Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_POQXNzeJ9RxaLcGD3qqGfvo3zQ.roa
File: _POQXNzeJ9RxaLcGD3qqGfvo3zQ.roa (raw, json)
Hash identifier: AdwtWuFWvm0JVUDFXvvp4D/M+rOxAnqXKkprmbgqk+k=
Subject key identifier: FC:F3:90:5C:DC:DE:27:D4:71:68:B7:06:0F:7A:AA:19:FB:E8:DF:34
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A7275DD68156430299BC30699735062E0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_POQXNzeJ9RxaLcGD3qqGfvo3zQ.roa
Signing time: Tue 11 Nov 2025 10:28:38 +0000
ROA not before: Tue 11 Nov 2025 10:28:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48529
IP address blocks: 31.56.190.0/24 maxlen: 24
31.58.53.0/24 maxlen: 24
31.58.227.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:75:dd:68:15:64:30:29:9b:c3:06:99:73:50:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 11 10:28:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcf3905cdcde27d47168b7060f7aaa19fbe8df34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:02:f9:63:aa:d9:b0:d6:1f:65:b5:17:4f:
ef:a2:01:f7:0f:e2:b1:af:40:aa:24:6c:e4:30:fa:
bf:ed:06:d2:1d:f6:b3:61:9a:4c:4f:67:16:90:f5:
46:be:21:e9:f5:fb:be:2f:80:91:80:47:78:f3:39:
4b:f5:41:cb:2e:81:8b:71:09:a5:e5:cd:9f:0b:9a:
42:55:e0:92:33:0c:b5:b2:e0:a6:a7:3c:32:d8:61:
97:c1:b0:1e:2c:46:99:f8:8a:a3:a4:f2:eb:71:a1:
7e:1c:77:d1:12:44:bf:db:71:af:f7:77:c4:e9:99:
34:24:43:d7:44:02:dd:1f:e6:da:f4:d1:26:ec:6f:
fc:7a:26:4d:0d:eb:c2:66:88:11:7a:5a:83:55:5f:
cf:8d:ef:eb:24:a7:68:63:6a:71:ec:ec:82:76:86:
73:c4:7e:a3:f7:86:cb:c1:a9:20:b1:25:0a:1c:3f:
f1:ee:e6:c1:23:6d:9a:fe:3b:b6:00:94:8c:e1:e0:
12:85:20:7f:88:49:26:d4:38:16:ba:68:bf:f7:a7:
67:ee:17:79:5e:a1:96:1d:e3:a9:0b:2c:93:67:4c:
53:6c:82:63:7f:05:2c:bd:d1:92:2a:c2:66:cb:45:
bf:31:3d:71:df:f9:0e:ea:5f:a0:1d:51:4f:75:8f:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F3:90:5C:DC:DE:27:D4:71:68:B7:06:0F:7A:AA:19:FB:E8:DF:34
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_POQXNzeJ9RxaLcGD3qqGfvo3zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.190.0/24
31.58.53.0/24
31.58.227.0/24
217.60.24.0/22
217.60.60.0/22
Signature Algorithm: sha256WithRSAEncryption
75:53:53:f0:9f:3b:81:f4:aa:a9:86:ce:b3:46:9a:c2:1d:a2:
6b:2b:13:ab:ef:d3:29:76:ef:f6:b8:63:e4:e6:5c:7c:ce:cd:
25:31:26:e7:ec:ce:98:03:5d:b9:0d:71:89:6b:09:18:67:5b:
cb:48:a1:7e:b4:cb:ce:a2:b4:af:db:54:cd:7e:b1:88:9c:6a:
80:a4:2f:1c:f4:47:71:9c:1d:b8:0e:a6:35:2c:6a:88:ed:75:
54:7a:0f:a0:62:2a:b6:1b:8c:c1:32:e8:dc:6f:9c:e6:a5:af:
ec:e0:dd:f8:6b:62:af:4d:1b:ea:34:ce:96:76:84:8b:f6:a0:
62:e1:43:bb:0e:85:31:a0:01:74:b7:56:05:a7:39:62:a8:13:
03:6f:7f:6b:ca:86:2a:43:5c:07:52:38:7a:17:5e:9f:28:ac:
f7:bc:d0:0e:58:b0:d4:4f:d3:20:cb:e4:7f:a0:1a:b9:f4:84:
c9:44:f1:15:70:69:e3:62:bf:bd:58:3e:59:86:b7:b0:a8:81:
af:5f:56:1b:63:22:f4:fa:c5:5c:53:97:11:02:e4:b1:78:20:
4c:51:bf:f9:07:fd:cb:44:29:54:49:cf:a3:44:e1:22:7a:91:
63:67:23:e9:b6:8f:3d:69:6b:1b:c9:58:86:a3:09:7c:d0:9c:
2c:b1:14:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 20:52:53 2025 by rpki-client