Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y53xLqgziR4fFFYK6eQ9t-qxlKg.roa
File: Y53xLqgziR4fFFYK6eQ9t-qxlKg.roa (raw, json)
Hash identifier: HP8ewMxIaF0K+tTNyYLVv3yJx0EBh5A3NZoyUaZFs5E=
Subject key identifier: 63:9D:F1:2E:A8:33:89:1E:1F:14:56:0A:E9:E4:3D:B7:EA:B1:94:A8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A01F76B9FFECC191CB6D6995F228B36E9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y53xLqgziR4fFFYK6eQ9t-qxlKg.roa
Signing time: Mon 20 Oct 2025 14:13:03 +0000
ROA not before: Mon 20 Oct 2025 14:13:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 31.56.192.0/24 maxlen: 24
31.56.195.0/24 maxlen: 24
31.57.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:f7:6b:9f:fe:cc:19:1c:b6:d6:99:5f:22:8b:36:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 20 14:13:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=639df12ea833891e1f14560ae9e43db7eab194a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:2a:a0:b9:f2:63:9a:a5:01:05:0e:a4:7f:
99:88:f7:ba:e3:af:f4:80:7f:80:da:36:a9:e1:9d:
6e:33:bd:63:06:7a:91:e4:6b:b4:48:34:a1:f9:be:
64:07:56:65:f9:94:a1:75:3b:fb:d8:bd:d2:e6:09:
aa:d4:6f:53:ab:3b:b9:27:b9:2f:47:12:22:f4:4d:
24:13:62:8f:0d:ae:d9:bf:8c:72:ed:7d:6a:aa:22:
7f:58:12:84:68:4c:61:f5:13:ea:4a:99:3b:b6:a4:
c0:42:7c:07:69:9f:e9:02:35:49:1a:fa:9f:ee:64:
69:6f:d2:fa:a7:b1:9e:6f:4a:4e:36:be:b3:0b:80:
df:a8:14:c2:89:5e:56:36:26:f8:89:a0:99:b2:46:
ed:46:77:c1:a6:06:63:a7:00:6b:39:19:23:68:78:
94:cc:97:fa:a9:a1:d5:37:52:6c:75:51:2b:90:a7:
27:44:24:16:29:92:a8:ed:2b:23:bc:ac:5a:10:b7:
af:3a:0d:85:9c:c1:15:6d:0b:51:4b:91:47:50:88:
15:21:78:a0:88:91:b4:2a:8d:fa:13:dd:bb:13:cf:
5e:17:24:58:65:de:70:c5:2f:2a:01:3c:9a:d1:98:
d7:ef:2d:2e:99:1c:71:8c:5c:c1:be:a8:ad:33:11:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:F1:2E:A8:33:89:1E:1F:14:56:0A:E9:E4:3D:B7:EA:B1:94:A8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Y53xLqgziR4fFFYK6eQ9t-qxlKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.192.0/24
31.56.195.0/24
31.57.237.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c8:28:11:30:59:9f:32:ee:ab:c5:e0:f1:35:3b:3a:94:0b:
7a:6f:3c:6a:7d:8c:f5:53:a8:0b:83:87:05:e9:e6:d2:07:44:
82:7b:62:1f:67:c7:01:b4:4a:21:70:f6:ba:01:e0:af:9c:4d:
f5:a0:38:ee:f7:bc:32:7f:e6:ea:06:21:ba:eb:c3:b5:2a:11:
19:a3:93:0d:03:a4:cc:bb:30:bf:46:7e:20:8e:a3:85:23:02:
5e:0a:4d:5d:fc:f9:86:6a:b7:7a:bb:bc:53:1e:f7:c6:4b:4c:
99:da:dc:7b:c8:a2:51:7e:50:58:63:6e:a7:dd:8f:f6:be:df:
1b:f5:ad:82:1a:7d:37:95:1f:04:9e:9a:50:ab:8f:2c:b3:33:
09:1f:95:80:c2:f7:6b:65:54:e1:bb:d6:e4:a5:ce:2b:a2:82:
2d:d3:3c:ae:7a:b8:53:c9:6b:6f:08:0a:52:97:7e:10:97:20:
e9:e2:ca:d6:55:b9:e2:9f:d1:03:8a:ba:7d:a4:ff:1b:a5:2d:
cb:09:0b:15:24:f9:d6:19:a1:38:27:0a:55:ab:ff:31:11:bd:
f9:e1:f9:3f:92:05:c0:85:e2:56:d4:79:bc:4f:03:88:17:5f:
ed:f0:ea:9d:db:75:b8:c4:07:a0:1e:21:2b:5a:20:2d:07:1a:
32:e7:b5:89
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZoB92uf/swZHLbWmV8iizbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDIwMTQxMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzlkZjEyZWE4MzM4OTFlMWYxNDU2MGFlOWU0M2RiN2VhYjE5NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqYqoLnyY5qlAQUOpH+ZiPe646/0
gH+A2jap4Z1uM71jBnqR5Gu0SDSh+b5kB1Zl+ZShdTv72L3S5gmq1G9Tqzu5J7kv
RxIi9E0kE2KPDa7Zv4xy7X1qqiJ/WBKEaExh9RPqSpk7tqTAQnwHaZ/pAjVJGvqf
7mRpb9L6p7Geb0pONr6zC4DfqBTCiV5WNib4iaCZskbtRnfBpgZjpwBrORkjaHiU
zJf6qaHVN1JsdVErkKcnRCQWKZKo7SsjvKxaELevOg2FnMEVbQtRS5FHUIgVIXig
iJG0Ko36E927E89eFyRYZd5wxS8qATya0ZjX7y0umRxxjFzBvqitMxHgzQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGOd8S6oM4keHxRWCunkPbfqsZSoMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWTUzeExxZ3ppUjRmRkZZSzZlUTl0LXF4bEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjAAwQA
HzjDAwQAHzntMA0GCSqGSIb3DQEBCwUAA4IBAQCIyCgRMFmfMu6rxeDxNTs6lAt6
bzxqfYz1U6gLg4cF6ebSB0SCe2IfZ8cBtEohcPa6AeCvnE31oDju97wyf+bqBiG6
68O1KhEZo5MNA6TMuzC/Rn4gjqOFIwJeCk1d/PmGard6u7xTHvfGS0yZ2tx7yKJR
flBYY26n3Y/2vt8b9a2CGn03lR8EnppQq48sszMJH5WAwvdrZVThu9bkpc4rooIt
0zyuerhTyWtvCApSl34QlyDp4srWVbnin9EDirp9pP8bpS3LCQsVJPnWGaE4JwpV
q/8xEb354fk/kgXAheJW1Hm8TwOIF1/t8Oqd23W4xAegHiErWiAtBxoy57WJ
-----END CERTIFICATE-----
Generated at Tue Oct 21 11:28:37 2025 by rpki-client