Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6ebTak5h5yU6bRSc_x7y0Wx_jLg.roa
File: 6ebTak5h5yU6bRSc_x7y0Wx_jLg.roa (raw, json)
Hash identifier: CAGox5P5IVRHue5u0UMDX1gWkdJa7wE0iG0U5F4MUDk=
Subject key identifier: E9:E6:D3:6A:4E:61:E7:25:3A:6D:14:9C:FF:1E:F2:D1:6C:7F:8C:B8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199910366B3BCEC79F6BF59C799784D69F1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6ebTak5h5yU6bRSc_x7y0Wx_jLg.roa
Signing time: Sun 28 Sep 2025 15:49:03 +0000
ROA not before: Sun 28 Sep 2025 15:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:91:03:66:b3:bc:ec:79:f6:bf:59:c7:99:78:4d:69:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 28 15:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9e6d36a4e61e7253a6d149cff1ef2d16c7f8cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:81:03:cc:66:65:e2:79:58:a8:1a:bc:44:
ed:46:1a:92:a3:c1:7a:3f:2e:37:8a:f1:ab:a4:58:
2d:e2:f1:0b:39:a3:ec:43:8f:06:a1:1e:7d:0a:c9:
b4:86:23:f0:67:80:93:73:81:41:b6:d9:08:08:14:
cb:6f:e5:1d:71:f8:26:04:fc:b8:3f:2b:6b:08:04:
a8:59:46:25:de:64:cc:bf:e6:de:6c:24:f9:67:a3:
e5:36:d2:eb:33:b8:10:62:66:56:6d:27:05:4e:92:
13:15:96:0f:1f:8a:8d:83:eb:c6:21:d0:5f:27:7d:
23:72:ab:a3:10:de:2a:1d:ef:f9:12:56:d8:40:d3:
ac:5a:65:25:e9:26:ab:89:20:fe:05:39:4c:ff:66:
3f:a9:78:db:07:de:ef:bc:a6:d3:77:d2:d1:0a:e3:
21:86:6c:95:c7:a3:b6:74:7b:90:49:ec:93:ad:1d:
c0:fa:b1:01:9f:41:ac:ca:2a:0f:13:88:01:a0:ad:
e4:4d:3f:95:c8:4f:83:37:52:12:11:e4:ab:fb:ef:
69:99:4a:19:b0:6a:21:61:f8:da:d9:fc:65:d0:9b:
8a:e5:73:35:60:5f:4a:a2:c1:7e:1e:3c:73:3f:4a:
ed:f2:eb:75:b9:a8:a5:5c:cf:d8:66:c6:d5:7b:fd:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E6:D3:6A:4E:61:E7:25:3A:6D:14:9C:FF:1E:F2:D1:6C:7F:8C:B8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6ebTak5h5yU6bRSc_x7y0Wx_jLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.58.34.0/23
217.60.0.0/21
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
98:43:30:bb:2b:66:00:1e:22:b6:f7:e1:c7:33:5c:bf:f7:31:
3c:1b:b3:94:81:ea:1d:3b:f6:a2:7a:2d:59:9a:c2:0c:38:c9:
c7:b5:39:f4:6f:2f:62:c8:aa:8b:3c:b2:93:ab:0f:4a:16:27:
cf:9e:1c:0d:f2:82:2e:99:4e:38:54:5d:ab:cb:9c:dc:c1:0a:
ac:68:33:7b:c8:91:2e:b4:75:e3:63:49:88:4e:19:ac:bb:d2:
a5:7f:1c:53:18:87:9a:ec:8a:ee:3b:fa:d5:0e:54:84:f0:14:
6b:4a:cd:3e:d1:bb:5a:dc:3f:e9:50:50:4f:c3:2f:77:ac:e8:
62:a4:c8:e0:44:d8:d6:b7:39:8d:bf:6f:08:7e:12:0b:58:f9:
a2:a3:1c:fb:27:e3:a6:c4:5e:f1:27:88:68:d9:30:10:be:54:
e9:99:2f:9c:bf:ad:e6:21:b0:13:89:d4:39:36:d0:a1:3a:b0:
d2:90:f0:2c:53:2a:43:4b:05:e5:24:26:05:aa:2a:55:a6:fe:
7f:c9:f6:ac:b1:0a:df:d2:f1:e8:c6:77:58:37:ad:c4:e2:f9:
eb:0c:93:14:30:23:a0:c7:84:06:b8:ff:ef:61:2b:c2:f2:b8:
60:d3:ff:cb:38:01:44:af:ca:22:80:14:ce:45:76:6a:64:a0:
82:86:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 12:01:36 2025 by rpki-client