Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VOdevofNeDgOulnZIPwE1ZzLO4Y.roa
File: VOdevofNeDgOulnZIPwE1ZzLO4Y.roa (raw, json)
Hash identifier: LDw3SVGO8ZR+PA+/+HtMxNh0J1KzMv9kXSiPYozweCs=
Subject key identifier: 54:E7:5E:BE:87:CD:78:38:0E:BA:59:D9:20:FC:04:D5:9C:CB:3B:86
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019952ED223A8EE225AE7F9FB263C1B2603E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VOdevofNeDgOulnZIPwE1ZzLO4Y.roa
Signing time: Tue 16 Sep 2025 14:28:16 +0000
ROA not before: Tue 16 Sep 2025 14:28:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 31.56.66.0/24 maxlen: 24
31.56.219.0/24 maxlen: 24
31.56.231.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.100.0/24 maxlen: 24
31.57.120.0/24 maxlen: 24
31.57.220.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.59.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:ed:22:3a:8e:e2:25:ae:7f:9f:b2:63:c1:b2:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 16 14:28:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54e75ebe87cd78380eba59d920fc04d59ccb3b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:f7:e5:48:70:d4:37:c5:d7:a1:3b:80:3e:
74:24:e8:75:f2:4b:88:e6:7c:57:72:9c:22:4c:cd:
42:fd:2e:0e:91:c9:b5:33:53:43:05:73:5b:1d:a5:
d4:8e:03:71:27:6a:29:14:60:54:64:93:fb:71:43:
7a:d3:c4:13:2a:c5:16:57:e6:b1:b2:1d:62:df:89:
c7:81:20:ba:ab:ca:61:fc:79:6d:4d:a7:7a:13:92:
e6:6d:00:63:85:0b:da:c3:d3:7f:5c:82:ed:55:e7:
ec:6d:e5:79:fa:20:c8:61:4a:5c:2a:65:1e:ef:b4:
27:e8:de:e4:09:1c:bb:59:7f:90:83:77:b3:e5:6f:
d0:9e:aa:34:af:71:4c:86:84:a8:02:15:d6:54:85:
cc:3e:85:f7:97:ac:06:c8:2b:9a:49:5a:f5:48:56:
07:be:bf:ea:cf:b6:6d:a5:da:71:a5:75:06:bb:d4:
d4:e9:cf:27:ec:87:b7:44:8c:2d:92:f7:ba:3d:d8:
a4:cb:d4:48:f5:a8:74:3e:c3:16:f3:40:cd:f0:50:
d0:2e:6c:4a:47:54:2c:d1:28:0a:8f:a4:47:5c:f1:
a0:54:04:70:0a:05:4f:d3:a1:ea:cc:d8:23:98:3f:
ca:48:7f:65:c7:48:60:b1:74:dc:91:fb:bf:aa:44:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:5E:BE:87:CD:78:38:0E:BA:59:D9:20:FC:04:D5:9C:CB:3B:86
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VOdevofNeDgOulnZIPwE1ZzLO4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
31.56.219.0/24
31.56.231.0/24
31.57.35.0/24
31.57.100.0/24
31.57.120.0/24
31.57.220.0/24
31.57.228.0/24
31.59.167.0/24
Signature Algorithm: sha256WithRSAEncryption
23:2d:38:0d:ba:6b:f0:53:f1:9b:c8:6b:6f:cf:4e:6b:a4:ae:
63:04:4d:f7:17:ea:20:92:e1:e0:7c:bf:40:0b:4d:9d:9e:89:
cb:c5:82:7a:6e:7f:02:65:da:94:b4:77:be:27:26:be:2a:d8:
c8:6d:f8:00:74:04:a0:0c:8e:58:49:18:e0:6b:fd:15:9d:21:
6c:8f:b9:ec:6e:83:d4:3e:4c:a6:a8:f2:ec:42:dc:d8:c8:11:
8f:77:ab:5e:5c:2c:4b:54:a3:e0:ca:c9:05:2a:81:08:58:15:
e2:d1:77:b9:27:fe:b5:df:21:49:7a:7a:5e:8b:f3:c2:03:9e:
41:e3:a4:c2:ba:10:a1:c8:32:a5:a4:ba:96:e0:ad:fb:cb:a3:
95:49:9d:84:14:83:09:6c:d3:73:44:f8:5d:8a:e8:2b:fb:55:
cd:75:af:b7:70:0d:03:76:6b:de:79:46:22:f7:7c:87:f1:a0:
ec:35:42:98:d0:c3:4e:e7:4f:6d:40:00:1c:b9:67:4c:44:0f:
33:66:3c:ed:76:85:67:3e:f0:bb:08:5e:07:be:f4:27:eb:31:
d4:f8:43:e6:d7:3b:49:b8:88:f2:8f:45:bd:30:42:cb:1e:79:
c8:b9:52:a6:78:41:64:d4:40:53:a7:cf:0a:c5:ff:88:4e:1a:
b6:d8:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:14:28 2025 by rpki-client