Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kLuBMsBtVBx-xdy5xGoTHtP87sg.roa
File: kLuBMsBtVBx-xdy5xGoTHtP87sg.roa (raw, json)
Hash identifier: guwUd8T5zYFASELJggVICPMEnYZDbu5J/rL3qU9Jp8M=
Subject key identifier: 90:BB:81:32:C0:6D:54:1C:7E:C5:DC:B9:C4:6A:13:1E:D3:FC:EE:C8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A59BF92D7D02BE91C5D9074845CFA1B0D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kLuBMsBtVBx-xdy5xGoTHtP87sg.roa
Signing time: Thu 06 Nov 2025 15:18:38 +0000
ROA not before: Thu 06 Nov 2025 15:18:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:59:bf:92:d7:d0:2b:e9:1c:5d:90:74:84:5c:fa:1b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 6 15:18:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90bb8132c06d541c7ec5dcb9c46a131ed3fceec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:57:15:34:f8:b5:d1:df:20:74:da:de:e6:
ae:52:75:d1:01:b4:a4:3d:21:0b:1c:1a:f1:0e:40:
3b:8d:bc:81:24:5f:ae:44:89:95:86:64:3a:0f:55:
32:22:e3:f1:25:d7:8e:c4:33:80:b4:5c:f8:6e:9b:
9d:80:da:1c:6d:e6:76:8a:75:b8:b0:ad:57:fc:c9:
cc:30:de:21:62:6d:cc:0c:1a:df:cd:ab:ab:c4:b5:
62:27:d6:2d:e0:07:ab:3c:0b:34:f8:a7:19:94:8a:
ba:10:f4:24:ab:37:40:48:87:21:56:f0:b7:1d:5f:
f9:99:9e:c0:17:bb:75:ac:0a:31:13:d2:05:09:2a:
0b:0d:ca:53:a4:0c:09:6a:eb:04:86:0b:2b:55:a5:
4f:f5:dd:cd:44:9f:62:3b:82:92:b2:8e:da:bb:c6:
12:9f:d8:a5:c3:d5:6e:30:27:5f:52:41:62:18:bd:
d9:af:ad:66:f0:15:1f:32:29:47:d9:d7:72:16:dc:
9a:fc:78:b3:87:09:3f:71:b4:3f:9c:9f:f4:13:47:
ed:6a:0a:b8:e4:a1:72:47:b2:7b:ba:03:ae:13:c8:
96:5b:bd:b1:dd:9d:a2:4e:e3:1d:41:bf:3c:8c:f0:
5d:49:3f:90:b3:7b:4b:43:b4:5c:ad:cd:7e:4e:0c:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BB:81:32:C0:6D:54:1C:7E:C5:DC:B9:C4:6A:13:1E:D3:FC:EE:C8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kLuBMsBtVBx-xdy5xGoTHtP87sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.58.34.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:de:02:cc:a1:e4:d1:25:17:0a:55:22:e6:d6:43:09:91:bb:
5c:0a:33:ca:94:3a:e3:38:e5:50:5b:9d:95:bc:bc:82:1c:b1:
5f:bb:09:cb:5f:b2:08:a3:7b:c5:ee:17:ba:3d:cd:90:2a:fa:
eb:6e:31:07:f0:a8:a2:4d:c7:f2:ca:0b:54:b3:35:d1:13:77:
a7:6d:cd:d3:6f:22:ee:2e:5b:95:6e:c5:3b:71:81:dd:bf:54:
ef:ff:10:a3:0e:20:bc:49:31:26:80:fa:68:05:66:1f:49:ce:
46:e5:74:57:bd:66:89:7a:94:2c:99:f9:ed:fa:5c:de:70:87:
d0:51:84:b1:e1:87:cd:ff:75:a1:1e:3e:d9:d1:de:7e:b0:45:
49:7a:96:e5:32:d2:c1:7a:9d:f5:42:52:7b:2d:39:e7:77:2d:
0d:2a:26:16:c3:03:1f:d0:d2:31:57:77:e9:f6:b8:1c:6c:86:
ab:02:30:a7:c4:90:18:1a:5c:4a:b2:12:31:72:88:4f:91:bf:
80:b2:1b:8c:54:33:5f:29:fe:a4:a0:fd:c8:c5:b1:9b:ed:b6:
6d:10:b3:13:fe:a2:e1:bd:bd:c1:a8:2c:c2:b8:76:a2:af:9e:
0d:02:01:ce:73:6b:18:a3:05:f6:a9:c4:b1:80:9b:ca:d7:69:
a7:3e:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 19:45:56 2025 by rpki-client