Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eEpnRjZTAyyGPBY380oYHmMJ7Xo.roa
File: eEpnRjZTAyyGPBY380oYHmMJ7Xo.roa (raw, json)
Hash identifier: GaMCcLE2ylAsYlJgP5p23kIs7QBeW3OrZ2h7aSN4zYM=
Subject key identifier: 78:4A:67:46:36:53:03:2C:86:3C:16:37:F3:4A:18:1E:63:09:ED:7A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A077695DEA5C33F753AF0230EBBE0B755
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eEpnRjZTAyyGPBY380oYHmMJ7Xo.roa
Signing time: Tue 21 Oct 2025 15:50:03 +0000
ROA not before: Tue 21 Oct 2025 15:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214987
IP address blocks: 31.56.25.0/24 maxlen: 24
31.56.81.0/24 maxlen: 24
31.57.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:76:95:de:a5:c3:3f:75:3a:f0:23:0e:bb:e0:b7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 21 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=784a67463653032c863c1637f34a181e6309ed7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:6b:57:96:7e:b9:fd:57:f4:d2:30:1b:55:
42:31:64:da:b2:20:8c:44:b0:41:b0:60:e8:d2:e4:
01:a3:3b:5e:90:0a:61:ea:92:28:37:03:4c:41:bc:
72:f7:43:24:ce:9d:9c:a4:6c:05:31:c7:6c:9e:a0:
b8:24:2d:cc:38:bb:7f:b6:5d:c4:52:38:1c:3f:7f:
1e:6b:6b:3c:20:73:27:9c:47:74:3a:81:55:9b:f6:
39:43:b3:ac:0d:1e:1c:58:31:5f:b7:f5:2d:5b:f7:
e9:d0:7d:d7:3d:10:68:21:f1:d1:2c:fa:5d:7c:05:
6a:80:40:5e:b6:ff:b9:5d:89:a5:db:e3:a5:48:0b:
a0:28:cf:ea:46:a5:75:71:df:64:81:d9:36:9b:fe:
14:b7:fa:13:9b:13:cc:a3:ed:5d:17:ba:31:9e:11:
02:45:e4:43:08:49:7e:ac:af:17:c3:22:50:c6:ad:
41:5e:da:98:57:73:af:5f:63:41:c2:be:1b:35:cf:
e9:94:7d:f6:5b:60:cc:6e:9c:c4:f2:97:4c:51:fa:
e3:b5:28:27:fd:5a:69:13:65:ef:04:64:b8:b1:92:
65:10:7e:0a:db:18:db:1b:e9:7b:4f:22:b5:f0:34:
10:70:d9:05:cd:1a:de:d8:11:24:e9:71:9f:08:9d:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4A:67:46:36:53:03:2C:86:3C:16:37:F3:4A:18:1E:63:09:ED:7A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eEpnRjZTAyyGPBY380oYHmMJ7Xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.25.0/24
31.56.81.0/24
31.57.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:81:38:e6:d5:80:d1:d1:79:68:a1:40:3a:ef:b8:ee:35:0f:
b5:d3:f1:58:72:80:fd:9c:81:c4:55:dd:aa:ac:d9:d6:a9:36:
a1:95:c6:0e:50:f1:56:51:3c:12:04:6e:ec:92:cb:46:11:4d:
f5:da:80:25:5d:94:4e:08:2b:4b:00:bd:87:65:ce:fc:4c:9a:
75:9c:41:88:a2:5d:17:48:a6:fb:92:25:39:79:6b:7c:c8:61:
5f:80:61:0b:d8:cf:a2:97:ec:57:45:23:ba:b3:cf:74:ae:47:
f4:1c:e9:eb:87:90:c7:63:1a:60:50:bf:df:41:b1:7c:bd:66:
64:d4:75:b3:a4:83:e0:4f:0d:a6:84:39:2b:21:fc:16:fd:ca:
94:49:cd:72:74:23:6f:e3:41:6c:16:96:a6:f9:74:46:0f:70:
f6:47:7b:d3:08:aa:b7:d9:63:b0:1c:02:ef:9a:62:ba:59:35:
1b:1a:3a:db:f9:46:b2:ed:75:4c:82:c8:d4:4f:58:65:0a:2a:
73:1f:0a:71:97:50:78:42:26:e6:0a:b3:f6:ad:e0:c3:30:f5:
e5:9e:39:cd:39:98:a1:12:31:d5:b4:f4:13:1c:71:de:e3:22:
68:24:f6:ec:4f:bd:e4:d9:45:28:71:b2:27:80:5c:ea:50:ab:
c1:13:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 19:47:10 2025 by rpki-client