Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z2YpNzPnBMPySVv6ti3zRPEWqjI.roa
File: z2YpNzPnBMPySVv6ti3zRPEWqjI.roa (raw, json)
Hash identifier: nVSvua5LrGdvXM8bL3IQ3/jAdkYTU8/+jmmTThAVfSE=
Subject key identifier: CF:66:29:37:33:E7:04:C3:F2:49:5B:FA:B6:2D:F3:44:F1:16:AA:32
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A263F725CA12B2A7754CC3178FB8388A1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z2YpNzPnBMPySVv6ti3zRPEWqjI.roa
Signing time: Mon 27 Oct 2025 15:18:03 +0000
ROA not before: Mon 27 Oct 2025 15:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205536
IP address blocks: 31.56.89.0/24 maxlen: 24
217.60.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 14:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:3f:72:5c:a1:2b:2a:77:54:cc:31:78:fb:83:88:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 27 15:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf66293733e704c3f2495bfab62df344f116aa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:04:54:98:1b:7c:7d:23:b6:31:13:79:0c:
ec:63:7b:25:ea:15:8f:6d:d3:1c:0d:c1:4c:ee:71:
6b:f4:4e:77:7c:e0:c1:a4:f1:bb:f1:b1:7c:34:03:
59:a9:ed:d8:f3:b7:3e:af:a2:c1:fb:1f:61:80:12:
30:ea:e2:ed:0a:13:ff:06:ab:f3:af:f8:a9:b3:b1:
7a:e9:ff:48:7a:e4:9d:04:e6:db:24:a4:9f:53:7b:
dc:0f:44:a2:4b:ba:09:98:22:e7:ec:25:9f:d6:91:
83:bd:97:6a:fa:f6:72:87:98:fd:7f:48:90:8d:07:
3c:b5:e6:cd:38:f0:5b:d5:d5:66:09:e4:50:84:c2:
fd:11:74:21:89:57:c3:e3:22:32:f9:80:0b:cd:61:
c3:4e:19:a4:66:2b:c3:1e:e3:02:c4:d2:18:a6:f6:
48:b5:d2:55:6d:97:ca:ee:89:82:dd:50:e7:cc:3e:
86:5a:2b:c7:c0:49:1a:9d:f1:0f:c6:af:71:f9:8e:
14:37:39:84:ef:fd:f7:5b:d4:e8:0b:1c:a2:b0:8d:
c0:9b:c1:6c:2b:a8:32:df:38:90:da:7d:a8:55:76:
4b:5f:bd:17:e4:de:76:b1:d3:3d:6e:bd:4a:6f:3a:
c2:e9:ec:5a:14:cc:59:68:1e:28:4c:3f:93:48:71:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:29:37:33:E7:04:C3:F2:49:5B:FA:B6:2D:F3:44:F1:16:AA:32
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/z2YpNzPnBMPySVv6ti3zRPEWqjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.89.0/24
217.60.240.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d2:bd:6d:b2:63:9f:36:f4:ea:6c:20:c9:0d:3f:b3:09:11:
38:3b:0e:c7:a3:71:f1:36:12:90:da:f4:f4:76:89:db:7e:ec:
15:c3:8b:2e:69:df:de:3b:bc:88:c7:1d:f3:81:d9:c1:d2:e1:
01:0a:20:ac:be:de:84:ee:04:fc:b1:5d:89:38:70:e3:6a:63:
6f:17:e1:b5:58:08:d7:6d:fb:f9:7f:85:cf:b9:e8:77:47:8b:
ac:6c:a3:c1:89:62:ad:69:75:e9:d1:5c:dc:95:77:f1:d3:fb:
3d:12:19:37:49:bf:43:62:a8:e8:92:03:98:9e:4d:74:02:09:
cc:cd:d9:ca:3a:b0:9d:ee:71:56:4a:42:a3:07:a6:61:6c:b9:
e3:76:9b:2e:db:6c:35:98:57:02:8f:2d:81:af:81:5a:b5:82:
43:20:77:c2:84:47:c6:be:e2:9e:e1:e5:2e:f4:72:5e:27:e3:
44:3e:85:8d:ab:49:ef:61:b4:42:7d:0d:1e:6e:58:e4:f2:e8:
de:42:e7:ad:46:d3:48:d5:fa:aa:c6:c1:df:71:38:16:89:7b:
ad:97:a6:3d:39:1b:1a:21:2d:c7:18:63:16:49:0e:62:d2:7c:
c6:97:76:d4:90:99:8d:b1:b0:f5:c7:55:6e:3a:ac:09:0d:d9:
a4:6a:74:7a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZomP3JcoSsqd1TMMXj7g4ihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDI3MTUxODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjY2MjkzNzMzZTcwNGMzZjI0OTViZmFiNjJkZjM0NGYxMTZhYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxQEVJgbfH0jtjETeQzsY3sl6hWP
bdMcDcFM7nFr9E53fODBpPG78bF8NANZqe3Y87c+r6LB+x9hgBIw6uLtChP/Bqvz
r/ips7F66f9IeuSdBObbJKSfU3vcD0SiS7oJmCLn7CWf1pGDvZdq+vZyh5j9f0iQ
jQc8tebNOPBb1dVmCeRQhML9EXQhiVfD4yIy+YALzWHDThmkZivDHuMCxNIYpvZI
tdJVbZfK7omC3VDnzD6GWivHwEkanfEPxq9x+Y4UNzmE7/33W9ToCxyisI3Am8Fs
K6gy3ziQ2n2oVXZLX70X5N52sdM9br1KbzrC6exaFMxZaB4oTD+TSHHf7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM9mKTcz5wTD8klb+rYt80TxFqoyMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvejJZcE56UG5CTVB5U1Z2NnRpM3pSUEVXcWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzhZAwQA
2TzwMA0GCSqGSIb3DQEBCwUAA4IBAQAt0r1tsmOfNvTqbCDJDT+zCRE4Ow7Ho3Hx
NhKQ2vT0donbfuwVw4suad/eO7yIxx3zgdnB0uEBCiCsvt6E7gT8sV2JOHDjamNv
F+G1WAjXbfv5f4XPueh3R4usbKPBiWKtaXXp0VzclXfx0/s9Ehk3Sb9DYqjokgOY
nk10AgnMzdnKOrCd7nFWSkKjB6ZhbLnjdpsu22w1mFcCjy2Br4FatYJDIHfChEfG
vuKe4eUu9HJeJ+NEPoWNq0nvYbRCfQ0ebljk8ujeQuetRtNI1fqqxsHfcTgWiXut
l6Y9ORsaIS3HGGMWSQ5i0nzGl3bUkJmNsbD1x1VuOqwJDdmkanR6
-----END CERTIFICATE-----
Generated at Thu Nov 6 19:47:08 2025 by rpki-client