Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GXnfpEg075JOhGDyBXGPOytad7o.roa
File: GXnfpEg075JOhGDyBXGPOytad7o.roa (raw, json)
Hash identifier: pn4Jf1GB2nMbvAgmV49F9vPCPmTCF1ekmjrcaFmnt/o=
Subject key identifier: 19:79:DF:A4:48:34:EF:92:4E:84:60:F2:05:71:8F:3B:2B:5A:77:BA
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01980309C7452C188DF2EF8B94DE2595F934
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GXnfpEg075JOhGDyBXGPOytad7o.roa
Signing time: Sun 13 Jul 2025 09:07:09 +0000
ROA not before: Sun 13 Jul 2025 09:07:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 31.56.8.0/21 maxlen: 24
31.56.126.0/24 maxlen: 24
31.56.142.0/23 maxlen: 24
31.56.148.0/22 maxlen: 24
31.57.114.0/24 maxlen: 24
31.57.116.0/24 maxlen: 24
31.59.79.0/24 maxlen: 24
31.59.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:03:09:c7:45:2c:18:8d:f2:ef:8b:94:de:25:95:f9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 13 09:07:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1979dfa44834ef924e8460f205718f3b2b5a77ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:23:05:96:87:0a:68:19:09:ae:49:47:79:74:
3a:01:4a:cb:c5:b7:cc:4a:54:dc:d3:e0:1b:a2:bd:
c7:fe:25:13:22:4e:45:f1:b1:8a:81:c0:d9:b1:33:
b1:10:cc:98:1f:4c:26:76:ae:8b:de:29:a1:c1:c0:
8f:6a:27:e7:b8:75:f6:d0:64:dc:a0:a7:de:06:b0:
53:58:fc:ef:1d:39:f9:a2:f6:6f:71:95:86:f9:fb:
a3:47:a4:c1:9b:ef:c3:58:62:5e:97:d7:34:5c:63:
b5:57:51:91:4f:ae:d4:8f:80:5b:1c:03:f6:6c:ad:
44:ef:3e:ff:2d:4d:67:72:d6:cd:e2:85:63:79:56:
dc:e3:cd:15:8f:eb:45:c8:b9:dc:35:a9:9e:44:c8:
44:5d:a5:01:71:4e:9e:0e:69:75:de:f2:00:41:2c:
b4:b8:14:5f:2b:38:3a:c4:21:22:ae:4d:88:af:37:
e9:46:ed:e8:48:45:87:fa:f5:81:73:ec:db:12:dd:
b3:98:e1:26:0e:2f:32:1c:ef:8d:47:1e:5b:84:89:
71:4a:9d:49:d4:07:a6:17:b8:e4:cd:2c:fd:28:d9:
ed:f4:68:90:69:5b:3e:73:4a:30:63:fc:df:59:1a:
15:74:dd:6e:7e:85:ed:c0:17:94:29:1c:a5:eb:76:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:79:DF:A4:48:34:EF:92:4E:84:60:F2:05:71:8F:3B:2B:5A:77:BA
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/GXnfpEg075JOhGDyBXGPOytad7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.8.0/21
31.56.126.0/24
31.56.142.0/23
31.56.148.0/22
31.57.114.0/24
31.57.116.0/24
31.59.79.0/24
31.59.228.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5f:6b:73:6b:3d:d2:26:10:ef:6d:18:b2:0c:3b:e3:63:c9:
b4:80:15:18:e8:a7:6c:9f:2e:e5:fa:76:85:df:4e:d9:63:fc:
5e:94:e8:37:1c:3b:86:ab:8a:42:16:c6:e2:bf:b6:4b:f6:55:
c0:12:19:b9:22:b2:6e:ac:b6:51:47:e5:b8:05:6c:36:b8:c6:
2c:38:13:28:cb:b2:3a:5d:ff:00:33:79:8b:d4:29:c5:87:1a:
1c:db:41:1b:9c:8f:52:ca:1b:fe:56:85:85:08:58:28:3d:dd:
c6:49:ca:cd:74:21:3c:c0:f5:f6:7c:9f:bc:08:ad:2e:1b:33:
ac:ca:af:7c:c3:39:00:10:3d:66:e2:c9:3b:cb:12:37:b7:f6:
67:11:67:b7:f5:98:8f:b6:86:09:51:98:e9:38:bd:40:2a:3f:
fe:ee:a7:f7:cf:e7:8c:f8:43:df:46:a6:9c:5a:97:b9:96:ee:
01:52:05:92:fe:93:0b:41:50:37:17:da:06:7f:dd:b4:22:15:
73:ff:35:41:02:c3:29:2a:99:55:3b:27:92:3c:94:49:f3:30:
07:83:ac:53:7d:c5:ff:74:54:a6:d6:a0:3c:85:09:2b:03:1a:
58:09:be:7f:e5:fa:72:42:fd:68:f4:9a:d8:d8:f8:9d:38:bf:
81:76:a3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:07 2025 by rpki-client