Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4JtFlkWLd9ckRk22GZ9aS8yDK2g.roa
File: 4JtFlkWLd9ckRk22GZ9aS8yDK2g.roa (raw, json)
Hash identifier: P4h7WNF64hHknA+Z/4GC9rVZA4vT+zC8ZThHqoA+Enw=
Subject key identifier: E0:9B:45:96:45:8B:77:D7:24:46:4D:B6:19:9F:5A:4B:CC:83:2B:68
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01990ED226AE9DD323BB44508A4F3DABE868
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4JtFlkWLd9ckRk22GZ9aS8yDK2g.roa
Signing time: Wed 03 Sep 2025 09:04:37 +0000
ROA not before: Wed 03 Sep 2025 09:04:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:d2:26:ae:9d:d3:23:bb:44:50:8a:4f:3d:ab:e8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 3 09:04:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e09b4596458b77d724464db6199f5a4bcc832b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:88:b9:d6:f7:27:7c:e4:e9:18:61:1b:50:
59:3e:2b:b8:b0:3a:80:26:9d:f7:1e:a8:f3:8b:e0:
54:26:a7:66:6e:0c:99:98:b8:ed:ed:5c:27:95:87:
1b:e2:45:17:26:63:6d:d6:f4:ce:b3:e9:6d:31:dd:
81:da:28:43:ba:b7:7a:5e:8b:9f:0b:71:49:f3:08:
f1:6d:65:76:b4:16:7d:8e:99:11:ce:71:11:75:5f:
95:9e:77:16:38:04:24:5d:61:a8:46:01:dc:bb:14:
b8:4e:8c:c8:6a:0d:46:8f:fa:09:ff:2f:1c:43:a9:
80:ca:28:2f:62:77:e1:40:69:fc:e4:a6:4c:fe:f4:
dc:2c:fd:9d:0e:3c:b5:78:c1:37:cc:fa:0c:82:f7:
38:9d:04:96:96:e2:97:d0:1b:7f:ea:4a:be:71:43:
89:b5:31:d9:a2:99:c6:2c:3e:b9:e7:6c:25:6e:d6:
1a:ce:5f:93:f9:df:58:22:9e:f8:c1:56:18:54:29:
f9:1c:7a:6e:b5:a7:4d:a4:05:e0:94:8d:90:e2:76:
35:69:47:77:4c:8f:50:10:1f:8b:0a:2b:6b:94:79:
fd:d5:30:9e:b7:e2:c6:e6:47:59:36:0c:47:b2:05:
bf:0a:aa:2f:a7:7e:66:64:30:b7:72:79:80:a4:72:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:45:96:45:8B:77:D7:24:46:4D:B6:19:9F:5A:4B:CC:83:2B:68
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4JtFlkWLd9ckRk22GZ9aS8yDK2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
88:89:29:d5:04:0f:6b:45:b2:91:15:0d:19:8c:d5:12:21:3b:
07:55:bb:db:4b:84:9c:3d:72:8e:bd:7f:3d:be:08:c7:30:bd:
f1:91:df:67:b4:e1:11:49:c2:64:58:45:73:80:34:96:13:b5:
f9:e9:09:92:ac:9e:2e:cc:02:ec:c0:8a:b7:e9:af:55:3d:b8:
0a:10:50:ff:34:27:4d:ba:10:be:d6:08:d4:28:d5:54:45:cb:
b4:b1:ae:b5:dc:31:47:bf:65:97:b9:3f:be:ef:47:a2:a1:04:
12:1b:10:26:8f:50:b6:5f:65:cd:a4:bc:b9:27:c6:99:e4:d7:
b2:af:a7:b2:0f:21:7b:75:dd:d1:a5:d1:b4:a1:bf:9a:2c:98:
01:a8:9d:9c:b3:3d:d0:c6:4d:e1:b8:62:12:29:64:50:76:ab:
c8:b3:36:d5:b7:88:f6:31:b0:ee:8d:3c:ce:95:76:2e:25:12:
b9:e9:13:80:dc:58:ac:36:a9:01:75:ee:d5:34:98:20:6d:34:
66:da:ab:b4:d2:b7:22:e2:93:5f:db:57:69:51:35:7f:8b:b9:
a7:a6:bf:04:c8:c1:cc:e4:8b:1a:e3:d9:3b:9f:36:9a:9f:66:
28:5a:0c:0c:fa:36:a8:cd:44:7c:b8:8c:22:2b:6f:2c:29:4f:
88:f4:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 11:56:32 2025 by rpki-client