Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hpY7xIH1pRCPO4lBpzj6zjl_N5U.roa
File: hpY7xIH1pRCPO4lBpzj6zjl_N5U.roa (raw, json)
Hash identifier: jJ6Ouo5syuE/LElgK9bX674/ZkVIq15gV2t7p3gU9d0=
Subject key identifier: 86:96:3B:C4:81:F5:A5:10:8F:3B:89:41:A7:38:FA:CE:39:7F:37:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A4A03A26D66363DD64F25BF007E5E329D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hpY7xIH1pRCPO4lBpzj6zjl_N5U.roa
Signing time: Mon 03 Nov 2025 13:59:03 +0000
ROA not before: Mon 03 Nov 2025 13:59:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 31.56.160.0/21 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.128.0/19 maxlen: 24
217.60.160.0/20 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.184.0/23 maxlen: 24
217.60.200.0/21 maxlen: 24
217.60.208.0/20 maxlen: 24
217.60.224.0/21 maxlen: 24
217.60.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:03:a2:6d:66:36:3d:d6:4f:25:bf:00:7e:5e:32:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 13:59:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86963bc481f5a5108f3b8941a738face397f3795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:8d:7d:15:4b:39:11:20:a8:da:c6:82:d4:
02:cc:bf:6b:8d:b9:f7:52:22:30:c6:6b:8b:d1:41:
e8:ba:cb:d2:ce:1c:ec:32:dd:25:4d:fd:3a:00:1f:
ab:b2:ca:6b:45:92:9f:fa:ca:9c:0e:fc:8c:33:e4:
9e:58:4a:db:e3:6f:b5:73:79:ba:5f:b8:ed:2e:da:
73:f5:bb:eb:a3:46:ad:ce:2e:6f:4b:53:03:fe:2f:
58:ab:93:18:1b:99:fc:44:b0:88:0d:3e:cb:60:4d:
ec:cf:21:ae:9e:5a:1e:60:d4:7c:5e:6f:5d:34:5a:
45:f4:85:03:cf:cc:c3:44:1f:31:e3:b6:20:18:c5:
8d:f5:04:55:87:58:11:37:b3:cd:e2:1a:1f:93:eb:
72:92:d1:22:4e:78:a3:3e:7c:0e:33:95:4f:bd:57:
64:ee:17:c6:af:55:01:6a:b3:44:38:3a:a1:d1:cc:
91:79:88:5a:34:3f:ed:28:4a:50:fa:e1:af:2e:2b:
89:1c:99:cd:84:d8:0c:98:ae:77:f4:89:28:60:5c:
a2:3c:62:de:24:d2:3b:1f:c7:34:5b:d8:d3:0c:25:
e2:b4:39:9c:10:8f:36:cd:9a:db:f5:61:75:39:28:
a6:36:af:a5:6c:68:5b:90:de:99:2d:80:b2:c0:86:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:3B:C4:81:F5:A5:10:8F:3B:89:41:A7:38:FA:CE:39:7F:37:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/hpY7xIH1pRCPO4lBpzj6zjl_N5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.160.0/21
217.60.0.0/21
217.60.128.0-217.60.185.255
217.60.200.0-217.60.235.255
Signature Algorithm: sha256WithRSAEncryption
a5:f1:57:f1:46:cf:64:f0:85:ab:4a:40:2f:84:22:a6:cc:ed:
e6:a3:a0:80:82:a2:cc:63:d3:bc:45:03:57:3b:9a:ae:2b:ad:
95:d4:39:6a:a0:3c:5f:04:7a:f9:85:af:e2:e6:8a:df:0a:3a:
e1:4f:41:7e:22:78:a2:d2:36:86:13:05:2d:1b:28:a8:29:54:
82:69:61:46:32:5c:33:0f:0c:91:64:33:7f:1a:20:c5:5d:b2:
ee:d5:4a:a1:d7:c2:bf:34:6e:97:2a:cc:43:58:22:17:73:20:
df:aa:d7:05:00:10:7e:ee:b3:47:3c:c1:61:ed:da:46:68:2d:
28:2b:34:de:da:31:8c:75:ee:b4:46:31:a4:13:7f:47:4c:27:
29:e3:7e:d7:a8:0b:a1:03:07:f9:95:29:03:dd:2f:6d:5e:bf:
c0:e4:d3:c9:01:22:b0:75:a1:cc:36:89:f0:ed:d0:70:6c:4e:
02:b1:16:a3:d0:36:9b:77:7c:af:bb:56:01:10:3d:12:84:02:
b6:eb:23:df:2a:f8:d0:93:6c:6f:c4:02:11:a0:6f:77:7e:3b:
f3:4b:50:48:ac:49:2b:30:b7:98:38:2f:0d:9f:58:9b:22:70:
ab:fa:8c:fb:d9:18:72:f3:ac:6e:fe:22:af:be:a0:90:27:a5:
12:a0:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:22:16 2025 by rpki-client