Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eLeDyQVlvT15rmvq50RaublRziI.roa
File: eLeDyQVlvT15rmvq50RaublRziI.roa (raw, json)
Hash identifier: KTYBzbVAgLa3ffypqp/5EP61cmVMSlY2YzYQB7rSOKQ=
Subject key identifier: 78:B7:83:C9:05:65:BD:3D:79:AE:6B:EA:E7:44:5A:B9:B9:51:CE:22
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01993A1A771FEE91993F05F0B191AE34EFAD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eLeDyQVlvT15rmvq50RaublRziI.roa
Signing time: Thu 11 Sep 2025 18:47:16 +0000
ROA not before: Thu 11 Sep 2025 18:47:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395878
IP address blocks: 31.56.46.0/24 maxlen: 24
31.56.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:1a:77:1f:ee:91:99:3f:05:f0:b1:91:ae:34:ef:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 11 18:47:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78b783c90565bd3d79ae6beae7445ab9b951ce22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:97:46:43:27:f0:5a:ec:71:6b:ec:ab:ff:
be:66:a4:02:bd:6d:1a:fb:eb:76:42:1c:ad:7b:d2:
da:f9:25:71:68:95:26:b4:99:a0:c6:4d:3f:1d:22:
58:2b:96:0d:65:28:ff:31:9b:fe:f0:41:f5:9e:7a:
5b:d0:2d:73:59:cd:b0:ed:a6:26:69:04:57:7a:59:
fe:ed:3f:44:cc:96:65:84:4d:dc:0f:d2:2e:64:65:
8d:4d:0b:dd:59:33:89:15:87:f7:ec:71:90:73:dd:
e6:7c:ab:9c:c9:66:8b:e2:1e:ff:a5:45:5a:6d:45:
d9:61:a1:ad:bf:06:4f:71:ef:2d:25:61:2d:d9:91:
57:8f:3c:12:5e:da:22:a0:a6:b8:dd:d0:cf:85:a2:
d6:d8:af:e8:74:9b:9f:cb:59:87:3c:72:75:3f:2f:
e6:f5:a2:5d:48:b6:9d:e4:d3:e1:80:17:39:78:9d:
14:e9:5d:8c:50:6b:7e:e0:13:6d:37:37:6a:b8:f9:
6b:c7:8b:aa:30:ec:e6:66:b8:19:03:8c:b3:f6:95:
e8:7e:64:78:7a:ed:78:aa:f7:a2:db:7d:97:9c:c0:
dd:59:11:73:32:ac:29:85:5e:c5:26:34:48:5f:29:
fb:7d:3d:9e:17:f1:5c:7c:0f:08:02:ca:de:fc:49:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:83:C9:05:65:BD:3D:79:AE:6B:EA:E7:44:5A:B9:B9:51:CE:22
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/eLeDyQVlvT15rmvq50RaublRziI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.46.0/24
31.56.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:63:df:46:12:44:87:43:59:4c:33:b6:1e:60:40:c7:f3:15:
99:a5:a7:a0:8a:05:a4:76:22:e8:f4:c8:5b:be:69:45:83:95:
64:35:d7:18:56:bd:eb:ec:ed:54:07:68:ec:a1:bb:a1:55:91:
cd:55:e1:0c:44:45:5b:64:3c:fa:51:06:bc:49:33:dc:bd:65:
7f:28:37:c2:d1:d6:6f:f3:dc:45:05:fc:15:1d:1b:2d:8b:c9:
79:20:cc:40:26:fa:84:b2:e6:78:8e:0d:72:2d:62:0e:41:71:
48:e0:0a:47:04:58:95:ad:0a:c2:38:b4:db:bb:76:f0:bf:1d:
7d:e4:90:20:de:d3:ad:a9:d4:d6:c5:92:00:95:b9:2e:e7:23:
4a:05:e8:f1:05:f3:d2:a2:5c:7c:ac:d6:f8:1d:5e:66:5d:86:
34:c5:3a:e6:59:d6:99:0c:9f:22:15:98:1a:4b:cd:d0:fb:87:
08:b3:0e:76:9e:e8:ca:28:7c:3e:90:6a:9c:49:c7:c6:ba:d6:
48:45:32:f4:94:19:d6:30:00:89:b2:76:1d:50:50:79:a3:2d:
c2:cd:61:a8:0e:44:eb:42:06:d4:a9:62:b8:22:45:e4:1f:65:
02:3e:60:14:dc:b7:de:fb:e8:06:6a:51:b4:fa:13:db:65:5f:
ad:f5:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 11:28:50 2025 by rpki-client