Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Sp1PO9Zhf6Y6C9wYI1UhCL8aNXU.roa
File: Sp1PO9Zhf6Y6C9wYI1UhCL8aNXU.roa (raw, json)
Hash identifier: J0oTlai9tsMxNS7TFbsLRQKA3TB0MFILZ/FfGRiNxTs=
Subject key identifier: 4A:9D:4F:3B:D6:61:7F:A6:3A:0B:DC:18:23:55:21:08:BF:1A:35:75
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A528C171CE25062CB6E43E01EF61D79A4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Sp1PO9Zhf6Y6C9wYI1UhCL8aNXU.roa
Signing time: Wed 05 Nov 2025 05:45:03 +0000
ROA not before: Wed 05 Nov 2025 05:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.107.0/24 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:8c:17:1c:e2:50:62:cb:6e:43:e0:1e:f6:1d:79:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 5 05:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a9d4f3bd6617fa63a0bdc1823552108bf1a3575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:75:c5:a4:ca:46:ee:a2:d7:17:50:39:13:
ec:d9:90:da:24:06:46:0b:14:35:ec:43:00:9d:bc:
58:fd:c1:dd:e5:3b:d6:0b:ad:c9:df:49:0d:97:22:
2d:b3:7c:fc:ae:98:4f:ca:68:4c:bc:d2:10:af:64:
cc:16:8e:c2:cc:b2:65:e3:b4:d2:09:52:71:0d:e5:
de:cf:76:0f:b8:d3:29:39:4b:8f:41:4c:06:3e:19:
61:67:34:d9:fc:bb:70:64:7a:17:86:7f:ef:9c:14:
5c:68:07:a4:be:7f:c4:38:86:6a:f7:30:b1:8b:3b:
87:49:76:bf:08:32:90:87:48:d2:5b:6b:6e:cb:2d:
1a:04:83:d6:86:43:e0:84:c2:39:ed:f4:9d:5a:95:
5e:6d:e7:bd:19:89:5b:d5:5a:e3:9f:98:c3:dc:1c:
a6:c5:49:5e:8f:24:77:f8:75:db:a9:63:6b:f6:70:
0c:ba:f5:d2:97:e4:30:8c:cd:06:0e:2a:74:4f:15:
4c:56:ac:e1:c1:04:31:99:3a:2e:1d:16:85:95:aa:
e2:81:4c:d7:4e:6c:82:ed:8c:a6:43:36:6e:08:58:
09:ad:53:0f:9d:31:e2:94:0f:b4:3d:1b:a8:5a:ea:
9b:15:7f:c9:6f:9d:46:68:36:4b:de:61:2c:51:29:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:4F:3B:D6:61:7F:A6:3A:0B:DC:18:23:55:21:08:BF:1A:35:75
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Sp1PO9Zhf6Y6C9wYI1UhCL8aNXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.107.0/24
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:22:d2:37:ab:e7:5b:04:71:c9:80:46:fc:40:26:43:8a:41:
14:8c:5e:15:ee:c7:68:79:87:5b:b0:8f:7b:1d:91:87:2d:6c:
13:0f:e9:95:01:2e:ae:d3:9a:31:12:86:73:03:1f:d8:97:92:
6b:7a:7a:02:71:cc:27:1c:67:6e:56:55:27:6c:34:d0:52:f3:
32:8d:e3:4a:48:dd:d4:db:1a:cd:0c:71:59:60:ba:bb:6e:84:
fe:4f:c3:5b:53:ef:85:6f:ba:d8:7c:87:01:03:d4:13:92:fa:
c3:4e:6d:01:83:66:ea:f4:b2:60:c9:62:97:bd:77:f9:01:b4:
62:a1:89:85:fd:f8:bd:05:db:8b:8d:82:a5:71:04:50:2c:71:
07:1a:60:8b:83:a2:34:ae:9e:b1:9d:a4:97:a5:ff:7a:e1:f7:
43:e1:82:3b:55:45:f7:35:40:14:73:9c:e0:7e:07:fc:a1:8d:
17:22:65:c5:e4:16:63:a7:7e:c7:45:cb:fd:1e:b0:25:78:c1:
a6:83:78:be:dc:95:83:b9:24:4b:74:2d:30:3e:72:ee:06:e3:
27:b8:2f:44:8a:62:47:6f:00:bb:bd:ff:6a:12:b9:1a:34:52:
47:47:fb:96:9d:cc:59:55:2f:97:8f:71:c8:6f:de:32:4b:bc:
db:d9:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 19:45:58 2025 by rpki-client