Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ktmBvGxXkUzLCyMX9c_6ANqVQoE.roa
File: ktmBvGxXkUzLCyMX9c_6ANqVQoE.roa (raw, json)
Hash identifier: PsMq8sUBrgyYBtGMR4M70N1WgMKebDtyf8s6UApChFg=
Subject key identifier: 92:D9:81:BC:6C:57:91:4C:CB:0B:23:17:F5:CF:FA:00:DA:95:42:81
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197BF7CE5CDB38306DA0EAC05A9D0884644
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ktmBvGxXkUzLCyMX9c_6ANqVQoE.roa
Signing time: Mon 30 Jun 2025 06:18:42 +0000
ROA not before: Mon 30 Jun 2025 06:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 31.56.25.0/24 maxlen: 24
31.56.27.0/24 maxlen: 24
31.56.61.0/24 maxlen: 24
31.56.80.0/22 maxlen: 22
31.56.92.0/22 maxlen: 22
31.56.96.0/22 maxlen: 22
31.56.100.0/22 maxlen: 22
31.57.119.0/24 maxlen: 24
31.57.226.0/24 maxlen: 24
31.58.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:7c:e5:cd:b3:83:06:da:0e:ac:05:a9:d0:88:46:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 30 06:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92d981bc6c57914ccb0b2317f5cffa00da954281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:66:fc:dd:2c:d7:ad:e4:a7:40:5e:87:d5:
da:bd:1b:94:a5:cd:46:af:5d:16:fd:11:46:92:f3:
b9:2a:e9:79:f3:55:3b:61:6f:6f:f5:b3:9f:ed:86:
10:56:0a:41:ce:07:50:39:de:d4:38:c6:5d:16:45:
fa:b8:b7:79:8f:b4:c0:96:08:85:42:5a:b5:59:24:
5f:df:11:6a:aa:a9:b8:cf:ab:c5:73:51:88:dd:17:
6c:25:c7:bf:61:f3:bc:07:ac:9e:6c:b3:63:e2:82:
e6:ec:f4:54:ab:13:51:fc:3c:3f:59:62:2f:11:eb:
a6:05:21:59:6c:29:04:c8:93:7d:06:0f:05:44:00:
af:be:17:bc:b6:63:31:9b:35:64:8f:ee:66:43:4b:
f7:5e:5a:93:7b:e8:be:d6:8f:e7:d2:80:56:58:5e:
a1:98:41:cf:9d:dc:a8:fd:ae:51:74:6f:41:64:d6:
62:8b:eb:a8:9b:72:99:15:75:1a:48:0e:db:58:2a:
80:f7:4d:61:9d:08:cb:26:ec:c8:f3:8e:98:b2:e2:
f3:6e:88:16:35:fa:df:80:18:1a:94:d7:2e:bd:c1:
a4:13:20:4b:6c:ed:72:e0:2f:d9:17:d4:97:ba:a5:
8d:89:6d:cc:fa:ff:f5:dc:2e:c0:f8:3b:95:a1:e1:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D9:81:BC:6C:57:91:4C:CB:0B:23:17:F5:CF:FA:00:DA:95:42:81
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ktmBvGxXkUzLCyMX9c_6ANqVQoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.25.0/24
31.56.27.0/24
31.56.61.0/24
31.56.80.0/22
31.56.92.0-31.56.103.255
31.57.119.0/24
31.57.226.0/24
31.58.130.0/24
Signature Algorithm: sha256WithRSAEncryption
38:61:87:81:36:20:e6:9a:0b:03:8f:fa:4e:07:c4:a4:9b:ed:
3b:2d:7f:fa:c5:98:52:9d:84:8c:09:4b:91:35:4d:8a:e0:56:
ba:52:e5:9d:ff:0b:2b:80:11:9a:b3:10:2c:5c:2e:19:0a:79:
6a:5c:8d:81:c1:f5:88:69:ed:a1:83:d4:41:6d:1b:05:c9:53:
59:46:87:4c:77:36:b1:9e:5f:41:38:2d:9e:33:e4:83:6f:62:
dd:a5:a7:5d:7a:e4:63:7e:3a:99:f4:f7:a0:67:63:1a:37:c5:
04:14:5e:70:a9:c7:ab:62:d8:fe:60:e4:15:94:2c:e5:01:97:
98:21:7c:5f:9a:d8:95:de:7e:94:30:d3:7d:83:41:73:b8:3b:
e4:f4:10:ba:71:09:9d:96:0b:a0:4d:62:6b:bd:6e:ba:0d:90:
f1:4d:f1:a2:1c:23:55:1c:c4:15:64:40:00:28:0f:d2:cd:34:
f5:d2:8f:d7:a6:26:43:74:ed:48:2e:11:99:0b:ff:18:00:73:
31:43:57:3c:df:cd:4d:74:0e:c4:27:ca:8c:33:d5:ad:5c:d1:
a1:a7:7c:2d:26:0e:dd:b2:10:d1:7d:ba:94:40:2d:80:b3:12:
43:82:29:cf:e7:36:b3:dc:88:89:cc:ad:61:3f:21:64:6c:98:
dd:23:b3:8e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZe/fOXNs4MG2g6sBanQiEZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjMwMDYxODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmQ5ODFiYzZjNTc5MTRjY2IwYjIzMTdmNWNmZmEwMGRhOTU0MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKtm/N0s163kp0Beh9XavRuUpc1G
r10W/RFGkvO5Kul581U7YW9v9bOf7YYQVgpBzgdQOd7UOMZdFkX6uLd5j7TAlgiF
Qlq1WSRf3xFqqqm4z6vFc1GI3RdsJce/YfO8B6yebLNj4oLm7PRUqxNR/Dw/WWIv
EeumBSFZbCkEyJN9Bg8FRACvvhe8tmMxmzVkj+5mQ0v3XlqTe+i+1o/n0oBWWF6h
mEHPndyo/a5RdG9BZNZii+uom3KZFXUaSA7bWCqA901hnQjLJuzI846YsuLzbogW
NfrfgBgalNcuvcGkEyBLbO1y4C/ZF9SXuqWNiW3M+v/13C7A+DuVoeGxCwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFJLZgbxsV5FMywsjF/XP+gDalUKBMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEva3RtQnZHeFhrVXpMQ3lNWDljXzZBTnFWUW9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAHzgZAwQA
HzgbAwQAHzg9AwQCHzhQMAwDBAIfOFwDBAMfOGADBAAfOXcDBAAfOeIDBAAfOoIw
DQYJKoZIhvcNAQELBQADggEBADhhh4E2IOaaCwOP+k4HxKSb7Tstf/rFmFKdhIwJ
S5E1TYrgVrpS5Z3/CyuAEZqzECxcLhkKeWpcjYHB9Yhp7aGD1EFtGwXJU1lGh0x3
NrGeX0E4LZ4z5INvYt2lp1165GN+Opn096BnYxo3xQQUXnCpx6ti2P5g5BWULOUB
l5ghfF+a2JXefpQw032DQXO4O+T0ELpxCZ2WC6BNYmu9broNkPFN8aIcI1UcxBVk
QAAoD9LNNPXSj9emJkN07UguEZkL/xgAczFDVzzfzU10DsQnyowz1a1c0aGnfC0m
Dt2yENF9upRALYCzEkOCKc/nNrPciInMrWE/IWRsmN0js44=
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:37:44 2025 by rpki-client