Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IeZNUVv6IiKS05YrhkAf1qZ7JwY.roa
File: IeZNUVv6IiKS05YrhkAf1qZ7JwY.roa (raw, json)
Hash identifier: fd8CsQjiKPQaXHZ/8W6D47S6hz+I7zIB4bV3QeuAMMg=
Subject key identifier: 21:E6:4D:51:5B:FA:22:22:92:D3:96:2B:86:40:1F:D6:A6:7B:27:06
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A3FD0270874BB31E1785B2E5AA2FA8224
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IeZNUVv6IiKS05YrhkAf1qZ7JwY.roa
Signing time: Sat 01 Nov 2025 14:26:37 +0000
ROA not before: Sat 01 Nov 2025 14:26:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 31.56.52.0/22 maxlen: 22
31.56.219.0/24 maxlen: 24
31.57.161.0/24 maxlen: 24
31.57.199.0/24 maxlen: 24
31.59.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:d0:27:08:74:bb:31:e1:78:5b:2e:5a:a2:fa:82:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 14:26:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21e64d515bfa222292d3962b86401fd6a67b2706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:d9:24:15:f9:b5:a1:31:85:11:fa:37:7a:
c7:74:46:10:0f:a5:51:b7:f3:6f:c3:33:65:c7:51:
9f:82:e8:95:96:9d:8e:0c:7e:25:fd:ee:8b:7a:25:
95:be:f9:7e:34:79:41:8e:c5:54:09:2e:b3:1d:d2:
24:78:55:8e:a0:bb:3e:75:4b:74:b6:55:5a:ab:8a:
76:c1:de:53:db:26:cc:8b:1f:aa:0b:3c:bc:49:14:
5c:32:24:a4:af:68:16:d3:d9:3c:c6:6e:65:61:31:
75:94:56:41:a5:ed:0e:88:60:77:a3:91:c1:ef:35:
7b:a5:5c:39:f7:35:85:de:b3:52:8a:bb:9a:14:3a:
29:d5:25:54:e1:ff:79:ec:33:b9:0d:38:7c:f7:26:
5f:78:9c:7b:b1:20:9f:bf:0f:95:93:3e:89:2a:d2:
6b:6c:cd:ba:7d:57:dd:ed:93:8a:ba:02:d2:19:72:
91:02:ec:e8:97:26:eb:b4:68:cb:ce:52:9d:89:e9:
76:c3:5b:48:f8:fe:dd:cb:63:ed:5e:18:2a:58:a2:
b7:af:1e:6c:d7:c4:34:d5:11:d1:e0:48:aa:d7:64:
50:b7:be:1c:f5:e7:7b:67:08:e2:6f:5f:14:e2:43:
7a:88:b0:ad:fa:77:9c:e8:5e:95:8a:72:59:73:bd:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E6:4D:51:5B:FA:22:22:92:D3:96:2B:86:40:1F:D6:A6:7B:27:06
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/IeZNUVv6IiKS05YrhkAf1qZ7JwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.52.0/22
31.56.219.0/24
31.57.161.0/24
31.57.199.0/24
31.59.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d4:98:4d:e0:52:7c:0c:f6:70:85:30:7a:41:6f:55:fa:84:
50:47:16:cb:0d:2e:04:a1:29:3d:d5:f4:b2:ea:cf:3f:6a:1e:
41:22:51:4e:10:b6:32:b6:69:62:c3:d9:38:0d:35:da:11:90:
34:05:2e:1e:03:5d:f0:d9:ff:3b:da:17:a5:9e:02:5a:d1:b0:
ba:a3:f1:9f:1c:0f:f5:e3:20:16:43:01:a4:c3:6b:d2:d9:29:
10:28:4b:42:9c:5c:bd:f0:98:c8:a6:ca:bd:8a:d4:ea:04:fd:
06:28:5d:f9:40:99:01:24:e2:2f:cb:12:f6:67:13:0a:5a:88:
98:4a:7d:ba:5a:53:78:63:5c:8b:81:65:6c:f6:0d:82:3c:92:
10:99:e9:a0:76:99:21:6c:53:ee:0e:77:d9:88:dd:15:25:61:
7c:54:af:ba:90:5b:3f:ff:4c:0d:f1:31:9d:be:85:9d:73:57:
c0:79:7d:04:68:2c:12:c7:8c:9d:78:f1:91:f2:e6:70:4b:f5:
2d:9b:e0:d7:f0:53:c1:bc:d8:3d:11:24:37:87:24:81:ca:16:
18:e7:ff:8e:f2:d6:31:8b:b7:bf:65:67:4c:24:e1:0e:53:9e:
f2:c2:c3:ef:e7:73:58:9e:f5:f6:f0:94:1d:58:f1:58:60:7e:
57:ac:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:45 2025 by rpki-client