Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b6dTu2L-TbkscHcfnArjmO-p4eI.roa
File: b6dTu2L-TbkscHcfnArjmO-p4eI.roa (raw, json)
Hash identifier: A9Kl/wIILf3q7RzkV6MoNHPu9Kafj0NXDsH+0byge6c=
Subject key identifier: 6F:A7:53:BB:62:FE:4D:B9:2C:70:77:1F:9C:0A:E3:98:EF:A9:E1:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A86C8A7E45E393318861B28E5383F548A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b6dTu2L-TbkscHcfnArjmO-p4eI.roa
Signing time: Sat 15 Nov 2025 09:11:28 +0000
ROA not before: Sat 15 Nov 2025 09:11:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213799
IP address blocks: 31.56.214.0/24 maxlen: 24
31.58.247.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:86:c8:a7:e4:5e:39:33:18:86:1b:28:e5:38:3f:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 09:11:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fa753bb62fe4db92c70771f9c0ae398efa9e1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:2f:17:85:9c:c3:fc:87:86:b8:85:2e:80:
fe:03:a0:82:e9:70:6e:55:89:72:e1:f2:20:0e:c7:
1f:5f:f0:34:71:9e:ea:3e:31:fc:56:6b:09:65:f7:
c4:14:91:85:e6:77:fa:02:85:2f:72:c5:40:c6:58:
0b:c5:75:b5:e4:31:64:2f:04:f2:bc:b4:10:0d:8f:
92:36:af:8b:bb:57:ab:be:86:74:af:b8:d9:74:69:
01:8d:ec:20:34:f5:85:a3:1f:ac:8a:c3:2b:ef:3f:
d2:93:d6:c5:aa:cc:84:85:49:f3:ee:9c:f8:81:4c:
4b:78:1c:e9:79:72:b1:46:d7:65:57:0e:7a:86:2d:
48:2d:25:f6:9f:a0:0e:f9:c7:53:b0:1b:d4:53:e0:
90:73:4d:4d:5a:29:a1:3b:6f:65:be:50:60:df:87:
26:8c:0f:5d:cd:91:94:3c:5d:7e:3c:a8:0e:f8:c3:
43:0d:6e:62:63:9f:a9:b9:76:a6:f9:81:98:7a:e4:
67:ce:59:50:af:c0:14:8c:1a:2f:63:ff:bb:88:db:
74:d3:eb:25:53:5e:d4:f3:3f:66:3e:a1:18:ba:d6:
28:34:d8:15:9a:81:a1:55:9f:aa:ec:fe:3c:19:41:
1a:ce:c0:f0:25:89:4e:aa:80:79:b8:b1:70:82:c8:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:53:BB:62:FE:4D:B9:2C:70:77:1F:9C:0A:E3:98:EF:A9:E1:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/b6dTu2L-TbkscHcfnArjmO-p4eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.214.0/24
31.58.247.0/24
31.58.249.0-31.58.250.255
Signature Algorithm: sha256WithRSAEncryption
22:e6:dd:a1:dd:b6:cf:8d:87:0f:7e:7b:a8:c4:f8:63:0d:58:
93:fd:dd:42:1f:8a:40:01:15:f3:d8:84:fc:08:51:90:ff:6f:
07:04:5a:0c:fd:64:6e:d7:e8:8b:11:c3:7d:cc:83:69:a4:a1:
30:f2:0a:1a:a0:81:23:9f:1e:c0:7e:2e:e7:ef:d1:8d:f8:45:
59:3b:40:42:41:2d:98:ce:35:09:f2:ab:d7:b3:b9:29:1d:0a:
68:97:07:09:8c:4a:3c:8c:3c:b5:d5:e2:6b:32:6f:db:ad:07:
77:29:68:01:38:bd:04:fa:fe:83:c4:6e:1c:79:4d:1e:02:63:
c4:0d:5a:15:70:ff:84:fd:47:71:6a:e6:ae:10:47:34:3d:8b:
89:59:d3:ac:e0:23:b6:a9:83:26:3d:86:be:01:86:8b:28:45:
7a:3e:0c:18:e2:7d:f0:37:57:41:1e:04:88:cd:48:2e:52:d7:
af:19:bd:e8:83:f6:03:82:d4:b1:93:fc:e2:d3:25:3a:9c:73:
bd:6d:40:54:09:ae:b8:e2:6b:be:83:39:ad:ae:60:2e:84:ac:
ad:14:8c:c6:46:f2:d9:4b:12:a6:51:ce:78:65:ff:4f:3e:c0:
bc:51:c8:ee:72:96:69:09:fd:27:95:1c:42:89:1f:df:d6:60:
4f:dd:cb:bd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZqGyKfkXjkzGIYbKOU4P1SKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMTE1MDkxMTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmE3NTNiYjYyZmU0ZGI5MmM3MDc3MWY5YzBhZTM5OGVmYTllMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts8vF4Wcw/yHhriFLoD+A6CC6XBu
VYly4fIgDscfX/A0cZ7qPjH8VmsJZffEFJGF5nf6AoUvcsVAxlgLxXW15DFkLwTy
vLQQDY+SNq+Lu1ervoZ0r7jZdGkBjewgNPWFox+sisMr7z/Sk9bFqsyEhUnz7pz4
gUxLeBzpeXKxRtdlVw56hi1ILSX2n6AO+cdTsBvUU+CQc01NWimhO29lvlBg34cm
jA9dzZGUPF1+PKgO+MNDDW5iY5+puXam+YGYeuRnzllQr8AUjBovY/+7iNt00+sl
U17U8z9mPqEYutYoNNgVmoGhVZ+q7P48GUEazsDwJYlOqoB5uLFwgshecwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFG+nU7ti/k25LHB3H5wK45jvqeHiMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvYjZkVHUyTC1UYmtzY0hjZm5BcmptTy1wNGVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAHzjWAwQA
Hzr3MAwDBAAfOvkDBAAfOvowDQYJKoZIhvcNAQELBQADggEBACLm3aHdts+Nhw9+
e6jE+GMNWJP93UIfikABFfPYhPwIUZD/bwcEWgz9ZG7X6IsRw33Mg2mkoTDyChqg
gSOfHsB+Lufv0Y34RVk7QEJBLZjONQnyq9ezuSkdCmiXBwmMSjyMPLXV4msyb9ut
B3cpaAE4vQT6/oPEbhx5TR4CY8QNWhVw/4T9R3Fq5q4QRzQ9i4lZ06zgI7apgyY9
hr4BhosoRXo+DBjiffA3V0EeBIjNSC5S168ZveiD9gOC1LGT/OLTJTqcc71tQFQJ
rrjia76DOa2uYC6ErK0UjMZG8tlLEqZRznhl/08+wLxRyO5ylmkJ/SeVHEKJH9/W
YE/dy70=
-----END CERTIFICATE-----
Generated at Mon Nov 17 00:48:20 2025 by rpki-client