Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K30Ev9Wi0HRWiysjY0IEjrVME-E.roa
File: K30Ev9Wi0HRWiysjY0IEjrVME-E.roa (raw, json)
Hash identifier: j+yqjdWLPB/CQAxVUNXw661qyRm+Np0doRbu7NoUPCg=
Subject key identifier: 2B:7D:04:BF:D5:A2:D0:74:56:8B:2B:23:63:42:04:8E:B5:4C:13:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198391AACF07785B123B2455AE41B743550
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K30Ev9Wi0HRWiysjY0IEjrVME-E.roa
Signing time: Wed 23 Jul 2025 21:05:06 +0000
ROA not before: Wed 23 Jul 2025 21:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212633
IP address blocks: 31.57.64.0/24 maxlen: 24
31.57.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:1a:ac:f0:77:85:b1:23:b2:45:5a:e4:1b:74:35:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 23 21:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b7d04bfd5a2d074568b2b236342048eb54c13e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:63:a9:e7:bb:68:bc:a5:93:3c:b3:d8:d1:
cf:10:0a:2e:ad:48:2c:56:d8:16:2e:d9:d6:5c:06:
2c:cf:19:94:f6:c6:1b:ad:41:ee:5a:24:d1:04:d3:
37:01:1b:26:b0:01:d4:f5:6a:75:bb:6a:43:d9:d1:
02:c4:4c:9a:7a:09:20:43:d3:65:0f:c3:ad:73:01:
42:f3:2b:b6:40:8d:0b:fb:c5:b4:e2:8b:57:85:d6:
7a:a5:42:4d:70:09:d7:29:fe:21:73:34:b1:aa:69:
f5:78:c3:ca:fb:83:75:1d:55:06:ff:5c:df:e3:f0:
8e:da:a7:67:52:72:3a:90:fc:ce:d6:8f:54:78:4c:
b5:5d:7d:f9:3d:c2:67:ce:ac:b3:ec:6e:8a:03:5f:
a7:af:26:23:ed:bd:17:a1:d2:06:e7:d6:7c:59:66:
f1:50:10:fc:13:80:93:c0:42:62:29:5b:8d:1f:1d:
f8:8a:f8:a5:d4:75:56:ae:c2:7f:8a:95:c1:81:86:
a5:1a:4b:70:48:2d:d0:cc:3b:b7:dd:9f:65:b6:ce:
7d:98:8b:7c:a4:d5:98:93:dc:89:e5:76:54:37:be:
54:83:30:94:85:3c:9b:bc:da:3a:ee:9e:4f:c7:48:
49:f0:e4:4e:69:75:13:8c:f8:62:08:83:4a:ad:a7:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:04:BF:D5:A2:D0:74:56:8B:2B:23:63:42:04:8E:B5:4C:13:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/K30Ev9Wi0HRWiysjY0IEjrVME-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.64.0/24
31.57.139.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b2:90:82:4d:94:d2:86:16:7f:5c:4c:22:48:6e:c5:e0:31:
06:cd:f9:01:11:2d:6b:9a:1e:41:5e:c2:9f:a3:24:a8:df:00:
23:9a:09:9e:d6:3e:ea:4d:dc:53:86:7f:72:5d:cd:72:bc:da:
d4:1f:c3:5c:92:6c:5f:84:f7:d1:7e:0c:20:52:2d:6b:3f:ff:
56:e1:eb:99:36:f3:27:e0:4f:ed:41:2c:ad:67:eb:ce:a9:5f:
3b:c4:ab:b1:fb:b1:8e:de:52:5c:07:19:ea:f7:4e:a4:1a:07:
d3:ae:1c:4d:79:e5:f8:03:77:52:50:4f:a5:c9:3c:17:75:eb:
ff:b8:5e:60:8c:48:f8:89:76:e0:94:77:be:79:72:09:38:d5:
88:60:c8:c9:7d:44:b3:c8:b3:62:7b:60:f6:ad:3f:c4:60:c4:
c5:ac:93:1c:7d:16:1a:df:1a:be:b9:4a:c5:f9:9b:bb:b6:5e:
ac:5b:fb:1a:f5:66:e0:87:c3:d2:ad:42:0e:ff:a3:e6:d1:55:
bb:7c:28:d5:5b:0b:7c:d8:18:95:39:bb:36:1f:f5:85:28:e1:
4f:04:e0:6e:95:49:bb:11:18:0b:bf:13:93:4b:0c:cd:b1:67:
84:8c:f5:96:70:d2:5d:44:d7:ca:a3:7e:bd:f5:7c:65:67:0b:
0f:b3:a5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:35:25 2025 by rpki-client