Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d_SuImdkG2A7rkMxzxpA4M2wjLE.roa
File: d_SuImdkG2A7rkMxzxpA4M2wjLE.roa (raw, json)
Hash identifier: S1DrZmPmpK5ijofsX/2AcAZhSh5k3o/lpI9+sY8EVRk=
Subject key identifier: 77:F4:AE:22:67:64:1B:60:3B:AE:43:31:CF:1A:40:E0:CD:B0:8C:B1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A1249E3D57CBE6F075D9AD78CE1A61710
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d_SuImdkG2A7rkMxzxpA4M2wjLE.roa
Signing time: Thu 23 Oct 2025 18:17:03 +0000
ROA not before: Thu 23 Oct 2025 18:17:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 31.56.125.0/24 maxlen: 24
31.56.192.0/24 maxlen: 24
31.56.193.0/24 maxlen: 24
31.56.195.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.57.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:49:e3:d5:7c:be:6f:07:5d:9a:d7:8c:e1:a6:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 18:17:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77f4ae2267641b603bae4331cf1a40e0cdb08cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:49:75:39:ac:16:55:2f:a8:54:f1:6e:3a:
95:84:25:50:f6:58:a2:e4:ca:85:50:1a:80:74:8c:
85:27:40:de:ad:12:85:bf:53:31:72:a0:1b:18:77:
39:16:02:22:a0:3b:bf:a6:ae:e8:60:16:b8:d9:a6:
b3:71:ab:d5:ac:9c:9f:03:7d:3b:fa:2c:a6:39:0b:
8b:f8:9f:89:4a:43:af:0b:7f:da:f2:8e:93:89:95:
46:87:e8:0f:93:61:14:b0:c6:77:02:51:d0:9c:ee:
cc:6d:c5:1e:ac:4e:f4:78:c1:c8:61:aa:d5:30:64:
65:9b:55:85:13:b0:2c:15:fd:c4:cb:50:0d:f4:1b:
7c:e7:03:f5:c7:d8:0c:a4:62:00:84:7a:16:eb:61:
ae:55:33:45:75:f8:55:90:95:b5:63:d6:dc:51:c9:
10:82:d5:6c:27:b4:34:37:c8:cc:4b:6e:bb:02:3b:
a7:62:80:27:b6:33:1b:c8:c5:33:c2:51:22:c9:99:
5e:21:cd:7c:ad:8a:c3:9e:39:a4:19:4d:1f:cd:e8:
f9:db:07:82:41:30:67:b2:8f:51:f4:7b:cc:1b:44:
2f:19:5e:96:aa:61:be:2d:ed:1d:fa:00:a6:cf:2f:
2c:26:c8:20:fb:b7:b9:1e:52:fc:85:93:d9:ed:2c:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F4:AE:22:67:64:1B:60:3B:AE:43:31:CF:1A:40:E0:CD:B0:8C:B1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/d_SuImdkG2A7rkMxzxpA4M2wjLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.125.0/24
31.56.192.0/23
31.56.195.0/24
31.57.221.0/24
31.57.237.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7c:89:fd:b9:ad:27:dc:9d:34:e1:0b:7d:77:28:14:dc:9e:
95:42:ef:92:97:2c:7c:d4:11:00:77:e3:24:76:db:7d:34:c1:
3c:e9:77:be:69:21:51:ce:cf:fd:3d:78:fa:89:06:05:53:78:
1e:9a:c6:86:31:a1:5f:38:f5:0d:80:29:c7:5e:2e:9b:b1:33:
42:b0:1b:e0:5b:c7:9b:38:4c:41:fb:6e:0b:5f:0b:75:4b:40:
50:cf:6a:16:e9:06:6f:e4:81:6f:12:ef:bf:3c:78:14:78:b9:
fc:b5:6c:24:1d:bf:ff:a9:6d:c0:79:64:e9:11:b5:ed:7f:68:
c0:53:ae:c9:fd:c6:d0:01:af:2e:cc:43:8d:54:96:f2:ff:5d:
4f:aa:d3:0e:b7:a7:c0:2e:43:9c:5f:a1:df:8b:76:4f:24:88:
fc:54:9d:5d:8a:40:9d:2f:95:8c:45:c6:3f:e3:93:08:84:c2:
41:bb:2e:20:5d:dc:08:7c:f9:b5:ae:90:12:e9:62:ea:22:38:
10:2f:4f:86:62:84:2e:ab:88:58:69:f3:4a:7f:bb:e2:c1:04:
f9:b1:1a:d7:7a:6a:50:4c:a9:db:6f:00:3c:07:39:b0:df:39:
ee:74:54:e5:b0:23:cb:4a:f4:f2:aa:c6:86:57:44:98:62:37:
50:c8:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:15 2025 by rpki-client