Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qqn6CKjXNxAJsBPoQmdFskOoM90.roa
File: Qqn6CKjXNxAJsBPoQmdFskOoM90.roa (raw, json)
Hash identifier: LxyWQEGOCrN65S2LgN0mR9JfxYNEQXMO7y+2tbrtdIA=
Subject key identifier: 42:A9:FA:08:A8:D7:37:10:09:B0:13:E8:42:67:45:B2:43:A8:33:DD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019855AA3375EE2776BEDA83E25C76F02478
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qqn6CKjXNxAJsBPoQmdFskOoM90.roa
Signing time: Tue 29 Jul 2025 10:11:14 +0000
ROA not before: Tue 29 Jul 2025 10:11:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.223.0/24 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.35.0/24 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.57.225.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.58.224.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:aa:33:75:ee:27:76:be:da:83:e2:5c:76:f0:24:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 29 10:11:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42a9fa08a8d7371009b013e8426745b243a833dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:d3:aa:14:1a:8f:1c:00:d4:e3:b1:60:cd:
60:81:c3:cc:1a:98:87:14:22:1c:15:a9:f7:7c:0d:
ae:d6:4c:59:6c:ef:b0:58:18:20:2c:59:0d:a9:93:
e4:4f:ea:a5:ea:5c:80:16:b8:c3:11:66:a3:d9:91:
7b:fa:8e:4d:7f:71:6b:cb:e8:c3:9c:8d:00:e1:ce:
04:e7:47:38:61:8e:c1:2b:1e:0f:3a:ba:58:05:77:
fa:86:cf:be:e0:fe:29:d7:2a:f5:ff:74:f6:f1:7a:
fd:35:f1:46:9e:75:67:c7:db:31:3f:21:64:0b:2c:
94:15:8e:e0:b8:d2:ba:1f:b1:bf:8c:d0:55:0f:78:
c0:34:14:48:82:82:78:01:69:41:14:c0:b9:07:a5:
3e:ff:7f:bd:be:1b:f0:cf:4b:72:ab:3b:43:f2:df:
04:9f:9a:54:ab:9b:81:59:6b:01:0c:dc:df:bb:ef:
80:70:58:42:fe:4d:f3:f2:3a:ba:cc:10:fa:be:aa:
94:c1:ea:1f:81:27:15:f2:84:78:79:3d:8d:93:ba:
25:77:c1:08:74:82:f3:d7:f1:18:c6:8f:dd:28:ae:
89:97:39:84:1d:0c:39:67:93:1a:52:e6:a4:ab:03:
d5:ec:0f:4e:c3:33:07:1b:b1:a2:09:3c:d9:4b:c0:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:FA:08:A8:D7:37:10:09:B0:13:E8:42:67:45:B2:43:A8:33:DD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Qqn6CKjXNxAJsBPoQmdFskOoM90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.156.0/24
31.56.210.0/24
31.56.212.0/24
31.56.223.0/24
31.56.234.0/23
31.57.35.0/24
31.57.129.0/24
31.57.132.0/24
31.57.142.0/24
31.57.151.0/24
31.57.191.0/24
31.57.206.0/24
31.57.225.0/24
31.58.33.0/24
31.58.90.0/24
31.58.157.0/24
31.58.160.0/24
31.58.163.0/24
31.58.168.0/24
31.58.224.0/24
31.58.230.0/23
31.59.57.0/24
31.59.108.0-31.59.110.255
31.59.171.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:01:2e:40:63:e0:ca:bc:5d:d1:f1:ee:52:c9:08:da:0a:fd:
d3:9d:20:9e:7e:6f:a3:46:5a:de:ba:f1:3b:56:64:de:5a:92:
88:f2:a2:fe:21:02:46:53:9f:01:82:ba:c8:a5:bf:32:d9:68:
88:60:36:2b:a2:2c:8a:dc:6f:c5:70:7d:12:ab:32:93:2f:8e:
e8:af:0d:dd:a0:e7:cf:41:7b:2d:5c:45:ed:9b:a0:40:5a:df:
dd:bb:f0:98:27:15:9b:2b:45:bc:d1:bc:93:66:50:38:7f:55:
f9:81:8f:a0:d6:41:a9:e9:94:5e:16:23:5f:fa:7c:d3:a0:02:
c9:74:6e:6f:ac:f6:23:64:ba:39:ae:c9:1c:50:7a:84:6c:e6:
d5:56:aa:cd:b2:1e:59:1a:c3:9b:df:50:3d:84:08:6f:4b:52:
2f:c9:ca:da:22:46:6b:8c:9c:42:38:49:aa:c4:af:f8:84:c4:
6a:e3:1d:74:61:8a:df:dc:b6:91:51:ad:f6:2d:67:da:86:58:
3b:34:ba:4f:6d:67:8a:09:c7:c9:62:ed:05:45:fa:f7:06:f2:
4a:29:60:8d:d3:02:8e:71:b9:62:f2:67:b9:f5:6a:81:63:ac:
c7:a0:e5:40:1e:c2:e3:2d:3f:4b:8f:3b:d0:84:b1:96:5e:35:
8b:ba:42:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:24:15 2025 by rpki-client