Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Irbj3n2IRCdGRGtbCTAU7Nrd-jo.roa
File: Irbj3n2IRCdGRGtbCTAU7Nrd-jo.roa (raw, json)
Hash identifier: XmB6QdErWviYNO98pgzr69yx6V4XOQRpR/oZfNcqOMw=
Subject key identifier: 22:B6:E3:DE:7D:88:44:27:46:44:6B:5B:09:30:14:EC:DA:DD:FA:3A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01983127C35D796541DE0687AF39DF139CAE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Irbj3n2IRCdGRGtbCTAU7Nrd-jo.roa
Signing time: Tue 22 Jul 2025 08:02:26 +0000
ROA not before: Tue 22 Jul 2025 08:02:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215727
IP address blocks: 31.56.141.0/24 maxlen: 24
31.57.155.0/24 maxlen: 24
31.57.160.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.59.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:27:c3:5d:79:65:41:de:06:87:af:39:df:13:9c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 22 08:02:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22b6e3de7d88442746446b5b093014ecdaddfa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:5d:b5:7c:f7:01:f0:68:0e:98:a4:9e:26:
e2:a3:44:95:03:cf:4d:5a:43:93:69:25:99:39:db:
f2:83:37:7e:8a:1d:74:cc:ec:bd:c3:9c:44:9e:12:
dc:b4:b8:27:c1:2f:e7:8d:a3:9d:8e:b4:18:3b:2a:
9d:47:0b:de:29:ad:2e:b7:ef:2a:75:c7:99:b3:6c:
da:32:68:f8:b2:f4:0d:6f:3d:5b:05:5a:6c:ae:02:
1b:ed:77:c7:a7:d3:73:37:7d:b2:ee:1b:85:a6:d2:
fd:b0:2a:0c:b1:ce:cb:d9:40:a6:32:af:82:d7:f3:
79:1e:8e:d9:9b:a1:cf:87:46:30:91:ce:9b:89:ef:
ff:87:d2:98:f4:2f:fa:3f:4d:f5:39:de:dc:0a:8d:
7b:c5:7a:b1:33:44:b8:be:63:9b:fb:6f:3c:d2:5f:
04:56:c0:99:46:bf:16:02:f6:ee:07:7e:6d:3b:e9:
1f:df:19:a3:ff:25:57:35:72:ef:25:69:71:1a:9b:
4f:a5:27:6c:8e:e7:56:f9:51:fb:19:b2:d8:01:bd:
35:e4:e7:03:77:fa:78:e8:44:c0:a7:d2:9b:bf:7c:
8c:fc:02:03:d8:fa:9f:0c:d4:df:16:2f:d2:fb:0f:
4c:d7:4d:25:0f:cd:b2:3c:2c:e7:ce:5c:e0:15:2f:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:E3:DE:7D:88:44:27:46:44:6B:5B:09:30:14:EC:DA:DD:FA:3A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Irbj3n2IRCdGRGtbCTAU7Nrd-jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.141.0/24
31.57.155.0/24
31.57.160.0/24
31.57.206.0/24
31.59.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:46:ae:c0:29:ef:39:1f:cb:c4:a6:9c:63:74:ea:83:87:b7:
a1:97:3c:ce:c4:7f:de:df:9b:2e:db:cb:65:3c:80:35:76:d6:
c6:7d:5c:c7:14:05:ea:96:7e:52:e6:0c:30:ae:ee:1d:b4:72:
6c:2d:3b:a8:64:ec:5b:8a:47:36:db:0b:c5:fc:42:94:71:5b:
70:0f:7d:42:21:2a:4b:14:91:87:0d:5d:85:f4:0a:7e:1f:cd:
f6:ee:b1:fd:ab:c7:94:b9:c2:17:6f:c5:f6:4a:06:06:4e:7b:
71:81:90:a9:90:74:81:61:e5:2d:8d:47:fc:25:e3:9a:2e:e6:
38:fc:1e:7f:ea:90:36:95:f3:77:f1:a7:2c:4d:c7:86:41:01:
35:88:91:a0:ed:5a:56:ab:45:ae:6f:52:99:3c:bd:54:0a:b8:
37:9c:df:f1:5c:31:40:bb:5b:1d:55:c7:7e:c0:cc:56:0b:d4:
3c:22:26:70:8c:d9:db:c9:e4:9a:c2:88:98:0e:52:9c:9f:ee:
a2:d4:a2:41:d9:a6:a5:fa:0a:9e:46:3b:f5:d8:dc:2a:e1:00:
90:6a:de:d4:ad:ac:44:86:f5:af:fb:ca:34:66:85:8d:2e:ed:
f3:07:e0:e2:d6:49:a3:56:e2:dd:63:28:3b:ff:b9:15:b1:c7:
66:dd:6c:12
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZgxJ8NdeWVB3gaHrznfE5yuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzIyMDgwMjI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmI2ZTNkZTdkODg0NDI3NDY0NDZiNWIwOTMwMTRlY2RhZGRmYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBRdtXz3AfBoDpiknibio0SVA89N
WkOTaSWZOdvygzd+ih10zOy9w5xEnhLctLgnwS/njaOdjrQYOyqdRwveKa0ut+8q
dceZs2zaMmj4svQNbz1bBVpsrgIb7XfHp9NzN32y7huFptL9sCoMsc7L2UCmMq+C
1/N5Ho7Zm6HPh0Ywkc6bie//h9KY9C/6P031Od7cCo17xXqxM0S4vmOb+2880l8E
VsCZRr8WAvbuB35tO+kf3xmj/yVXNXLvJWlxGptPpSdsjudW+VH7GbLYAb015OcD
d/p46ETAp9Kbv3yM/AID2PqfDNTfFi/S+w9M100lD82yPCznzlzgFS90gQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCK24959iEQnRkRrWwkwFOza3fo6MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvSXJiajNuMklSQ2RHUkd0YkNUQVU3TnJkLWpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHziNAwQA
HzmbAwQAHzmgAwQAHznOAwQAHztjMA0GCSqGSIb3DQEBCwUAA4IBAQA+Rq7AKe85
H8vEppxjdOqDh7ehlzzOxH/e35su28tlPIA1dtbGfVzHFAXqln5S5gwwru4dtHJs
LTuoZOxbikc22wvF/EKUcVtwD31CISpLFJGHDV2F9Ap+H8327rH9q8eUucIXb8X2
SgYGTntxgZCpkHSBYeUtjUf8JeOaLuY4/B5/6pA2lfN38acsTceGQQE1iJGg7VpW
q0Wub1KZPL1UCrg3nN/xXDFAu1sdVcd+wMxWC9Q8IiZwjNnbyeSawoiYDlKcn+6i
1KJB2aal+gqeRjv12Nwq4QCQat7UraxEhvWv+8o0ZoWNLu3zB+Di1kmjVuLdYyg7
/7kVscdm3WwS
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:35:02 2025 by rpki-client