Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4gAq6uWQEB52ZkzqMiQHRLApGUw.roa
File: 4gAq6uWQEB52ZkzqMiQHRLApGUw.roa (raw, json)
Hash identifier: pmR7c3lD+VZPdiv1fjtHr94QVK489KVII5KhKpBahm0=
Subject key identifier: E2:00:2A:EA:E5:90:10:1E:76:66:4C:EA:32:24:07:44:B0:29:19:4C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019808CD9BB9E0F4F18C14441CDF0168CE18
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4gAq6uWQEB52ZkzqMiQHRLApGUw.roa
Signing time: Mon 14 Jul 2025 11:59:09 +0000
ROA not before: Mon 14 Jul 2025 11:59:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137517
IP address blocks: 31.57.121.0/24 maxlen: 24
31.57.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:cd:9b:b9:e0:f4:f1:8c:14:44:1c:df:01:68:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 14 11:59:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2002aeae590101e76664cea32240744b029194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:94:2c:73:06:12:54:b0:b8:c7:3d:ad:cf:
cb:50:84:85:e2:1a:1c:16:3c:a6:9e:8e:c4:f5:b1:
17:56:86:74:43:56:45:ce:0c:60:88:1f:65:2f:45:
a7:3b:fc:d4:14:fb:8d:58:91:fd:31:7d:19:be:31:
41:5f:7a:b6:3c:cd:23:c6:77:e5:90:b5:de:e8:72:
8b:4e:29:7a:a4:f7:7c:55:a4:3e:82:47:86:ed:40:
fc:22:c4:c9:81:ab:5a:83:d6:e8:92:15:cf:01:41:
99:18:a6:0c:11:b6:fe:f1:0b:95:e3:15:ec:31:1a:
2b:a7:a2:ab:3a:59:8b:2a:18:bf:77:86:28:c8:9b:
9d:b6:2a:55:cd:0f:9a:a5:5f:79:db:de:64:14:5b:
ef:d3:6e:0f:db:b0:9e:58:ec:04:2b:58:f6:29:4c:
dd:3f:ac:ca:53:76:1d:e2:19:75:33:01:56:64:1c:
b1:d5:52:e3:3b:db:f0:a4:8f:ee:b7:38:39:1f:15:
4f:0f:8a:2e:4b:c1:96:08:9a:45:70:ae:c2:71:f9:
c5:6c:52:eb:93:f5:92:9d:82:0b:2e:fd:30:60:ae:
f1:c5:bc:91:32:5b:d5:65:07:70:3d:29:f8:c6:5b:
b6:ca:8d:6b:4c:0c:87:e8:33:05:f1:12:b2:55:3e:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:2A:EA:E5:90:10:1E:76:66:4C:EA:32:24:07:44:B0:29:19:4C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/4gAq6uWQEB52ZkzqMiQHRLApGUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.121.0/24
31.57.159.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9f:51:19:3f:57:48:64:a1:ea:86:9b:72:16:68:29:bf:58:
26:6c:c7:3e:15:ef:7d:18:6d:c5:37:2b:00:e3:c2:cf:34:89:
c6:dd:b5:e5:d0:9d:30:e5:79:4b:e3:e6:b6:0e:ed:29:30:e9:
ae:c8:75:d1:f3:2a:00:25:89:a7:59:59:c9:f8:63:8b:c8:2b:
cf:d6:bd:74:ef:9a:e9:87:7d:39:58:f2:08:9b:2c:4e:84:0f:
87:16:66:3c:56:c0:40:59:98:fd:19:9f:d5:a9:af:25:fd:ee:
32:e0:ef:9c:37:32:ee:13:31:4e:f4:e6:82:74:f4:5f:df:18:
24:0e:48:04:fc:a5:6b:91:f3:24:43:ad:72:b1:b8:78:d4:13:
dc:78:e5:cd:99:0d:f8:59:0a:b5:ae:d5:b1:1f:e1:6d:26:99:
61:34:65:09:f4:ed:e7:37:c0:35:35:33:da:f8:3f:08:3f:46:
30:62:95:bd:ad:6e:33:3f:37:df:c7:96:b0:0c:2e:ed:9b:13:
4c:a0:33:4f:df:8e:ad:60:5a:ae:24:da:31:2d:a4:69:77:66:
7d:2b:a0:da:91:8a:2c:9e:67:4f:26:f6:ca:91:77:ad:1c:1d:
3e:05:e1:f6:ad:bf:57:52:07:20:b8:f9:67:0f:4d:ce:24:dd:
85:c8:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:07:01 2025 by rpki-client