Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ykU058I3kBaF2Uw5-yheaQV5SCc.roa
File: ykU058I3kBaF2Uw5-yheaQV5SCc.roa (raw, json)
Hash identifier: 7auXu9AVwEMdLsDXMBpOmN5Mf7JZ7IHe8Kz9o/V0gkI=
Subject key identifier: CA:45:34:E7:C2:37:90:16:85:D9:4C:39:FB:28:5E:69:05:79:48:27
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A86CF36D2577603B9FB9D60838FC367B2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ykU058I3kBaF2Uw5-yheaQV5SCc.roa
Signing time: Sat 15 Nov 2025 09:18:38 +0000
ROA not before: Sat 15 Nov 2025 09:18:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203804
IP address blocks: 31.56.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Nov 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:86:cf:36:d2:57:76:03:b9:fb:9d:60:83:8f:c3:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 15 09:18:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca4534e7c237901685d94c39fb285e6905794827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:2c:88:1f:9c:ee:e3:89:3e:9d:e5:06:9a:
06:3d:ff:66:5c:26:b7:72:18:8b:ce:1a:d6:cd:d1:
64:da:e4:9e:2f:d8:02:ac:38:c9:ed:93:81:3c:00:
75:cb:a1:1b:f7:44:24:6b:8e:44:37:e5:5f:86:b2:
be:01:de:a9:b5:57:8f:75:17:f3:b4:4a:da:55:04:
6b:f6:d3:a7:07:2d:7e:02:5e:fb:01:50:e0:e6:cf:
9d:6b:e0:95:ed:9a:45:33:28:c7:93:10:98:dc:23:
dd:ee:6c:3b:34:8a:5b:de:70:fa:3f:64:33:5f:65:
2b:d8:b5:8f:63:56:ea:4f:f5:e4:b3:eb:5b:db:08:
d3:5f:bb:39:82:dd:22:8e:d4:f4:c0:c7:da:ee:70:
b4:e7:ee:f6:91:3f:0b:f5:25:fc:83:17:86:ee:b7:
e4:37:1c:c8:82:96:32:1a:2b:1f:4b:2d:0c:6d:91:
3b:19:c0:d3:85:e7:a1:29:37:79:46:32:08:40:c6:
cc:38:9f:6a:14:d0:f1:4f:c9:23:68:25:cf:a1:21:
6b:bc:a2:16:af:8e:3b:7c:64:95:5f:a5:5c:ae:c6:
a8:ca:2c:06:03:e7:4b:16:9a:f0:ee:be:50:1f:b4:
82:1a:e2:2d:1b:83:9e:48:e3:a6:31:70:bf:2d:5e:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:34:E7:C2:37:90:16:85:D9:4C:39:FB:28:5E:69:05:79:48:27
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ykU058I3kBaF2Uw5-yheaQV5SCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:df:9f:b0:f6:87:40:71:3e:83:d3:87:2d:1c:6a:7e:9b:77:
50:12:25:62:56:ed:51:19:1d:84:4d:d0:ca:2b:50:a5:aa:5e:
c5:4f:a3:ff:a8:bc:1e:07:b9:7d:89:c5:0f:43:28:45:85:c1:
1e:bf:93:c9:40:c0:56:79:ce:5c:00:f7:7c:ea:b3:1a:4c:77:
ca:f2:0d:d1:26:81:bf:ff:b3:77:8b:12:0f:28:e5:d0:57:bb:
6b:90:e2:b1:55:92:21:b5:4d:fd:5a:95:63:fa:19:31:1a:d3:
75:d9:bc:d6:2e:a7:ac:9f:60:78:2e:0b:de:ec:48:1c:35:11:
94:19:f8:e4:53:93:42:c6:1e:a6:56:94:b0:d2:94:67:81:2a:
19:74:d2:c4:6b:2b:b4:8c:84:39:ed:97:0f:9e:87:16:d4:11:
de:eb:85:68:88:19:c3:e2:fb:62:20:36:e0:8d:a0:ca:06:c2:
19:18:11:96:83:ab:7c:92:e2:28:13:4a:01:ac:28:ca:74:52:
8f:1b:24:20:57:18:92:74:35:14:6c:56:5a:d2:8b:d5:75:a9:
71:10:09:4a:89:ac:3f:c1:f4:a3:cf:b0:73:97:75:c4:df:43:
28:5e:8a:e5:97:68:73:32:c9:83:de:69:b3:2d:ea:40:cf:04:
68:1f:90:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqGzzbSV3YDufudYIOPw2eyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMTE1MDkxODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTQ1MzRlN2MyMzc5MDE2ODVkOTRjMzlmYjI4NWU2OTA1Nzk0ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns8siB+c7uOJPp3lBpoGPf9mXCa3
chiLzhrWzdFk2uSeL9gCrDjJ7ZOBPAB1y6Eb90Qka45EN+VfhrK+Ad6ptVePdRfz
tEraVQRr9tOnBy1+Al77AVDg5s+da+CV7ZpFMyjHkxCY3CPd7mw7NIpb3nD6P2Qz
X2Ur2LWPY1bqT/Xks+tb2wjTX7s5gt0ijtT0wMfa7nC05+72kT8L9SX8gxeG7rfk
NxzIgpYyGisfSy0MbZE7GcDTheehKTd5RjIIQMbMOJ9qFNDxT8kjaCXPoSFrvKIW
r447fGSVX6VcrsaoyiwGA+dLFprw7r5QH7SCGuItG4OeSOOmMXC/LV4DgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpFNOfCN5AWhdlMOfsoXmkFeUgnMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEveWtVMDU4STNrQmFGMlV3NS15aGVhUVY1U0NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzjVMA0G
CSqGSIb3DQEBCwUAA4IBAQCN35+w9odAcT6D04ctHGp+m3dQEiViVu1RGR2ETdDK
K1Clql7FT6P/qLweB7l9icUPQyhFhcEev5PJQMBWec5cAPd86rMaTHfK8g3RJoG/
/7N3ixIPKOXQV7trkOKxVZIhtU39WpVj+hkxGtN12bzWLqesn2B4Lgve7EgcNRGU
GfjkU5NCxh6mVpSw0pRngSoZdNLEayu0jIQ57ZcPnocW1BHe64VoiBnD4vtiIDbg
jaDKBsIZGBGWg6t8kuIoE0oBrCjKdFKPGyQgVxiSdDUUbFZa0ovVdalxEAlKiaw/
wfSjz7Bzl3XE30MoXorll2hzMsmD3mmzLepAzwRoH5C8
-----END CERTIFICATE-----
Generated at Mon Nov 17 00:46:46 2025 by rpki-client