D72969EB44155E58A39D05CB
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xQ1Hqlghowmk38rtDNHba7D1W1Q.roa
Signing time: Thu 07 Aug 2025 08:33:40 +0000
ROA not before: Thu 07 Aug 2025 08:33:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.239.0/24 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:aa:1d:77:d7:29:69:eb:44:15:5e:58:a3:9d:05:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 7 08:33:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c50d47aa5821a309a4dfcaed0cd1db6bb0f55b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:42:59:af:fb:82:b7:4a:c9:1b:5d:df:e2:83:
5e:f0:7b:11:dd:6c:ca:dc:f8:ba:8e:a2:2a:cb:c8:
d8:f3:df:f4:9c:ed:a4:9f:11:9a:68:f4:c8:72:cf:
90:c7:89:5b:b0:8a:c2:79:d9:1c:f0:11:17:92:d1:
4d:3e:a8:4c:d0:9e:0a:38:7a:9a:a2:42:42:b1:71:
94:3c:b5:ed:cf:1b:28:f3:8b:82:f8:d2:f8:0c:28:
96:bd:f4:15:22:3c:22:bd:66:de:8c:ac:5e:d7:40:
9d:47:4f:ae:ab:99:fe:c7:33:ca:d1:e3:bf:33:b8:
08:bb:d0:59:b0:d3:ea:3a:82:88:61:c0:dc:79:a5:
dc:78:c1:47:c7:44:01:b7:3d:69:b8:d1:49:cd:37:
10:73:3e:12:fe:6e:6d:57:fc:64:3a:a7:3d:58:b1:
45:ba:fe:3a:4e:e6:75:07:cb:cb:98:19:88:d9:4b:
6c:5b:7f:ee:88:87:6d:f7:37:cf:18:6d:bc:b7:61:
bd:6b:54:12:ee:f9:84:8d:58:5d:61:a8:67:fe:0b:
47:1d:63:94:00:5d:66:23:fc:9b:7e:d0:10:3e:ad:
d0:70:ee:b8:ca:f6:41:ae:9f:a0:a6:01:79:3f:57:
76:e4:8b:d0:9b:b0:27:21:18:61:4f:93:1c:ac:ef:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:47:AA:58:21:A3:09:A4:DF:CA:ED:0C:D1:DB:6B:B0:F5:5B:54
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xQ1Hqlghowmk38rtDNHba7D1W1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.73.0/24
31.56.85.0/24
31.56.239.0/24
31.57.113.0/24
31.57.153.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
31.58.164.0/24
31.59.88.0/24
31.59.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:32:02:57:ef:1d:7a:ea:f4:3c:dd:6a:df:dd:f2:e6:91:40:
8a:72:24:d5:61:c7:a2:7f:53:bd:c5:9c:11:ed:97:b3:53:16:
fe:e8:e0:1f:de:61:34:c3:c3:9c:2d:a4:e2:3a:05:63:95:6a:
d4:28:dd:0d:6a:d6:44:61:e6:66:06:4c:b6:84:d6:28:1c:a2:
d5:79:44:d7:ff:90:28:9b:78:3c:e9:49:e5:cc:80:eb:ec:cc:
7b:71:ff:37:0f:ca:00:06:65:53:24:14:3f:9d:82:c6:6b:6f:
26:c8:97:90:c4:05:38:71:c4:8b:a1:c3:5c:17:a1:1c:82:c3:
7d:1b:52:56:73:87:07:12:c2:36:8f:fb:69:61:02:36:23:f3:
b6:93:e5:0e:fe:28:5c:01:34:bb:c7:af:7d:ae:3a:5c:c3:13:
c8:1e:8b:7f:74:a3:c2:dc:99:63:56:41:3f:a9:d7:a6:59:a7:
39:15:ca:27:40:34:e9:61:7a:7c:5f:be:ca:7a:a5:50:79:dc:
e3:26:b8:b0:93:9b:b2:cc:a9:a4:e5:70:eb:32:bb:0d:c2:a6:
63:a6:13:51:e4:22:0c:88:40:e7:70:8c:c7:2d:15:8a:8e:1e:
60:04:d4:ac:ae:43:19:51:d6:f1:3b:98:0d:e9:37:ba:72:da:
1f:c6:f1:cc
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZiDqh131ylp60QVXlijnQXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODA3MDgzMzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTBkNDdhYTU4MjFhMzA5YTRkZmNhZWQwY2QxZGI2YmIwZjU1YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EJZr/uCt0rJG13f4oNe8HsR3WzK
3Pi6jqIqy8jY89/0nO2knxGaaPTIcs+Qx4lbsIrCedkc8BEXktFNPqhM0J4KOHqa
okJCsXGUPLXtzxso84uC+NL4DCiWvfQVIjwivWbejKxe10CdR0+uq5n+xzPK0eO/
M7gIu9BZsNPqOoKIYcDceaXceMFHx0QBtz1puNFJzTcQcz4S/m5tV/xkOqc9WLFF
uv46TuZ1B8vLmBmI2UtsW3/uiIdt9zfPGG28t2G9a1QS7vmEjVhdYahn/gtHHWOU
AF1mI/ybftAQPq3QcO64yvZBrp+gpgF5P1d25IvQm7AnIRhhT5McrO81SwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFMUNR6pYIaMJpN/K7QzR22uw9VtUMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveFExSHFsZ2hvd21rMzhydEROSGJhN0QxVzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAHzhJAwQA
HzhVAwQAHzjvAwQAHzlxAwQAHzmZAwQAHznsAwQAHzorAwQAHzqAAwQAHzqkAwQA
HztYAwQAHzt7MA0GCSqGSIb3DQEBCwUAA4IBAQCeMgJX7x166vQ83Wrf3fLmkUCK
ciTVYceif1O9xZwR7ZezUxb+6OAf3mE0w8OcLaTiOgVjlWrUKN0NatZEYeZmBky2
hNYoHKLVeUTX/5Aom3g86UnlzIDr7Mx7cf83D8oABmVTJBQ/nYLGa28myJeQxAU4
ccSLocNcF6EcgsN9G1JWc4cHEsI2j/tpYQI2I/O2k+UO/ihcATS7x699rjpcwxPI
Hot/dKPC3JljVkE/qdemWac5FconQDTpYXp8X77KeqVQedzjJriwk5uyzKmk5XDr
MrsNwqZjphNR5CIMiEDncIzHLRWKjh5gBNSsrkMZUdbxO5gN6Te6ctofxvHM
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:38 2025 by rpki-client