Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H2Wn-dy43pjsRRlxZAF2d3HhEEw.roa
File: H2Wn-dy43pjsRRlxZAF2d3HhEEw.roa (raw, json)
Hash identifier: 9WcLy1sGkdTzEIlxhexua3un+mVB5DmiZVYzijDlP4o=
Subject key identifier: 1F:65:A7:F9:DC:B8:DE:98:EC:45:19:71:64:01:76:77:71:E1:10:4C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F3060D3F72E7C44380F6930131CF4DF0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H2Wn-dy43pjsRRlxZAF2d3HhEEw.roa
Signing time: Thu 10 Jul 2025 06:29:09 +0000
ROA not before: Thu 10 Jul 2025 06:29:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.57.225.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.58.224.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:06:0d:3f:72:e7:c4:43:80:f6:93:01:31:cf:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 10 06:29:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f65a7f9dcb8de98ec4519716401767771e1104c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:64:e6:bd:a7:df:02:99:05:43:5b:16:cb:
87:65:02:42:21:95:ad:f2:41:00:d0:35:7b:97:60:
cb:e1:f5:f5:e7:00:eb:35:32:e2:ba:21:77:8c:51:
43:d6:2f:99:67:99:a7:67:20:ea:c5:65:be:f9:a7:
9d:48:d6:c7:6e:d9:eb:99:63:05:f5:4d:ca:0b:29:
99:47:2b:56:92:33:11:28:79:3a:e1:fd:ce:ca:ba:
55:9f:75:97:d0:b4:2d:90:a0:5a:6a:c3:47:c7:76:
b5:b3:2d:dc:b7:d4:11:e5:a5:cb:64:76:42:a1:b5:
51:5d:d1:2b:ea:73:5b:a2:61:1c:af:06:dc:f1:74:
ad:7d:72:87:13:20:70:2a:25:8a:3d:7e:d7:5e:d3:
46:cc:35:cd:d9:35:20:65:42:46:9b:9d:20:df:18:
03:2e:73:27:ef:15:5e:40:1f:ed:17:36:5a:1e:9f:
8f:43:96:c0:86:2a:4b:95:44:7b:35:21:b3:24:a0:
1f:38:19:f1:f5:77:5c:17:0e:06:12:eb:bf:61:5b:
f0:b8:0d:35:3b:c4:40:18:e5:f5:5f:c1:9f:e3:ec:
0d:ed:c8:52:b2:59:d7:49:6d:3e:1c:b8:2e:43:34:
96:28:db:99:af:d2:7d:b1:cd:38:40:8f:4f:90:40:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:A7:F9:DC:B8:DE:98:EC:45:19:71:64:01:76:77:71:E1:10:4C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/H2Wn-dy43pjsRRlxZAF2d3HhEEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.156.0/24
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.129.0/24
31.57.132.0/24
31.57.142.0/24
31.57.151.0/24
31.57.191.0/24
31.57.206.0/24
31.57.225.0/24
31.58.33.0/24
31.58.90.0/24
31.58.157.0/24
31.58.160.0/24
31.58.163.0/24
31.58.168.0/24
31.58.224.0/24
31.58.230.0/23
31.59.57.0/24
31.59.108.0-31.59.110.255
31.59.171.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
86:04:c8:f0:36:02:77:e5:7a:4a:dd:04:7a:29:f4:9d:97:c4:
fc:c7:06:f5:71:83:fd:ef:24:57:9d:f5:60:a2:d5:35:b5:0c:
df:4c:19:bc:5f:94:0f:d8:da:6f:21:83:04:ea:1e:f7:3b:24:
35:ac:3a:60:a0:2a:1c:48:5a:b7:00:e0:51:39:57:6b:f4:9d:
fc:03:54:69:9e:af:b2:c2:f4:af:0c:95:87:a1:ec:a3:c7:d7:
13:74:8c:45:b6:81:1d:a0:3f:6f:3b:8a:43:7f:36:45:ff:3a:
46:30:79:55:e4:8e:1c:7e:fd:35:12:6a:df:31:ad:1b:7a:d2:
a6:30:ff:97:2e:e4:2c:44:31:2b:bc:f5:a7:c8:ff:f6:f7:a6:
0e:39:9d:99:6a:5e:a6:f0:17:34:ce:73:c7:bc:24:97:52:29:
81:87:08:80:b0:70:ed:27:90:60:11:6a:1c:71:33:ec:4c:9d:
63:e8:fc:c6:55:f3:1f:c8:08:ef:17:68:8b:a6:b4:c2:16:b7:
a2:1f:05:76:c3:49:a7:50:6e:b2:a7:7b:90:7a:ab:d3:65:0a:
bf:81:84:4c:3d:0c:ff:42:33:48:cf:3f:2a:ae:47:ec:3a:a4:
f0:2c:12:c3:88:ff:d7:01:b2:86:7b:80:ed:77:af:a9:b2:e2:
90:64:58:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:52 2025 by rpki-client