Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k1TvFTPOOx3n4L_Gi1WvcyC3b4c.roa
File: k1TvFTPOOx3n4L_Gi1WvcyC3b4c.roa (raw, json)
Hash identifier: ntEXWHMYIXhmix3m2t3u37q3pfR/0J6XJo8ghzrdyZs=
Subject key identifier: 93:54:EF:15:33:CE:3B:1D:E7:E0:BF:C6:8B:55:AF:73:20:B7:6F:87
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019753AA49A7B33134B816EF1D583BF8E397
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k1TvFTPOOx3n4L_Gi1WvcyC3b4c.roa
Signing time: Mon 09 Jun 2025 07:49:18 +0000
ROA not before: Mon 09 Jun 2025 07:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 31.56.49.0/24 maxlen: 24
31.56.156.0/24 maxlen: 24
31.56.192.0/22 maxlen: 22
31.56.198.0/23 maxlen: 23
31.56.210.0/24 maxlen: 24
31.56.212.0/24 maxlen: 24
31.56.216.0/22 maxlen: 22
31.56.223.0/24 maxlen: 24
31.56.232.0/22 maxlen: 24
31.56.234.0/24 maxlen: 24
31.56.235.0/24 maxlen: 24
31.57.129.0/24 maxlen: 24
31.57.132.0/24 maxlen: 24
31.57.142.0/24 maxlen: 24
31.57.151.0/24 maxlen: 24
31.57.191.0/24 maxlen: 24
31.57.206.0/24 maxlen: 24
31.58.33.0/24 maxlen: 24
31.58.90.0/24 maxlen: 24
31.58.157.0/24 maxlen: 24
31.58.160.0/24 maxlen: 24
31.58.163.0/24 maxlen: 24
31.58.168.0/24 maxlen: 24
31.58.224.0/24 maxlen: 24
31.58.230.0/23 maxlen: 24
31.58.231.0/24 maxlen: 24
31.59.57.0/24 maxlen: 24
31.59.108.0/24 maxlen: 24
31.59.109.0/24 maxlen: 24
31.59.110.0/24 maxlen: 24
31.59.171.0/24 maxlen: 24
31.59.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:aa:49:a7:b3:31:34:b8:16:ef:1d:58:3b:f8:e3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 9 07:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9354ef1533ce3b1de7e0bfc68b55af7320b76f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:aa:62:dc:73:6f:e2:64:3d:61:ce:5b:94:
d5:fd:eb:01:b9:e1:43:c5:35:1c:34:be:0b:93:40:
b2:3b:5c:b0:23:47:3d:41:3a:58:d5:9b:94:3f:31:
38:c9:24:75:67:f4:47:7a:f3:6b:1c:b9:87:ef:4c:
13:09:85:15:b8:e3:09:23:5f:c4:c7:e6:2c:ae:1e:
4f:c3:f2:21:63:dd:30:31:62:92:73:36:b9:39:ee:
66:d5:74:23:2a:21:db:98:85:e5:1f:1b:04:e7:2c:
2f:65:c4:f9:fc:38:07:a2:4e:19:6a:71:01:ad:28:
69:4c:d2:b2:8f:8b:b8:a5:37:9d:2e:75:6e:fe:d5:
8c:9e:5c:c1:a0:e3:ff:06:e4:ed:02:81:c4:28:80:
ff:b3:11:35:cb:db:ca:be:57:29:62:a8:e9:e4:ed:
50:b2:3c:35:ef:74:97:40:2b:9e:bc:33:7c:3e:75:
e4:f9:35:22:bc:48:1e:4d:59:8e:84:0e:4e:a6:54:
9d:5e:71:76:03:fc:3a:ba:25:5e:b3:8f:6e:b8:ef:
2c:30:2b:b1:cf:66:c3:b2:e5:64:61:2c:2f:63:21:
ef:13:78:3f:1c:60:69:92:9f:e7:6a:a9:93:89:76:
a1:c5:b8:95:2b:4a:8a:ef:75:8e:59:22:4e:36:59:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:EF:15:33:CE:3B:1D:E7:E0:BF:C6:8B:55:AF:73:20:B7:6F:87
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/k1TvFTPOOx3n4L_Gi1WvcyC3b4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.49.0/24
31.56.156.0/24
31.56.192.0/22
31.56.198.0/23
31.56.210.0/24
31.56.212.0/24
31.56.216.0/22
31.56.223.0/24
31.56.232.0/22
31.57.129.0/24
31.57.132.0/24
31.57.142.0/24
31.57.151.0/24
31.57.191.0/24
31.57.206.0/24
31.58.33.0/24
31.58.90.0/24
31.58.157.0/24
31.58.160.0/24
31.58.163.0/24
31.58.168.0/24
31.58.224.0/24
31.58.230.0/23
31.59.57.0/24
31.59.108.0-31.59.110.255
31.59.171.0/24
31.59.236.0/22
Signature Algorithm: sha256WithRSAEncryption
34:5f:4e:94:88:a4:e9:6e:93:cc:b3:ca:c6:ff:b8:7b:34:23:
de:eb:58:73:5f:c6:3e:2d:a4:92:6d:02:56:35:7c:f1:54:71:
cd:d1:a6:95:9e:27:0d:51:d3:4a:05:fe:4e:d0:d0:cd:0e:f3:
67:82:4d:cb:be:74:2f:c8:72:23:a8:09:9f:d6:6a:98:38:77:
48:13:68:ce:67:98:40:aa:c9:4a:7f:a2:f0:bb:40:e8:74:62:
08:b2:31:3b:16:b5:96:1e:d5:44:c2:91:2e:30:ee:c7:8e:37:
91:c3:21:13:3d:d8:b2:78:1a:73:63:15:5a:44:91:ff:4b:e5:
71:06:c1:d0:08:12:ea:bd:dc:f4:1e:92:48:19:5d:a6:1f:0a:
83:ab:f0:54:18:0d:a8:9b:b3:10:ee:bc:c5:9a:75:44:91:62:
62:5d:af:af:f3:88:53:2a:88:b6:e6:41:47:5c:d9:77:4f:ea:
2d:2a:be:29:66:e1:3e:61:1a:13:3c:a4:0d:11:4f:db:cf:fc:
b9:ef:2d:18:66:7a:95:d7:ab:9c:d8:fd:eb:0a:d2:20:d1:a1:
18:91:88:fe:cd:b1:7d:e6:b6:7a:1b:e2:20:30:a9:d9:b2:4a:
a9:1f:1e:31:45:32:27:f3:85:eb:6a:cf:fe:2e:42:94:af:2b:
ea:41:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:12:21 2025 by rpki-client