Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I8lSkjjSAx5IvQFS9rBCVUHNePc.roa
File: I8lSkjjSAx5IvQFS9rBCVUHNePc.roa (raw, json)
Hash identifier: nnwkB5lkqES31KDK9pPfgzm3i4DiczzlebOnMQOLdXc=
Subject key identifier: 23:C9:52:92:38:D2:03:1E:48:BD:01:52:F6:B0:42:55:41:CD:78:F7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019813E41B572E2BE23FAB080A695EF26C91
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I8lSkjjSAx5IvQFS9rBCVUHNePc.roa
Signing time: Wed 16 Jul 2025 15:39:33 +0000
ROA not before: Wed 16 Jul 2025 15:39:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216145
IP address blocks: 31.56.207.0/24 maxlen: 24
31.57.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:e4:1b:57:2e:2b:e2:3f:ab:08:0a:69:5e:f2:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 16 15:39:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23c9529238d2031e48bd0152f6b0425541cd78f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:f8:c0:65:ea:08:fe:f1:31:6c:fd:3f:05:
87:b4:ef:ac:9e:52:41:0b:ac:88:92:4c:2f:63:2a:
59:77:7c:27:4b:f7:26:5c:77:53:19:63:f7:1b:8b:
9e:f6:f1:d9:fe:2d:db:fb:a1:14:e5:5c:91:d0:91:
63:25:d4:d8:80:46:ed:b0:1e:c9:d5:84:ff:7f:7e:
d7:9b:0b:c6:f6:4a:d5:48:04:9f:ae:55:5a:ec:86:
a1:77:60:1b:50:8b:47:9b:00:2a:41:5c:07:b8:06:
b8:42:70:95:2d:f8:4f:99:3d:33:a8:4e:a9:e8:7d:
51:cb:24:24:b2:ba:b1:fc:03:67:f0:89:d8:86:d5:
09:32:8a:5e:69:67:ae:0e:3d:20:d8:8d:df:c7:b5:
73:b6:38:c0:49:04:1f:45:af:fb:fb:7f:36:ca:38:
07:ee:4a:a9:56:26:74:0a:36:7b:ae:3a:52:38:87:
34:c4:38:0e:41:b1:52:dd:a0:d0:5d:4c:64:18:65:
7b:e5:4d:9d:01:e0:a8:df:96:55:e7:f9:7e:22:d3:
12:7b:d5:40:35:68:4b:e8:62:b1:6f:45:cd:c0:83:
5a:d7:51:21:41:a9:d3:72:af:c6:f9:22:b6:3f:71:
42:fb:f8:31:d0:38:d3:97:24:06:c9:e4:f0:46:33:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C9:52:92:38:D2:03:1E:48:BD:01:52:F6:B0:42:55:41:CD:78:F7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/I8lSkjjSAx5IvQFS9rBCVUHNePc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.207.0/24
31.57.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2a:3f:95:1e:79:77:cc:01:e2:c2:c4:4d:c2:9e:f9:99:b9:
ad:62:4c:1e:4b:ea:33:d7:88:40:a7:2f:7c:3e:9f:f1:93:b4:
27:d5:21:3f:38:46:3d:24:e0:25:f5:bd:7b:c0:51:b1:e0:6e:
1d:3f:b7:a5:98:4e:91:7a:81:af:a4:04:be:3f:61:d9:25:72:
69:7b:14:1e:db:96:8c:bb:5c:f2:28:78:ca:3c:a3:b5:84:cc:
3a:b3:f1:2d:a3:dd:47:e2:da:22:da:50:4d:a0:cf:59:b4:81:
b2:f7:cc:e4:4d:4e:ae:32:f2:7b:4f:ef:8b:3d:83:25:26:66:
04:cf:df:91:e8:92:68:d4:b6:40:23:85:79:41:70:6e:f0:cf:
e2:f3:e1:46:78:99:fa:52:ec:58:99:23:0c:f6:d2:60:f0:05:
ac:a0:ee:60:42:e4:e3:9c:df:d5:d7:72:10:df:81:1e:39:7a:
05:f6:93:e6:bf:35:0a:2a:44:ea:c8:d6:ea:0a:b1:83:e4:e8:
48:ef:63:ed:88:36:11:36:b2:67:70:a8:08:88:1a:b5:c2:66:
3c:82:86:37:c2:ce:17:14:bc:8f:0a:73:04:2b:2b:05:c4:c3:
4c:94:6d:b3:a8:91:09:26:1d:b7:ba:1b:a5:c8:c7:fe:18:6b:
08:46:35:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:12:10 2025 by rpki-client