Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yFHlLO4dnLX-yTCGCMigzOONpwI.roa
File: yFHlLO4dnLX-yTCGCMigzOONpwI.roa (raw, json)
Hash identifier: SBGWwoEe+2FCdXLZ+KtC2hn/2bwTz9fDF5LSNIbF6rQ=
Subject key identifier: C8:51:E5:2C:EE:1D:9C:B5:FE:C9:30:86:08:C8:A0:CC:E3:8D:A7:02
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01999BB3EB3EEFB2142570B2881A5E2F436F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yFHlLO4dnLX-yTCGCMigzOONpwI.roa
Signing time: Tue 30 Sep 2025 17:38:03 +0000
ROA not before: Tue 30 Sep 2025 17:38:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 31.56.72.0/24 maxlen: 24
31.56.76.0/24 maxlen: 24
31.56.90.0/24 maxlen: 24
31.57.119.0/24 maxlen: 24
31.59.71.0/24 maxlen: 24
31.59.167.0/24 maxlen: 24
31.59.224.0/24 maxlen: 24
31.59.225.0/24 maxlen: 24
31.59.226.0/24 maxlen: 24
31.59.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:b3:eb:3e:ef:b2:14:25:70:b2:88:1a:5e:2f:43:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 30 17:38:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c851e52cee1d9cb5fec9308608c8a0cce38da702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:c9:5d:5e:3a:31:5f:11:20:4f:92:c1:a1:
3f:46:28:77:2a:d8:55:bd:46:35:db:c3:cf:9a:89:
1b:ed:f2:f1:c9:22:26:f9:b8:d0:09:5e:2f:c0:d1:
01:12:a9:a3:78:87:b3:4b:ea:e0:6b:93:6f:c8:2d:
0c:df:1a:3e:b8:6e:a8:81:4e:9c:d7:b8:69:db:b4:
96:c3:44:18:3e:cf:37:7f:d3:77:cd:d0:0e:21:35:
90:a8:16:af:d6:51:9c:d0:b1:90:c7:d2:3f:59:02:
e4:27:79:b2:39:9b:63:fb:c4:d3:a0:a0:1f:a4:96:
77:c0:c0:c1:39:0c:74:8b:44:cb:ec:05:d8:4e:c1:
12:9c:13:bf:9f:1a:bc:bd:18:88:ea:80:07:95:0a:
58:55:e6:9d:79:43:de:c8:a5:0b:2a:69:2e:e7:f2:
19:af:ef:ec:fb:e3:e4:c3:f7:2a:d2:fd:19:84:34:
1d:ab:01:a9:92:c4:b6:14:77:ee:8a:75:d9:c5:26:
34:64:9a:bf:d3:c3:55:d9:61:94:0a:52:e3:79:4c:
77:4a:fa:00:4c:c4:15:71:f6:8c:78:31:c9:9c:b6:
ea:a9:d3:0a:24:a5:8a:df:c8:7e:c2:aa:64:2b:43:
dd:83:76:ac:c1:65:ee:5b:dc:a5:58:a5:d7:50:08:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:E5:2C:EE:1D:9C:B5:FE:C9:30:86:08:C8:A0:CC:E3:8D:A7:02
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/yFHlLO4dnLX-yTCGCMigzOONpwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.72.0/24
31.56.76.0/24
31.56.90.0/24
31.57.119.0/24
31.59.71.0/24
31.59.167.0/24
31.59.224.0/22
Signature Algorithm: sha256WithRSAEncryption
44:a2:c0:d9:58:b9:76:b6:17:03:ea:6d:70:78:5d:e4:5f:fa:
5f:b6:fb:f6:d9:ec:cd:8f:5f:d5:52:6a:f5:71:28:3f:5e:cc:
99:bc:ac:fb:99:3f:e2:d4:a9:24:95:5f:b3:94:81:ae:f4:de:
77:de:76:39:c9:02:8f:ad:ad:c6:35:56:a5:b4:f5:85:55:13:
57:da:fb:cc:00:8c:0d:a2:5c:af:55:ab:8d:96:77:fc:ae:b5:
9d:41:b5:e9:27:5d:ee:45:01:b6:f8:98:0c:24:66:c8:9d:38:
ae:34:cd:a1:1e:a8:81:15:36:6c:1f:c6:81:af:d5:55:44:45:
dd:16:60:3d:fe:e8:45:f6:32:6b:e8:78:3a:67:d6:8b:77:1f:
6c:7e:ad:7c:77:e7:fe:30:9b:82:db:fb:34:c0:63:ec:9c:2c:
ad:97:cc:87:ae:f9:9d:70:b6:52:2c:c4:bd:36:8e:cf:f0:fa:
bc:5f:a3:6c:18:42:05:9e:f5:b7:6b:6b:f8:c5:d0:45:cb:ec:
b5:16:cc:5b:53:44:e3:16:4c:7c:f4:f5:50:ea:90:85:48:7f:
25:50:fe:a8:ed:fa:db:c7:78:de:10:cb:00:4f:89:21:ee:c8:
cf:d9:13:ed:09:7c:c4:b8:97:81:e8:e3:38:d6:43:f5:af:26:
73:24:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:22:15 2025 by rpki-client