Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UsMI8nbsCxe5GjLyFTWn750EXFU.roa
File: UsMI8nbsCxe5GjLyFTWn750EXFU.roa (raw, json)
Hash identifier: jR16/nAs5HaibdRfYQfgwX82LD5rDsXbC/bt+1SqaR0=
Subject key identifier: 52:C3:08:F2:76:EC:0B:17:B9:1A:32:F2:15:35:A7:EF:9D:04:5C:55
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A4A9E5C51BD0AD748C7B1E45C888BA20E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UsMI8nbsCxe5GjLyFTWn750EXFU.roa
Signing time: Mon 03 Nov 2025 16:48:03 +0000
ROA not before: Mon 03 Nov 2025 16:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.34.0/24 maxlen: 24
31.56.96.0/24 maxlen: 24
31.57.146.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
217.60.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:9e:5c:51:bd:0a:d7:48:c7:b1:e4:5c:88:8b:a2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 16:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52c308f276ec0b17b91a32f21535a7ef9d045c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:a3:d0:ea:30:1a:dd:54:dd:3e:13:0f:79:
ad:45:48:9d:2f:c1:9f:0b:a4:02:01:fd:90:13:3e:
19:fe:b1:a2:ed:e1:65:fe:e8:37:ac:6d:de:90:c0:
5a:dc:52:4c:1e:b9:dd:3c:a6:5d:d2:ed:b3:c7:8d:
0c:9b:cf:8a:0a:24:8c:e7:b8:08:ea:60:b0:e1:06:
9b:f1:91:08:1c:8b:b5:78:ab:27:35:cc:1c:6c:a9:
f9:ab:05:89:9a:54:f0:a0:88:11:71:4c:1f:8f:ef:
86:fa:8d:cf:c8:5c:23:12:e3:59:4b:6b:e7:f9:85:
92:4e:e9:60:e7:de:d0:22:1e:72:48:e8:c5:72:c5:
ab:1c:61:43:25:8f:42:bb:f3:ed:0a:b6:bd:e9:33:
02:98:25:00:bf:44:98:5f:99:48:7e:91:cb:27:cf:
cd:73:f5:e8:e0:28:92:68:a1:ec:58:c8:29:c8:8c:
e7:1e:44:84:8b:06:11:49:57:07:3f:c8:08:27:2e:
d7:f6:ee:80:25:4d:8f:06:de:f5:40:d3:cc:2c:cf:
3f:d2:94:f9:23:01:0b:7e:fc:3c:c1:d0:29:5d:57:
ec:ac:40:fb:d2:64:ee:1d:60:b8:70:35:f3:e7:ca:
12:b6:3a:fd:4d:81:49:7d:ec:9e:97:d8:ab:f2:57:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:08:F2:76:EC:0B:17:B9:1A:32:F2:15:35:A7:EF:9D:04:5C:55
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UsMI8nbsCxe5GjLyFTWn750EXFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.34.0/24
31.56.96.0/24
31.57.146.0/24
31.57.171.0/24
31.57.222.0/23
217.60.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f0:1b:74:8a:d2:a4:06:10:45:7b:ff:3c:a8:61:0b:46:47:
8d:3f:6e:e0:14:6a:a7:a4:2d:e5:af:38:86:80:da:fe:c7:ec:
5b:ae:be:a2:a2:17:55:c7:dc:dd:0b:01:29:53:b5:cb:b8:ed:
d1:8d:74:0a:6f:2c:28:4e:56:40:fc:c4:2c:b9:03:6a:78:e6:
1a:50:44:97:3b:ec:ec:21:f7:2d:b3:ce:9a:38:1c:84:86:50:
bf:16:ba:1c:90:55:8b:94:05:f0:3b:80:b0:88:66:d4:39:56:
b4:83:60:73:74:80:10:f0:81:fe:a7:07:91:9c:9c:eb:54:22:
86:62:86:37:0f:0a:33:96:23:27:b3:dc:4c:ad:8f:1c:62:1a:
b5:a0:38:d6:70:20:06:cd:a5:eb:98:62:70:cc:0f:18:6d:9c:
1e:59:c2:9a:3b:33:90:0e:dc:29:8b:9a:46:04:6b:f0:e8:82:
8d:9a:0a:f8:15:86:2a:94:d8:5a:0a:43:71:76:78:fe:bb:1e:
af:b4:f8:5b:3b:3e:d7:a7:3b:72:85:18:79:91:98:53:31:a8:
96:82:d7:88:36:f3:42:90:7b:df:d0:2e:23:57:b0:28:93:2d:
98:25:f2:7e:cb:20:f4:bf:e6:67:1f:c5:ee:8d:be:4d:fd:b3:
30:0e:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:34 2025 by rpki-client