Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XaB-GxCCoZlOLZ8aQb3BZQfMhwY.roa
File: XaB-GxCCoZlOLZ8aQb3BZQfMhwY.roa (raw, json)
Hash identifier: 6F24348wh5l0iw58z3w6kRpBmDVT8hOT/ZaU8FVPkvw=
Subject key identifier: 5D:A0:7E:1B:10:82:A1:99:4E:2D:9F:1A:41:BD:C1:65:07:CC:87:06
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A2AF09EAE2A58D4A656129D732A5251BD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XaB-GxCCoZlOLZ8aQb3BZQfMhwY.roa
Signing time: Tue 28 Oct 2025 13:10:03 +0000
ROA not before: Tue 28 Oct 2025 13:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 31.58.41.0/24 maxlen: 24
31.58.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:f0:9e:ae:2a:58:d4:a6:56:12:9d:73:2a:52:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 28 13:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5da07e1b1082a1994e2d9f1a41bdc16507cc8706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:25:01:40:05:22:7c:14:e5:3a:59:8d:b6:
c3:ce:33:ec:16:4a:41:2b:5a:71:94:fa:77:30:5d:
5d:ea:70:f1:c0:35:6b:66:14:76:86:51:59:d5:ac:
84:fe:6e:b9:fc:96:d2:ad:4d:3a:16:9d:9c:9c:d2:
87:e7:27:a6:c0:03:fb:d4:bd:df:09:58:e5:2e:e9:
9d:18:ef:f6:8f:3a:93:63:68:18:3a:14:68:d9:d7:
61:69:23:01:7a:5a:3e:d5:8a:e5:9e:2c:79:b8:68:
2c:86:e0:30:72:e2:c8:49:2b:d5:fc:a0:88:78:4e:
d4:20:38:53:3f:8e:0b:92:5a:be:84:95:44:b8:1e:
b7:af:4d:5c:91:d1:69:59:76:c0:5b:38:da:e0:ae:
83:77:f9:85:7c:d9:e5:3b:ef:a6:6d:dc:2f:58:5a:
3d:d7:a8:f2:36:d4:e5:e4:3c:0c:b6:ab:31:09:cd:
99:64:af:fb:ad:21:a9:53:8a:1c:9d:da:60:43:db:
40:e4:57:8a:18:36:d0:a2:09:50:75:da:08:e4:5d:
8c:1c:94:09:d1:d9:ac:f1:3b:83:a0:51:ab:55:d0:
1e:44:97:ab:45:1d:b3:e3:07:26:9c:e0:7b:c1:c8:
6d:2c:7e:4d:02:43:99:ee:17:f3:dc:97:e4:86:d7:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:7E:1B:10:82:A1:99:4E:2D:9F:1A:41:BD:C1:65:07:CC:87:06
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XaB-GxCCoZlOLZ8aQb3BZQfMhwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.41.0/24
31.58.55.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d6:d4:0a:6f:5a:06:54:92:46:03:3f:03:0f:4c:86:d7:1f:
3c:e1:f4:5e:a5:24:4a:06:ca:57:51:f5:e6:e5:1e:ad:b4:cd:
8d:a8:be:21:9c:b5:65:94:3f:0f:8c:11:6c:30:46:55:73:15:
8a:5c:83:4f:e1:7d:6e:b7:c5:ae:c0:e9:4e:d4:16:a9:d5:57:
fa:a6:06:23:2c:3e:1a:3e:be:5f:1e:0a:f4:cb:2f:5b:a9:27:
b2:22:35:de:6d:b3:79:4d:54:39:b2:02:f0:85:91:02:c4:39:
0a:13:f5:68:7c:0f:10:50:df:b0:40:05:4a:07:d1:da:e4:87:
5b:a7:88:3c:2e:79:c9:9c:7d:a6:36:29:cd:41:4f:8e:f6:e1:
ee:1a:67:5b:32:60:b5:c8:cb:91:43:e1:f7:8a:04:c4:dd:88:
b6:5a:57:df:b6:71:33:6d:e0:8b:c8:b3:f7:18:77:34:ef:bb:
aa:e5:b7:c8:05:a4:0e:98:84:94:9c:4a:94:92:58:f1:94:f2:
97:a0:4e:0c:2d:da:92:21:7c:2e:43:05:2f:3a:87:f3:f0:37:
5f:4b:4f:d6:4d:9d:6b:88:5e:ac:b6:ff:72:0d:94:0f:7a:09:
17:7a:68:35:5b:7a:f6:01:8b:f2:58:f6:b2:01:6d:cc:96:7b:
46:4a:3c:8c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZoq8J6uKljUplYSnXMqUlG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUxMDI4MTMxMDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGEwN2UxYjEwODJhMTk5NGUyZDlmMWE0MWJkYzE2NTA3Y2M4NzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SIlAUAFInwU5TpZjbbDzjPsFkpB
K1pxlPp3MF1d6nDxwDVrZhR2hlFZ1ayE/m65/JbSrU06Fp2cnNKH5yemwAP71L3f
CVjlLumdGO/2jzqTY2gYOhRo2ddhaSMBelo+1Yrlnix5uGgshuAwcuLISSvV/KCI
eE7UIDhTP44Lklq+hJVEuB63r01ckdFpWXbAWzja4K6Dd/mFfNnlO++mbdwvWFo9
16jyNtTl5DwMtqsxCc2ZZK/7rSGpU4ocndpgQ9tA5FeKGDbQoglQddoI5F2MHJQJ
0dms8TuDoFGrVdAeRJerRR2z4wcmnOB7wchtLH5NAkOZ7hfz3JfkhtcjSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF2gfhsQgqGZTi2fGkG9wWUHzIcGMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvWGFCLUd4Q0NvWmxPTFo4YVFiM0JaUWZNaHdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzopAwQA
Hzo3MA0GCSqGSIb3DQEBCwUAA4IBAQCu1tQKb1oGVJJGAz8DD0yG1x884fRepSRK
BspXUfXm5R6ttM2NqL4hnLVllD8PjBFsMEZVcxWKXINP4X1ut8WuwOlO1Bap1Vf6
pgYjLD4aPr5fHgr0yy9bqSeyIjXebbN5TVQ5sgLwhZECxDkKE/VofA8QUN+wQAVK
B9Ha5Idbp4g8LnnJnH2mNinNQU+O9uHuGmdbMmC1yMuRQ+H3igTE3Yi2WlfftnEz
beCLyLP3GHc077uq5bfIBaQOmISUnEqUkljxlPKXoE4MLdqSIXwuQwUvOofz8Ddf
S0/WTZ1riF6stv9yDZQPegkXemg1W3r2AYvyWPayAW3MlntGSjyM
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:34 2025 by rpki-client