Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DP_14qrB0_xorvFik7gyun5TpIc.roa
File: DP_14qrB0_xorvFik7gyun5TpIc.roa (raw, json)
Hash identifier: GKPWd2OG0nRbpdBmNzNy87o3RL0lHud0avFgXFz2S/U=
Subject key identifier: 0C:FF:F5:E2:AA:C1:D3:FC:68:AE:F1:62:93:B8:32:BA:7E:53:A4:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197CB42D0E115F234B83A234DBBE4A73B68
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DP_14qrB0_xorvFik7gyun5TpIc.roa
Signing time: Wed 02 Jul 2025 13:10:43 +0000
ROA not before: Wed 02 Jul 2025 13:10:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.56.42.0/23 maxlen: 23
31.56.220.0/24 maxlen: 24
31.57.238.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.220.0/23 maxlen: 23
31.59.138.0/23 maxlen: 23
31.59.168.0/23 maxlen: 23
31.59.172.0/24 maxlen: 24
31.59.173.0/24 maxlen: 24
31.59.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:42:d0:e1:15:f2:34:b8:3a:23:4d:bb:e4:a7:3b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 2 13:10:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cfff5e2aac1d3fc68aef16293b832ba7e53a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:c4:38:7d:c4:fe:16:8a:e5:03:6c:00:d6:
46:8b:c3:13:1a:ee:36:3b:4f:78:96:b8:10:a7:bf:
a5:a5:34:fa:d3:9c:0c:a2:03:a6:be:cc:c1:02:3b:
bc:2e:b1:68:fc:67:fc:b6:76:49:b8:e0:c6:6d:3d:
68:1f:4f:2c:96:8e:46:fb:f1:bb:41:2c:ae:d8:bf:
3a:5a:71:16:08:bc:a1:2d:96:8c:87:6d:fe:e3:b0:
a1:5c:f9:ed:5c:a3:74:e1:be:de:bf:1e:a4:d9:c9:
2b:0b:24:d4:1f:a3:f0:d9:73:5e:b2:2a:81:84:67:
be:5f:74:d1:ae:b3:a7:63:dc:18:65:f1:f2:c4:f5:
cb:7a:37:9e:82:89:10:c8:00:59:06:ee:ad:58:96:
9c:b5:63:45:f3:dc:cf:4f:1e:79:37:28:9a:07:d0:
1b:1d:da:62:18:0b:39:e7:37:c0:5c:3f:52:cb:24:
d4:94:c7:de:09:3e:a3:12:06:33:db:b4:44:ed:25:
da:50:13:78:54:0b:fc:de:1d:12:f9:51:26:d9:f1:
21:0b:56:97:41:da:c0:f4:79:2e:85:82:3c:a5:57:
33:51:ce:b3:62:4f:15:40:22:cf:f4:95:b1:b2:57:
05:79:3f:a9:d8:6b:e4:e5:4d:17:40:b6:31:81:ea:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FF:F5:E2:AA:C1:D3:FC:68:AE:F1:62:93:B8:32:BA:7E:53:A4:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DP_14qrB0_xorvFik7gyun5TpIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/23
31.56.220.0/24
31.57.238.0/24
31.58.87.0/24
31.58.220.0/23
31.59.138.0/23
31.59.168.0/23
31.59.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:8a:d2:13:a8:d8:c9:cc:0e:22:6e:f5:c7:bb:da:bf:81:a1:
54:20:ab:f6:f7:f0:cb:60:e6:cc:f8:8c:16:f8:40:a6:b6:ab:
d9:b5:51:d0:4d:8a:54:78:a3:cb:69:0e:b1:10:a6:7a:83:e9:
63:22:fc:b2:69:4e:06:38:d6:f2:8f:b7:2c:74:88:d3:3b:89:
ed:eb:a6:cb:92:98:46:c6:e7:4e:8f:2f:63:0e:ce:70:ae:43:
1d:52:42:08:df:1f:32:9f:62:c3:e8:da:c0:f7:e8:94:38:45:
54:2f:a7:cb:f1:18:61:02:93:e6:d5:bb:76:21:42:98:69:48:
a5:0a:d9:95:71:46:35:ff:f3:a6:13:04:d6:0c:ab:b2:ad:03:
f4:23:d0:dd:0b:60:21:eb:ee:9d:13:68:73:a4:97:ba:2a:5e:
ba:34:5b:df:5a:9d:6d:cb:44:6b:65:cd:f0:9c:5c:83:3b:2f:
81:6f:c9:01:86:c8:cf:0d:b9:c4:c1:0b:d4:4c:63:6d:ce:8a:
4f:ad:f9:0f:67:27:67:0f:76:e7:20:0b:4b:5a:93:e2:4d:46:
b3:1d:e5:d0:84:33:0b:3f:cb:06:c8:6a:6b:d1:f9:76:6d:d0:
03:ab:7c:fc:3f:b2:db:2f:0e:2a:c5:79:d5:a4:73:59:e4:09:
b2:b4:47:e1
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZfLQtDhFfI0uDojTbvkpztoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzAyMTMxMDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2ZmZjVlMmFhYzFkM2ZjNjhhZWYxNjI5M2I4MzJiYTdlNTNhNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9/EOH3E/haK5QNsANZGi8MTGu42
O094lrgQp7+lpTT605wMogOmvszBAju8LrFo/Gf8tnZJuODGbT1oH08slo5G+/G7
QSyu2L86WnEWCLyhLZaMh23+47ChXPntXKN04b7evx6k2ckrCyTUH6Pw2XNesiqB
hGe+X3TRrrOnY9wYZfHyxPXLejeegokQyABZBu6tWJactWNF89zPTx55NyiaB9Ab
HdpiGAs55zfAXD9SyyTUlMfeCT6jEgYz27RE7SXaUBN4VAv83h0S+VEm2fEhC1aX
QdrA9HkuhYI8pVczUc6zYk8VQCLP9JWxslcFeT+p2Gvk5U0XQLYxgeoNUwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFAz/9eKqwdP8aK7xYpO4Mrp+U6SHMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvRFBfMTRxckIwX3hvcnZGaWs3Z3l1bjVUcEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBHzgqAwQA
HzjcAwQAHznuAwQAHzpXAwQBHzrcAwQBHzuKAwQBHzuoAwQCHzusMA0GCSqGSIb3
DQEBCwUAA4IBAQAritITqNjJzA4ibvXHu9q/gaFUIKv29/DLYObM+IwW+ECmtqvZ
tVHQTYpUeKPLaQ6xEKZ6g+ljIvyyaU4GONbyj7csdIjTO4nt66bLkphGxudOjy9j
Ds5wrkMdUkII3x8yn2LD6NrA9+iUOEVUL6fL8RhhApPm1bt2IUKYaUilCtmVcUY1
//OmEwTWDKuyrQP0I9DdC2Ah6+6dE2hzpJe6Kl66NFvfWp1ty0RrZc3wnFyDOy+B
b8kBhsjPDbnEwQvUTGNtzopPrfkPZydnD3bnIAtLWpPiTUazHeXQhDMLP8sGyGpr
0fl2bdADq3z8P7LbLw4qxXnVpHNZ5AmytEfh
-----END CERTIFICATE-----
Generated at Fri Jul 4 20:15:06 2025 by rpki-client