Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/46_tOzj5rgoMGcKeWw1lbE0p6R4.roa
File: 46_tOzj5rgoMGcKeWw1lbE0p6R4.roa (raw, json)
Hash identifier: VExRCoJSAj1SYB8PAA7kMAYJRl436b0roQWEppKbUk0=
Subject key identifier: E3:AF:ED:3B:38:F9:AE:0A:0C:19:C2:9E:5B:0D:65:6C:4D:29:E9:1E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A86C8A751E3EA04EDFB77A2C63CE9BFAE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/46_tOzj5rgoMGcKeWw1lbE0p6R4.roa
Signing time: Sat 15 Nov 2025 09:11:28 +0000
ROA not before: Sat 15 Nov 2025 09:11:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205463
IP address blocks: 31.56.213.0/24 maxlen: 24
31.56.214.0/24 maxlen: 24
31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:86:c8:a7:51:e3:ea:04:ed:fb:77:a2:c6:3c:e9:bf:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 09:11:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3afed3b38f9ae0a0c19c29e5b0d656c4d29e91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:44:6c:c9:c6:b4:5e:af:20:1b:59:33:a7:0a:
e9:2e:25:df:c5:a0:34:f1:ae:5a:61:40:c3:5f:df:
8d:87:b4:7e:08:91:b9:20:c9:72:b1:75:a3:d5:b9:
b8:e4:32:e6:69:9f:ed:a2:6e:7a:41:07:a9:3b:cb:
a8:fa:db:44:fe:e8:5f:27:73:c8:a1:26:3e:72:e0:
11:89:9d:5e:c8:c3:27:1a:96:af:bb:ea:83:a7:7c:
6d:cb:4d:06:42:90:10:17:e8:55:f0:55:d0:db:99:
c2:52:2f:d4:96:04:e8:03:00:44:f8:af:05:b3:c1:
e8:d9:40:2f:cb:43:be:8f:f8:18:ee:0f:79:e7:cc:
36:63:40:4f:0c:f1:b3:56:f1:f9:42:8c:25:ac:11:
d2:13:49:5c:ff:47:c7:c6:39:a3:b3:e4:47:b5:e3:
36:b9:fd:9d:d1:f2:1b:55:98:9e:ef:1a:c6:f5:7d:
38:c4:e1:a3:c1:c2:0d:6d:d0:b9:fd:16:8e:72:70:
fd:ec:a9:53:d6:0e:aa:df:b6:0b:33:d5:d7:a4:70:
5d:82:9d:5a:00:08:35:c1:58:f1:0b:a5:a6:8f:45:
44:c9:91:7e:44:c7:49:8c:38:77:a4:45:bd:31:b1:
ab:1a:38:d2:7d:72:18:1e:97:58:8a:9b:df:38:eb:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:ED:3B:38:F9:AE:0A:0C:19:C2:9E:5B:0D:65:6C:4D:29:E9:1E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/46_tOzj5rgoMGcKeWw1lbE0p6R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.213.0-31.56.214.255
31.58.244.0/23
31.58.249.0-31.58.251.255
Signature Algorithm: sha256WithRSAEncryption
51:a9:76:33:05:fb:59:95:cc:70:bc:e3:19:d1:d5:bd:99:36:
6e:4c:6c:50:10:49:ed:11:7e:18:6c:5d:80:e3:06:ba:53:43:
bf:5f:88:e7:6b:2b:af:08:76:47:09:3e:ff:df:d8:81:6b:3e:
cb:c1:cb:23:5d:01:34:6a:2b:52:a3:30:bd:fc:67:6d:2c:07:
d1:7a:eb:48:a5:4c:a3:e7:52:ed:5a:35:96:88:1a:1f:eb:f3:
51:d9:b4:3f:8b:45:31:e5:66:dd:4e:8f:be:9a:fd:3c:5d:cd:
1b:0f:2e:93:b7:4b:58:ae:f1:d4:d5:fe:2d:e4:58:21:36:28:
57:3c:3a:05:31:22:c0:3f:f1:3a:b6:0c:60:63:49:84:9a:9e:
82:81:28:18:5b:6e:ba:a9:09:46:77:ca:f6:61:b9:62:69:60:
05:b9:8d:19:ff:26:4d:cb:8f:e0:a7:2a:41:81:bb:2c:37:40:
93:31:92:b7:7b:6c:b7:be:ba:23:0f:ac:1d:76:e8:18:2a:c7:
77:4d:a7:c4:ae:3b:99:bb:8d:d4:cf:d7:59:76:c9:db:6c:70:
31:26:2a:06:ee:f6:28:3d:15:bf:eb:aa:b8:c8:87:e5:21:0c:
77:49:f9:e9:c4:c1:cf:88:7f:ec:25:3e:4e:15:a8:7b:f4:99:
97:33:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 00:48:41 2025 by rpki-client