Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CImIVFD8SQLnS-XVjm2HFp-NXAs.roa
File: CImIVFD8SQLnS-XVjm2HFp-NXAs.roa (raw, json)
Hash identifier: krT1nJwHpUUGtVpSX6JzK/dyUWLrNBPUbG+Z0QuTuag=
Subject key identifier: 08:89:88:54:50:FC:49:02:E7:4B:E5:D5:8E:6D:87:16:9F:8D:5C:0B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A43F4BE17F5D014CC817B63482618B67D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CImIVFD8SQLnS-XVjm2HFp-NXAs.roa
Signing time: Sun 02 Nov 2025 09:45:04 +0000
ROA not before: Sun 02 Nov 2025 09:45:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 31.56.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:43:f4:be:17:f5:d0:14:cc:81:7b:63:48:26:18:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 09:45:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0889885450fc4902e74be5d58e6d87169f8d5c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:34:46:3a:d3:9f:3d:70:a5:51:89:46:fe:6e:
12:28:6f:41:e3:ef:e7:52:95:04:54:5a:6f:f1:64:
0c:ca:55:ce:48:98:aa:4b:7b:65:2f:0d:7a:a0:68:
a4:e3:0c:76:4a:80:29:fc:15:c7:f9:fc:2b:44:6f:
d0:e4:4f:9a:9b:24:0c:22:3f:9f:28:f1:47:ea:3e:
83:13:57:0c:b6:44:13:0d:f8:70:28:59:9a:1f:15:
f9:aa:04:74:1d:57:09:1d:14:92:af:9e:96:eb:3a:
78:84:3a:08:46:95:b1:79:74:b5:64:a2:97:74:7b:
fc:7a:4c:16:cc:37:d3:41:15:44:fa:dd:29:74:1c:
74:47:75:18:42:9c:9f:b0:6d:8b:07:58:fb:78:1d:
a5:e6:b1:3b:a8:df:d9:55:56:7f:5a:81:60:a3:91:
80:f0:c4:e4:12:30:e7:8f:2d:f7:2a:1a:e4:83:f1:
88:e9:a7:da:25:06:8d:60:b5:c4:75:79:f1:c7:80:
13:37:fd:3c:c4:a2:0a:20:07:2b:1a:a7:cd:a5:18:
eb:68:80:65:e7:03:39:ab:83:c6:18:1d:7d:db:1a:
06:3d:55:7a:b4:e9:f0:19:dc:c3:70:10:c5:cd:80:
c5:a8:6a:5b:0c:f3:f7:e0:04:33:6a:2b:98:60:ca:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:89:88:54:50:FC:49:02:E7:4B:E5:D5:8E:6D:87:16:9F:8D:5C:0B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CImIVFD8SQLnS-XVjm2HFp-NXAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.160.0/21
Signature Algorithm: sha256WithRSAEncryption
08:98:41:1a:68:59:49:8c:83:05:63:bb:c5:5a:d1:66:85:03:
39:53:89:be:60:c0:3c:2c:3b:00:5b:1e:ab:9b:f3:55:d8:a8:
93:64:ca:b6:48:b8:da:ad:92:c3:5f:ca:e3:e1:80:85:1d:c1:
21:ab:94:72:1c:89:89:7d:fe:77:9c:27:df:f5:45:f9:64:a1:
f9:32:34:2d:3a:36:c1:57:18:b7:b8:40:f3:4e:99:5f:8c:25:
cb:3c:27:b6:4f:5d:55:a3:f3:5d:a7:ac:a6:33:bd:68:12:45:
d8:10:11:30:da:1e:71:dc:62:14:9e:1b:c3:62:c2:45:5f:b9:
9c:2d:0f:7f:81:28:8c:b5:5a:a3:5c:fe:27:3a:18:1b:02:72:
95:36:0a:b1:94:4f:c3:bf:99:97:7f:6f:9f:a6:b4:c0:3c:b7:
36:1b:3b:5a:d3:f5:d7:9f:22:5f:d2:9d:20:cf:35:fc:e2:6c:
dc:eb:7e:0b:52:d3:92:22:72:ff:c1:5a:e6:3b:79:4f:05:96:
ab:29:5f:b5:78:f4:b6:5d:61:8f:24:e8:ea:e7:21:8f:56:f5:
c1:fe:34:c4:e4:fc:f0:31:2c:2c:61:58:3b:df:bb:2c:5d:18:
f0:d0:d3:33:69:c9:0b:db:12:4e:0c:8a:00:de:92:30:29:cd:
fe:6c:22:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZpD9L4X9dAUzIF7Y0gmGLZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMTAyMDk0NTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODg5ODg1NDUwZmM0OTAyZTc0YmU1ZDU4ZTZkODcxNjlmOGQ1YzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjRGOtOfPXClUYlG/m4SKG9B4+/n
UpUEVFpv8WQMylXOSJiqS3tlLw16oGik4wx2SoAp/BXH+fwrRG/Q5E+amyQMIj+f
KPFH6j6DE1cMtkQTDfhwKFmaHxX5qgR0HVcJHRSSr56W6zp4hDoIRpWxeXS1ZKKX
dHv8ekwWzDfTQRVE+t0pdBx0R3UYQpyfsG2LB1j7eB2l5rE7qN/ZVVZ/WoFgo5GA
8MTkEjDnjy33Khrkg/GI6afaJQaNYLXEdXnxx4ATN/08xKIKIAcrGqfNpRjraIBl
5wM5q4PGGB192xoGPVV6tOnwGdzDcBDFzYDFqGpbDPP34AQzaiuYYMogcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAiJiFRQ/EkC50vl1Y5thxafjVwLMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvQ0ltSVZGRDhTUUxuUy1YVmptMkhGcC1OWEFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDHzigMA0G
CSqGSIb3DQEBCwUAA4IBAQAImEEaaFlJjIMFY7vFWtFmhQM5U4m+YMA8LDsAWx6r
m/NV2KiTZMq2SLjarZLDX8rj4YCFHcEhq5RyHImJff53nCff9UX5ZKH5MjQtOjbB
Vxi3uEDzTplfjCXLPCe2T11Vo/Ndp6ymM71oEkXYEBEw2h5x3GIUnhvDYsJFX7mc
LQ9/gSiMtVqjXP4nOhgbAnKVNgqxlE/Dv5mXf2+fprTAPLc2Gzta0/XXnyJf0p0g
zzX84mzc634LUtOSInL/wVrmO3lPBZarKV+1ePS2XWGPJOjq5yGPVvXB/jTE5Pzw
MSwsYVg737ssXRjw0NMzackL2xJODIoA3pIwKc3+bCJI
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:16:13 2025 by rpki-client