Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eHn-Gu_kYbK1RNWurlSVtO6a_VI.roa
File: eHn-Gu_kYbK1RNWurlSVtO6a_VI.roa (raw, json)
Hash identifier: gFDM+6DF8RXkMdOomsZ3Aqlb6ndAd8PY9di/CsDPkns=
Subject key identifier: 78:79:FE:1A:EF:E4:61:B2:B5:44:D5:AE:AE:54:95:B4:EE:9A:FD:52
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019938CD377BD574AEA021A06C6CAF1E399C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eHn-Gu_kYbK1RNWurlSVtO6a_VI.roa
Signing time: Thu 11 Sep 2025 12:43:16 +0000
ROA not before: Thu 11 Sep 2025 12:43:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 31.56.27.0/24 maxlen: 24
31.56.28.0/24 maxlen: 24
31.56.48.0/24 maxlen: 24
31.56.113.0/24 maxlen: 24
31.56.117.0/24 maxlen: 24
31.56.146.0/24 maxlen: 24
31.56.196.0/23 maxlen: 24
31.56.204.0/23 maxlen: 24
31.56.206.0/24 maxlen: 24
31.56.222.0/24 maxlen: 24
31.56.227.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.26.0/23 maxlen: 24
31.57.28.0/23 maxlen: 24
31.57.46.0/23 maxlen: 24
31.57.61.0/24 maxlen: 24
31.57.62.0/23 maxlen: 24
31.57.92.0/23 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/23 maxlen: 24
31.57.108.0/23 maxlen: 24
31.57.118.0/24 maxlen: 24
31.57.157.0/24 maxlen: 24
31.57.158.0/24 maxlen: 24
31.58.50.0/24 maxlen: 24
31.58.87.0/24 maxlen: 24
31.58.134.0/24 maxlen: 24
31.58.171.0/24 maxlen: 24
31.58.220.0/24 maxlen: 24
31.58.226.0/24 maxlen: 24
31.59.40.0/23 maxlen: 24
31.59.120.0/23 maxlen: 24
31.59.136.0/24 maxlen: 24
31.59.138.0/23 maxlen: 24
31.59.170.0/24 maxlen: 24
31.59.174.0/23 maxlen: 24
94.183.182.0/23 maxlen: 24
94.183.184.0/21 maxlen: 24
94.183.232.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.248.0/23 maxlen: 24
217.60.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:cd:37:7b:d5:74:ae:a0:21:a0:6c:6c:af:1e:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 11 12:43:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7879fe1aefe461b2b544d5aeae5495b4ee9afd52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:29:c1:c3:be:d8:88:16:96:a1:a3:fe:d4:3d:
63:12:38:2d:ea:3b:8b:58:09:59:37:5a:62:f8:e2:
ed:50:16:5c:b2:7c:2b:06:86:36:21:d1:e7:26:ec:
aa:5f:1f:11:c6:d7:91:69:c8:42:8d:a5:1d:76:ec:
f3:25:1c:ae:a6:2a:81:6c:2d:8c:09:99:d7:5e:65:
f3:6d:ce:f3:e5:1d:15:08:72:26:68:32:24:d8:07:
86:74:c7:65:41:62:24:37:00:4a:ef:3a:74:af:13:
e3:5a:d2:d7:5b:bd:95:50:d9:d4:a9:79:b2:1d:93:
82:96:66:5e:89:16:19:d8:53:b0:4d:60:87:aa:96:
31:f9:1b:3a:c0:84:71:40:6f:30:c2:ef:8b:b7:61:
24:35:9a:5d:c0:fa:8d:5f:1d:7b:25:fb:7a:8f:68:
ab:8f:5f:4a:34:19:c6:4d:1e:94:63:a3:b1:63:f2:
26:c6:8a:2b:50:0b:b4:b9:c4:4d:28:71:d2:1e:1e:
a4:ec:55:2d:6f:fc:80:a2:0f:1e:d6:5b:bc:ea:e4:
52:ae:a6:d0:e2:7b:d5:f3:c2:2e:c6:dc:0e:58:9f:
8f:16:55:4d:4b:e1:93:21:41:ef:d1:75:c3:92:a9:
1e:f3:20:bc:e4:26:bc:f9:ff:ea:aa:82:79:f6:f6:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:79:FE:1A:EF:E4:61:B2:B5:44:D5:AE:AE:54:95:B4:EE:9A:FD:52
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eHn-Gu_kYbK1RNWurlSVtO6a_VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.27.0-31.56.28.255
31.56.48.0/24
31.56.113.0/24
31.56.117.0/24
31.56.146.0/24
31.56.196.0/23
31.56.204.0-31.56.206.255
31.56.222.0/24
31.56.227.0/24
31.57.24.0/24
31.57.26.0-31.57.29.255
31.57.46.0/23
31.57.61.0-31.57.63.255
31.57.92.0/23
31.57.105.0-31.57.109.255
31.57.118.0/24
31.57.157.0-31.57.158.255
31.58.50.0/24
31.58.87.0/24
31.58.134.0/24
31.58.171.0/24
31.58.220.0/24
31.58.226.0/24
31.59.40.0/23
31.59.120.0/23
31.59.136.0/24
31.59.138.0/23
31.59.170.0/24
31.59.174.0/23
94.183.182.0-94.183.191.255
94.183.232.0/22
217.60.36.0/22
217.60.248.0/23
217.60.252.0/24
Signature Algorithm: sha256WithRSAEncryption
42:16:7d:73:b2:81:c3:bf:dc:9a:ff:92:fa:65:de:71:64:0a:
12:36:39:e1:f1:ca:71:d6:cd:c4:74:e1:84:6c:00:27:fa:01:
11:ba:cf:38:06:27:90:a9:58:d0:36:44:b5:7e:50:9c:ce:79:
db:7d:d4:be:1c:fb:5f:2b:ef:38:3b:0e:18:9d:71:98:ba:63:
77:84:86:69:bd:99:7e:2c:da:fb:3b:14:76:8b:23:16:fc:18:
cb:44:49:8a:d7:92:c3:0a:e0:27:7e:ec:6c:4f:2d:f9:78:75:
22:20:99:63:af:f9:82:b6:61:64:e6:0b:33:af:57:6b:45:12:
3d:da:36:e7:41:54:54:de:62:b1:13:f4:d3:dc:34:5d:ee:44:
9d:2b:55:db:db:44:65:ca:a1:3e:9b:34:d4:23:d5:65:30:9d:
2b:ce:24:21:53:25:d6:44:7d:9c:aa:40:90:b9:e0:ca:2c:38:
c1:39:85:e1:06:11:ec:ed:49:17:08:40:13:8c:55:f7:69:ab:
66:df:a3:66:c9:33:45:aa:ea:b1:40:b2:e5:4e:7f:12:a7:b1:
05:7d:bf:f3:ab:52:ea:3d:94:53:02:5b:da:77:9f:d9:4a:03:
b3:9d:e9:b9:f5:6f:01:1a:d5:f4:75:ee:9f:b5:7d:dd:43:5e:
f6:6f:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 12:04:28 2025 by rpki-client