Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iH9KmVnG3mxB9LEv-D_YMrD9DPo.roa
File: iH9KmVnG3mxB9LEv-D_YMrD9DPo.roa (raw, json)
Hash identifier: DyprYowrH/yLqLNid/LYsjTQDmSTipVegu0Lw39Cl8I=
Subject key identifier: 88:7F:4A:99:59:C6:DE:6C:41:F4:B1:2F:F8:3F:D8:32:B0:FD:0C:FA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A7E204EDB1DED50B82EC0F4A958ADC209
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iH9KmVnG3mxB9LEv-D_YMrD9DPo.roa
Signing time: Thu 13 Nov 2025 16:50:37 +0000
ROA not before: Thu 13 Nov 2025 16:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 31.56.231.0/24 maxlen: 24
31.57.31.0/24 maxlen: 24
31.57.205.0/24 maxlen: 24
31.57.237.0/24 maxlen: 24
31.57.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7e:20:4e:db:1d:ed:50:b8:2e:c0:f4:a9:58:ad:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 13 16:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=887f4a9959c6de6c41f4b12ff83fd832b0fd0cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:e2:57:5d:2f:3e:63:a1:05:7a:a7:40:dc:
6e:e2:4d:b3:ca:d1:d7:2a:e9:96:ea:20:27:aa:e3:
61:41:65:f1:74:ab:64:f1:83:7f:b9:93:73:11:15:
aa:db:d0:e5:8d:98:0e:3f:fb:f4:ad:b9:b4:fc:68:
94:b4:e5:9b:a7:6a:b8:db:12:9d:76:9f:43:36:08:
e9:0e:58:6c:9a:a0:ad:54:c8:37:99:43:fb:39:c4:
c0:13:9b:c9:2c:73:10:72:63:60:86:dd:1a:b9:47:
26:72:75:68:f9:bc:32:55:28:b6:13:c2:de:71:df:
23:85:35:94:44:3b:09:8e:69:14:23:be:6c:93:43:
5a:92:e0:59:45:5c:7c:61:41:d9:41:56:52:9c:c5:
da:dd:44:ad:3d:3a:cc:bb:ab:d8:98:2a:fc:9e:85:
7d:39:aa:53:5f:9a:7c:8f:a4:f1:7e:cc:38:32:c7:
15:6d:4f:3d:c3:39:42:f2:b6:a0:97:41:5d:1e:71:
f3:3a:9f:cf:44:0a:d9:58:e9:69:61:66:fa:f9:08:
a3:a8:17:69:a6:c6:75:ba:ce:80:52:b9:d7:09:91:
91:a6:d0:2f:19:ad:42:ac:e4:66:ec:74:cb:7f:fe:
95:9d:c9:79:50:25:6b:33:1c:85:30:06:e8:a9:dc:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:4A:99:59:C6:DE:6C:41:F4:B1:2F:F8:3F:D8:32:B0:FD:0C:FA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/iH9KmVnG3mxB9LEv-D_YMrD9DPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.231.0/24
31.57.31.0/24
31.57.205.0/24
31.57.237.0/24
31.57.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a2:67:a9:ae:ad:99:61:ef:49:25:99:d0:c9:a5:20:e2:44:
3a:6e:17:a1:96:4a:36:8a:c7:a0:15:74:2b:19:45:7f:9f:38:
9b:0d:82:33:ab:4a:85:10:b1:f2:11:b0:75:6c:b1:c6:13:2d:
3b:f1:55:43:ed:a7:8f:50:e2:c3:9e:7e:a2:43:aa:c7:cb:60:
5f:6a:13:86:6c:31:3c:d4:21:d2:a2:c3:40:78:66:37:29:61:
07:a4:fb:41:76:7e:a7:74:56:02:82:e5:5f:35:f4:10:3a:8b:
d4:1b:ec:4f:9f:d3:79:99:31:5a:67:57:81:98:71:05:79:44:
48:90:7f:8b:52:0b:30:14:3e:85:f8:a9:2f:ce:b9:6f:0b:c9:
10:e6:50:ff:e3:48:0d:e6:07:fa:89:f8:ee:6c:cf:bb:55:e2:
30:d8:b4:a0:b2:a2:0d:28:c0:65:c9:7c:e3:d7:17:b6:bf:49:
9a:0a:4f:23:1b:71:72:09:d3:70:65:e3:3b:84:c1:70:fa:10:
92:00:46:ee:8e:50:c1:55:73:da:c0:f1:fb:a7:6c:d9:b1:ea:
2f:f9:8a:25:a8:19:66:15:07:58:a7:3e:a4:c9:14:a4:cf:22:
ef:8c:35:84:1b:b5:3a:73:dc:4d:9d:a7:8a:4a:32:46:e3:cf:
9d:4d:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 20:49:42 2025 by rpki-client