Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BgnU3WrmrsgeBhmTVkWXbbwu3Kw.roa
File: BgnU3WrmrsgeBhmTVkWXbbwu3Kw.roa (raw, json)
Hash identifier: +neJkz/ZHpKE4yztVH6N+732UGEql478SC2c5IAKIUM=
Subject key identifier: 06:09:D4:DD:6A:E6:AE:C8:1E:06:19:93:56:45:97:6D:BC:2E:DC:AC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01999BAC969B1FCF4CC80E6FF0E64FFE65E5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BgnU3WrmrsgeBhmTVkWXbbwu3Kw.roa
Signing time: Tue 30 Sep 2025 17:30:03 +0000
ROA not before: Tue 30 Sep 2025 17:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.31.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.96.0/24 maxlen: 24
31.56.112.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
31.58.41.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:ac:96:9b:1f:cf:4c:c8:0e:6f:f0:e6:4f:fe:65:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 30 17:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0609d4dd6ae6aec81e0619935645976dbc2edcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:b1:91:85:34:cf:fd:cb:3b:83:05:2f:e3:
5d:15:e7:3b:cf:05:fa:89:06:57:91:fb:10:17:8d:
4c:e8:3e:73:4c:a8:e0:f7:44:a0:a5:2f:ff:95:c9:
5e:b0:14:18:a0:7a:84:5d:b6:2d:83:ce:58:8c:40:
cb:d1:f7:ef:78:7d:2f:5c:7a:c5:85:5e:a2:a4:f9:
e6:1b:1e:4e:c9:03:2b:db:d9:da:93:2b:46:3f:5b:
7f:1b:c1:59:47:7a:c5:07:d6:be:78:c5:cf:8d:bf:
2a:4f:7a:48:88:1f:f4:7c:96:ea:42:5a:68:44:7c:
6e:f3:67:e3:ce:a8:a9:3f:68:2f:62:68:4c:07:20:
5d:0d:cc:c2:95:da:34:d9:e4:dc:97:99:21:72:e2:
c3:73:ec:c9:5f:06:c0:e1:87:26:38:8d:08:bf:6d:
64:60:be:57:0b:7f:54:2e:8c:34:c9:19:ca:2a:a2:
96:29:ef:f6:1d:50:d3:63:86:19:de:3b:4e:aa:ff:
61:1b:f4:80:dd:dd:ca:cb:c9:0c:e7:d5:e4:b8:02:
a9:1a:bf:58:3a:f1:aa:db:e8:d8:f0:45:90:1b:2c:
f5:2e:70:76:dc:51:d5:a0:6b:e8:ce:9f:33:ee:06:
e0:9f:ab:c0:9b:1f:d7:0b:9d:fd:27:f2:76:ca:b1:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:D4:DD:6A:E6:AE:C8:1E:06:19:93:56:45:97:6D:BC:2E:DC:AC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BgnU3WrmrsgeBhmTVkWXbbwu3Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.31.0-31.56.32.255
31.56.44.0/24
31.56.96.0/24
31.56.112.0/24
31.57.171.0/24
31.57.222.0/23
31.58.41.0/24
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
55:3e:b6:2a:41:46:bd:b3:50:ed:1c:a2:35:89:95:29:d0:55:
2c:19:78:75:fe:68:26:f2:1b:de:5c:a9:9a:d1:03:7b:86:f6:
5b:02:30:6e:c5:8c:4c:14:0e:b9:e4:fe:37:33:40:a1:40:b8:
7b:ad:bb:53:4f:11:05:1e:43:57:02:cd:35:06:70:cf:c6:0e:
e2:78:59:72:0c:6e:b6:e3:d9:50:52:74:58:c8:a7:e8:0c:57:
51:19:d2:aa:c4:c5:40:f5:68:a4:9c:b1:37:2b:11:42:4b:3c:
60:de:61:54:49:86:45:1f:46:ff:ce:73:6b:1d:ba:d3:30:a4:
bb:60:a8:bf:b5:5e:7c:cb:dc:1f:56:4f:24:04:d0:45:88:64:
76:51:0e:68:67:9a:c3:63:de:f2:b3:a6:44:2b:91:22:49:92:
25:40:6f:1a:d8:d1:1b:de:2d:e8:3c:20:df:2b:70:ef:29:5b:
1a:91:c8:9a:09:4d:e1:ca:6d:b7:22:bb:da:31:6d:5d:25:86:
ec:e4:5f:e8:92:f5:56:d1:0b:51:44:b8:18:59:e5:fc:88:9a:
d6:90:47:10:af:f3:28:f5:69:cf:05:15:7a:58:d1:25:e1:55:
d4:b3:a1:d7:40:00:f9:da:cd:43:34:4c:2c:c7:54:44:53:fd:
4d:98:c1:72
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZmbrJabH89MyA5v8OZP/mXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwOTMwMTczMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjA5ZDRkZDZhZTZhZWM4MWUwNjE5OTM1NjQ1OTc2ZGJjMmVkY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQixkYU0z/3LO4MFL+NdFec7zwX6
iQZXkfsQF41M6D5zTKjg90SgpS//lclesBQYoHqEXbYtg85YjEDL0ffveH0vXHrF
hV6ipPnmGx5OyQMr29nakytGP1t/G8FZR3rFB9a+eMXPjb8qT3pIiB/0fJbqQlpo
RHxu82fjzqipP2gvYmhMByBdDczCldo02eTcl5khcuLDc+zJXwbA4YcmOI0Iv21k
YL5XC39ULow0yRnKKqKWKe/2HVDTY4YZ3jtOqv9hG/SA3d3Ky8kM59XkuAKpGr9Y
OvGq2+jY8EWQGyz1LnB23FHVoGvozp8z7gbgn6vAmx/XC539J/J2yrETxwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFAYJ1N1q5q7IHgYZk1ZFl228LtysMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQmduVTNXcm1yc2dlQmhtVFZrV1hiYnd1M0t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4MAwDBAAfOB8D
BAAfOCADBAAfOCwDBAAfOGADBAAfOHADBAAfOasDBAEfOd4DBAAfOikDBALZPLww
DQYJKoZIhvcNAQELBQADggEBAFU+tipBRr2zUO0cojWJlSnQVSwZeHX+aCbyG95c
qZrRA3uG9lsCMG7FjEwUDrnk/jczQKFAuHutu1NPEQUeQ1cCzTUGcM/GDuJ4WXIM
brbj2VBSdFjIp+gMV1EZ0qrExUD1aKScsTcrEUJLPGDeYVRJhkUfRv/Oc2sdutMw
pLtgqL+1XnzL3B9WTyQE0EWIZHZRDmhnmsNj3vKzpkQrkSJJkiVAbxrY0RveLeg8
IN8rcO8pWxqRyJoJTeHKbbciu9oxbV0lhuzkX+iS9VbRC1FEuBhZ5fyImtaQRxCv
8yj1ac8FFXpY0SXhVdSzoddAAPnazUM0TCzHVERT/U2YwXI=
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:24 2025 by rpki-client