Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ngoeHtVOxg9am1znyR_kFiqSOF4.roa
File: ngoeHtVOxg9am1znyR_kFiqSOF4.roa (raw, json)
Hash identifier: uHiuhKwR7RkMJ441JVE74SWMo/MDTcPDagFFHw/H1cY=
Subject key identifier: 9E:0A:1E:1E:D5:4E:C6:0F:5A:9B:5C:E7:C9:1F:E4:16:2A:92:38:5E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A0041BC3253622BE15AA4E82D7FA3E257
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ngoeHtVOxg9am1znyR_kFiqSOF4.roa
Signing time: Mon 20 Oct 2025 06:14:59 +0000
ROA not before: Mon 20 Oct 2025 06:14:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 31.56.66.0/24 maxlen: 24
31.56.220.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.100.0/24 maxlen: 24
31.57.120.0/24 maxlen: 24
31.57.170.0/24 maxlen: 24
31.57.228.0/24 maxlen: 24
31.57.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:41:bc:32:53:62:2b:e1:5a:a4:e8:2d:7f:a3:e2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 20 06:14:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e0a1e1ed54ec60f5a9b5ce7c91fe4162a92385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0a:0e:f1:70:d8:82:67:96:69:37:1d:27:cd:
f8:46:d7:15:13:3e:c3:fc:1e:13:c2:97:c4:92:74:
11:55:7a:7d:e7:54:90:97:d9:cf:9e:40:56:f1:52:
70:30:cc:96:38:b2:1c:ee:15:00:f8:2b:0a:28:08:
17:45:1e:2f:38:97:22:6f:2e:5d:de:d2:32:38:55:
4b:38:ca:e0:7d:e4:a0:d3:d7:3d:cd:19:43:45:0a:
e5:5a:a7:56:44:af:9c:22:bb:db:ed:22:3a:3d:36:
96:73:ac:a5:07:a7:a4:3e:0e:b2:a8:0f:43:02:2d:
f6:03:86:c6:f0:3b:28:bc:8c:cc:ec:62:f5:05:43:
19:c8:28:b7:e6:c5:94:f5:ab:33:d3:8b:4f:e2:c8:
ca:ec:3e:e8:cf:cb:4c:b2:1a:82:f4:81:fc:2c:4b:
f3:4c:7c:3b:97:3f:1b:87:4b:e7:f3:a3:2f:a0:cf:
b6:43:78:b9:1e:72:b4:66:57:e6:ba:2e:45:3f:89:
7d:0e:89:57:75:51:36:79:e0:49:6e:dd:fc:0d:48:
39:d0:c0:7c:72:b5:3e:47:31:04:ca:c9:bf:a4:67:
71:a5:97:f3:f5:c7:74:fd:85:9e:03:4f:60:1f:20:
71:cf:f7:c7:b4:1a:d1:55:b0:4a:b7:3b:0b:fa:14:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:1E:1E:D5:4E:C6:0F:5A:9B:5C:E7:C9:1F:E4:16:2A:92:38:5E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ngoeHtVOxg9am1znyR_kFiqSOF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
31.56.220.0/24
31.57.35.0/24
31.57.100.0/24
31.57.120.0/24
31.57.170.0/24
31.57.228.0/24
31.57.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ff:d6:fe:35:c9:59:e4:81:6c:26:a6:78:d9:85:1b:6d:00:
0e:c2:43:b6:df:af:d2:30:b3:a9:83:4e:05:62:f6:21:b1:bd:
59:eb:31:02:2e:25:f3:35:ce:bb:d8:d9:fe:b0:48:00:f7:69:
37:bb:3e:4e:fb:79:94:fa:2c:52:1d:78:4f:4f:0b:56:55:42:
43:93:aa:3b:1d:2b:ae:94:ef:ed:8c:6e:83:86:9c:f7:76:f9:
6a:cd:be:9e:e0:e6:73:6d:19:3c:f8:4c:25:aa:19:27:8e:0e:
84:07:5d:b1:e9:dc:ec:dc:0a:99:a3:0f:65:b3:a4:1a:6c:64:
12:66:db:5b:54:16:a2:11:15:e4:87:28:8a:f1:71:85:f9:3a:
d2:93:17:44:17:8f:88:65:80:5a:8b:e3:d8:c1:9c:3a:bf:4f:
e6:64:06:cc:5a:51:60:49:d8:25:45:40:18:89:7e:ce:b0:32:
a0:05:a6:bb:fb:b7:23:23:c5:16:9e:e8:d1:e3:15:07:7b:8d:
ca:cd:b2:9f:4c:63:67:bb:6e:0f:a2:7f:fb:fb:48:a4:8b:c3:
15:90:71:98:b4:13:93:41:ff:4a:d4:a1:c4:3b:c8:ef:58:7c:
d8:4e:59:f4:ef:38:4d:3b:82:84:ab:ab:d7:de:93:80:55:38:
ce:39:78:9b
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZoAQbwyU2Ir4Vqk6C1/o+JXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDIwMDYxNDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTBhMWUxZWQ1NGVjNjBmNWE5YjVjZTdjOTFmZTQxNjJhOTIzODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgoO8XDYgmeWaTcdJ834RtcVEz7D
/B4TwpfEknQRVXp951SQl9nPnkBW8VJwMMyWOLIc7hUA+CsKKAgXRR4vOJciby5d
3tIyOFVLOMrgfeSg09c9zRlDRQrlWqdWRK+cIrvb7SI6PTaWc6ylB6ekPg6yqA9D
Ai32A4bG8DsovIzM7GL1BUMZyCi35sWU9asz04tP4sjK7D7oz8tMshqC9IH8LEvz
THw7lz8bh0vn86MvoM+2Q3i5HnK0Zlfmui5FP4l9DolXdVE2eeBJbt38DUg50MB8
crU+RzEEysm/pGdxpZfz9cd0/YWeA09gHyBxz/fHtBrRVbBKtzsL+hQC2QIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFJ4KHh7VTsYPWptc58kf5BYqkjheMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvbmdvZUh0Vk94ZzlhbTF6bnlSX2tGaXFTT0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAHzhCAwQA
HzjcAwQAHzkjAwQAHzlkAwQAHzl4AwQAHzmqAwQAHznkAwQAHznvMA0GCSqGSIb3
DQEBCwUAA4IBAQAM/9b+NclZ5IFsJqZ42YUbbQAOwkO236/SMLOpg04FYvYhsb1Z
6zECLiXzNc672Nn+sEgA92k3uz5O+3mU+ixSHXhPTwtWVUJDk6o7HSuulO/tjG6D
hpz3dvlqzb6e4OZzbRk8+Ewlqhknjg6EB12x6dzs3AqZow9ls6QabGQSZttbVBai
ERXkhyiK8XGF+TrSkxdEF4+IZYBai+PYwZw6v0/mZAbMWlFgSdglRUAYiX7OsDKg
Baa7+7cjI8UWnujR4xUHe43KzbKfTGNnu24Pon/7+0iki8MVkHGYtBOTQf9K1KHE
O8jvWHzYTln07zhNO4KEq6vX3pOAVTjOOXib
-----END CERTIFICATE-----
Generated at Mon Nov 3 09:34:49 2025 by rpki-client