Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bmZuv8xX7YfqV_dIZHXnZ2dXaYc.roa
File: bmZuv8xX7YfqV_dIZHXnZ2dXaYc.roa (raw, json)
Hash identifier: EI4IZ1pIPIzAw4UvnKLZ0T80/Rtd173gIYyt0GFgFLQ=
Subject key identifier: 6E:66:6E:BF:CC:57:ED:87:EA:57:F7:48:64:75:E7:67:67:57:69:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A545A6CCEDA8336B544FF05CD2351B8B3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bmZuv8xX7YfqV_dIZHXnZ2dXaYc.roa
Signing time: Wed 05 Nov 2025 14:10:03 +0000
ROA not before: Wed 05 Nov 2025 14:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 31.56.213.0/24 maxlen: 24
31.56.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:5a:6c:ce:da:83:36:b5:44:ff:05:cd:23:51:b8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 5 14:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e666ebfcc57ed87ea57f7486475e76767576987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:8b:29:c2:d3:38:e5:4d:e5:f3:b7:81:ec:
37:a2:d0:3e:ab:59:84:06:94:bb:04:fb:bf:cf:19:
bc:f8:49:b0:e7:78:7a:47:0f:c2:5c:f5:13:92:c9:
42:c8:87:67:3a:ba:8a:e3:29:36:86:65:18:1b:ed:
29:79:c6:a8:a4:bf:a5:14:49:f6:b9:44:e2:8c:57:
5f:3c:81:5a:4c:f2:9b:f0:af:dd:c8:3a:c3:68:fe:
01:eb:79:3c:12:eb:d3:46:d9:c3:60:7a:e5:07:dc:
d2:6f:b6:e3:48:0c:f5:e6:3b:ab:a7:0f:76:66:2b:
67:88:23:55:15:b5:d0:b1:75:9d:69:7c:2d:59:53:
95:67:fb:cd:f9:48:73:49:f8:c6:a2:b4:bb:64:06:
e4:eb:c3:82:64:a4:3b:80:48:f1:43:ab:3f:0e:7a:
56:64:18:f7:a9:41:ee:9f:f1:22:f0:e6:c7:5b:d1:
5f:93:f0:02:fe:d0:cb:1b:2c:f6:ff:a7:a4:5c:ca:
e1:e6:10:33:d9:31:3a:8a:b3:6b:d3:42:fa:49:2a:
6c:ba:fa:d8:86:fb:0a:92:40:81:e9:ff:84:9c:4e:
99:bb:d4:dc:93:f5:de:bb:e5:5c:3d:fd:5a:67:7f:
2c:13:43:07:66:33:05:e3:90:ba:0c:57:a3:f9:25:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:6E:BF:CC:57:ED:87:EA:57:F7:48:64:75:E7:67:67:57:69:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bmZuv8xX7YfqV_dIZHXnZ2dXaYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.213.0-31.56.214.255
Signature Algorithm: sha256WithRSAEncryption
a8:67:fc:43:fd:12:a0:61:7a:04:dc:4b:f4:88:89:38:8b:0f:
1a:47:82:81:35:12:c0:89:d4:2d:fb:3e:62:2f:8e:af:f4:60:
d6:4e:d1:80:e5:66:e4:56:e7:72:d3:d0:e2:00:e4:cb:16:8b:
b7:60:6a:10:af:90:4f:75:f4:8d:30:72:84:d6:6c:cf:ba:6b:
3a:e2:23:0b:e0:c1:27:09:72:25:57:81:a4:8c:96:00:9c:39:
ac:1d:23:51:83:52:7a:27:8d:50:72:33:5c:92:bf:33:e3:5c:
27:31:63:a6:c5:2f:85:03:ad:d1:9e:73:49:64:bc:af:e5:ce:
ae:88:d6:22:68:5d:e1:9a:0c:b3:6a:4b:e3:03:e1:89:7f:87:
58:05:a9:a7:fd:fe:d9:24:82:de:c9:e5:c9:fd:7d:c0:6b:45:
73:db:31:80:bc:f1:43:22:8c:5a:9a:47:4c:b1:73:34:6f:a1:
01:e2:df:1b:69:89:db:db:fb:09:84:b9:80:8a:f4:11:0f:62:
b3:b9:77:df:24:78:ed:cc:27:b4:65:a3:43:75:96:12:37:2f:
e7:00:e2:92:30:7a:60:65:22:ef:3b:1c:b0:dd:f1:2c:44:cf:
ac:32:97:43:36:08:d9:6f:49:15:e5:74:c7:c7:99:9a:99:8d:
34:19:4f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 19:47:37 2025 by rpki-client