Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lz4C-9cZCPf0g06A-tS1m5DuA4I.roa
File: Lz4C-9cZCPf0g06A-tS1m5DuA4I.roa (raw, json)
Hash identifier: SXBlt3uzA4hcZwQAYei5Se4MVtzd/4B1s1ia0bSlLLM=
Subject key identifier: 2F:3E:02:FB:D7:19:08:F7:F4:83:4E:80:FA:D4:B5:9B:90:EE:03:82
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A5DCEB0A6E0717EBB4BF0AAD01523F010
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lz4C-9cZCPf0g06A-tS1m5DuA4I.roa
Signing time: Fri 07 Nov 2025 10:13:37 +0000
ROA not before: Fri 07 Nov 2025 10:13:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212742
IP address blocks: 31.56.176.0/22 maxlen: 24
31.56.182.0/23 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/23 maxlen: 24
31.56.208.0/23 maxlen: 24
31.56.228.0/23 maxlen: 24
31.58.196.0/22 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/23 maxlen: 24
31.58.232.0/23 maxlen: 24
31.59.36.0/22 maxlen: 24
31.59.44.0/22 maxlen: 24
217.60.8.0/22 maxlen: 24
217.60.32.0/22 maxlen: 24
217.60.44.0/22 maxlen: 24
217.60.48.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:ce:b0:a6:e0:71:7e:bb:4b:f0:aa:d0:15:23:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 10:13:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f3e02fbd71908f7f4834e80fad4b59b90ee0382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:30:10:a0:e0:52:16:1d:bb:ad:b8:1f:d7:
b6:69:10:3e:3d:2e:2c:5f:f3:72:ea:4f:80:a3:a6:
6f:10:8f:0d:55:5e:d8:c2:af:66:0c:b5:4e:d6:11:
43:37:76:88:fb:6c:36:f9:bb:40:7f:17:4f:fa:6f:
1e:fd:1c:01:43:2b:4d:c4:71:07:8b:60:73:95:1c:
f3:62:d3:ad:e7:73:b3:56:18:6c:e5:34:f6:c4:fe:
87:9b:6b:d2:30:8b:22:e4:99:5e:19:f1:78:55:66:
eb:96:8e:24:e2:b4:94:40:a2:b2:9f:43:02:55:00:
33:7c:4c:bc:2e:a6:27:61:36:11:88:89:f9:a1:10:
c0:fd:6d:54:32:01:af:ac:0b:93:f1:57:23:de:5b:
ee:47:8c:14:5e:f3:22:5f:e3:48:bc:d6:a8:79:b8:
47:f9:b4:3b:c1:70:47:48:8c:2e:3f:c1:d4:5a:46:
0c:22:de:0f:75:52:54:a9:13:13:2b:67:1f:2c:e5:
39:c2:29:e0:f8:ef:4c:f1:a5:e1:c7:9e:f6:aa:b8:
a9:44:3c:b6:e0:7e:62:7f:71:9c:12:59:1a:95:fd:
00:61:9a:4a:be:77:39:ef:51:63:ee:6b:e2:f2:ec:
72:34:12:3b:c3:27:35:e2:bd:58:de:18:6c:71:2a:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:02:FB:D7:19:08:F7:F4:83:4E:80:FA:D4:B5:9B:90:EE:03:82
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Lz4C-9cZCPf0g06A-tS1m5DuA4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.176.0/22
31.56.182.0-31.56.189.255
31.56.208.0/23
31.56.228.0/23
31.58.196.0/22
31.58.204.0-31.58.209.255
31.58.232.0/23
31.59.36.0/22
31.59.44.0/22
217.60.8.0/22
217.60.32.0/22
217.60.44.0-217.60.59.255
Signature Algorithm: sha256WithRSAEncryption
18:a3:bf:b2:5f:86:ac:a3:c2:cd:1a:b2:07:92:11:20:f0:a4:
a8:54:89:cf:5d:70:86:1b:cb:87:df:0c:80:cf:2f:5d:a6:41:
d3:5a:a9:9d:77:8f:88:94:8e:71:27:b5:3d:74:4d:e9:6f:21:
48:22:c9:43:91:b4:8d:82:d1:9b:03:1c:97:38:b5:15:09:e5:
6c:e7:ce:3b:54:e2:20:5f:31:eb:6c:87:a2:b0:44:77:e8:8e:
fb:9b:6b:4f:7f:df:d9:47:8e:75:42:d7:0b:1c:92:c3:94:0f:
f7:75:45:82:29:1e:49:f9:48:b9:77:87:25:6f:6e:ef:dc:27:
b2:b1:c1:fe:39:2e:77:7f:6f:d8:6e:8d:b7:8c:03:b9:f7:d6:
d0:96:cd:2f:68:c3:62:f8:2d:d1:ed:e6:8a:04:3d:de:c0:7c:
58:5f:c2:e0:5e:98:ab:d8:65:d0:4f:17:be:f3:df:a5:10:db:
07:59:69:16:a7:26:4e:bb:a0:3b:28:4c:70:7d:f7:5e:c2:5e:
36:90:41:81:96:2a:db:71:68:f2:c8:68:fc:8d:b7:fa:4d:96:
1a:15:1f:06:12:af:0b:48:97:5c:36:3c:93:fd:e4:9b:17:44:
7e:85:61:cb:5d:30:65:5e:2d:2e:39:38:12:cf:4a:ab:f7:be:
fd:11:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 20:49:01 2025 by rpki-client