Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xQu8HqjiMx4IisVFqmRmUjw97hY.roa
File: xQu8HqjiMx4IisVFqmRmUjw97hY.roa (raw, json)
Hash identifier: Jr/FsV2omZjBbwRSfeYS0+wk/ryjno2sGqW9Bhze7sc=
Subject key identifier: C5:0B:BC:1E:A8:E2:33:1E:08:8A:C5:45:AA:64:66:52:3C:3D:EE:16
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A836222F7573899EAC2CE00AE61211761
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xQu8HqjiMx4IisVFqmRmUjw97hY.roa
Signing time: Fri 14 Nov 2025 17:20:38 +0000
ROA not before: Fri 14 Nov 2025 17:20:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 31.56.160.0/21 maxlen: 24
217.60.128.0/19 maxlen: 24
217.60.128.0/20 maxlen: 24
217.60.152.0/21 maxlen: 21
217.60.160.0/20 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.184.0/23 maxlen: 24
217.60.200.0/21 maxlen: 24
217.60.208.0/20 maxlen: 24
217.60.224.0/21 maxlen: 24
217.60.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:83:62:22:f7:57:38:99:ea:c2:ce:00:ae:61:21:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 14 17:20:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c50bbc1ea8e2331e088ac545aa6466523c3dee16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:38:00:94:94:37:e1:9d:c4:5c:6b:5b:8a:
95:4a:51:a5:c4:b5:d1:12:94:36:93:0d:d3:44:3b:
7e:34:b9:c6:01:69:3e:37:7d:0c:18:91:d3:51:61:
f2:3a:dc:45:84:89:c2:ff:1d:d8:69:dd:e2:d9:f9:
f5:62:48:fc:6a:19:e1:50:a0:fc:5e:39:87:61:c3:
97:8e:38:5f:f6:7b:38:e3:81:7a:12:90:c1:9c:a5:
13:e9:f6:6f:b6:03:ba:5e:54:ee:6b:f0:17:88:1d:
9b:b3:53:af:74:f1:a0:80:98:f6:11:f5:38:96:bc:
4d:df:34:e9:d9:91:81:9a:b3:2f:ea:6b:05:10:55:
59:0d:17:14:cb:05:0f:48:80:54:12:02:64:53:6e:
a8:67:37:3b:90:c3:1b:39:7b:17:cb:35:af:d9:4d:
f9:00:a6:75:72:48:77:1f:c2:4f:0c:fb:51:f0:0f:
c6:29:d9:09:72:87:e2:6e:a6:4c:d1:35:7c:c6:44:
b7:f1:ea:50:5e:f0:fc:9b:1c:c3:fe:c9:58:44:cf:
4e:1a:36:55:40:92:01:3b:e9:a7:e1:68:43:83:85:
2c:d6:70:3c:cc:2e:de:d6:45:ae:9f:22:b7:e8:29:
78:8a:a6:8e:61:e7:ac:d8:a5:e2:85:f7:9f:02:d3:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0B:BC:1E:A8:E2:33:1E:08:8A:C5:45:AA:64:66:52:3C:3D:EE:16
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/xQu8HqjiMx4IisVFqmRmUjw97hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.160.0/21
217.60.128.0-217.60.185.255
217.60.200.0-217.60.235.255
Signature Algorithm: sha256WithRSAEncryption
ab:cf:18:3c:15:3e:52:19:40:6b:a1:17:13:e0:ac:10:e2:31:
d7:19:9d:77:39:48:b8:15:55:4d:69:20:da:2e:91:66:ec:ee:
a6:e2:25:02:b1:5b:50:3d:30:ff:2d:b2:56:93:74:5d:cb:38:
a6:b6:6e:94:cc:f3:44:f1:99:37:95:87:ae:79:94:a2:58:d5:
a9:cd:25:f6:69:5b:51:74:e8:fc:5e:3c:c1:3a:83:6d:ea:f3:
29:f8:61:7e:e5:fc:4b:ee:1a:eb:27:76:29:76:17:22:6b:4d:
de:50:76:af:f3:bd:ec:b7:e2:5c:40:a6:64:af:7c:3b:9d:52:
ef:e5:70:ef:04:50:94:bc:1b:ee:2c:9d:b2:26:fb:8a:69:3f:
85:51:5e:30:d9:ca:14:f9:57:48:5c:50:5b:1f:e4:05:82:54:
e9:1e:d4:cd:6c:85:1e:35:21:8a:57:96:6c:c7:39:64:eb:9a:
5b:88:45:7c:a2:ae:e0:86:b7:91:a3:87:62:34:94:22:88:0c:
cf:35:46:30:f1:e5:49:47:e2:d1:1a:b7:05:ac:5c:48:9d:39:
81:bd:d7:31:8d:58:ad:91:85:1b:c5:77:77:71:ae:46:d4:a7:
69:36:60:f3:5e:15:4f:38:2d:9e:71:7f:57:83:bb:48:8b:d4:
3b:fc:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 00:48:21 2025 by rpki-client