Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PrNfyCP3FhNfpUwYjZjntF1WiNc.roa
File: PrNfyCP3FhNfpUwYjZjntF1WiNc.roa (raw, json)
Hash identifier: 4/CTy8xbYESkxQX7CRJixJxf9bg9VYv2kPaXYm13y5I=
Subject key identifier: 3E:B3:5F:C8:23:F7:16:13:5F:A5:4C:18:8D:98:E7:B4:5D:56:88:D7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198324CBB6EF7BB8622E6A58D405DA2EE5E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PrNfyCP3FhNfpUwYjZjntF1WiNc.roa
Signing time: Tue 22 Jul 2025 13:22:26 +0000
ROA not before: Tue 22 Jul 2025 13:22:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56962
IP address blocks: 31.57.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:4c:bb:6e:f7:bb:86:22:e6:a5:8d:40:5d:a2:ee:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 22 13:22:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb35fc823f716135fa54c188d98e7b45d5688d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:93:93:bf:22:f4:d6:17:1f:e8:ed:e7:e6:
1d:e3:3f:27:b6:27:f3:4a:16:b1:8e:29:1d:2b:78:
85:4b:11:74:ad:21:9d:0a:bc:6d:64:32:fe:70:0f:
ee:00:d0:e6:b2:a7:ac:5f:81:ec:ca:61:f9:f7:be:
1b:9e:29:2d:53:52:91:1d:c6:36:3e:5d:0e:e1:09:
53:ef:53:6d:53:60:83:c6:9f:cb:85:ec:60:34:ca:
9e:84:6d:65:d9:e7:5f:22:fe:72:10:64:2d:d9:e1:
97:89:1b:28:31:d1:12:d2:f3:b0:3c:5b:ad:72:6a:
fb:3e:9c:1f:17:84:35:f1:35:02:08:d5:09:a5:f4:
74:20:56:35:cf:21:b1:eb:70:3a:1b:f1:04:dd:37:
b8:30:2c:cf:93:6f:9a:01:94:9d:b7:67:76:5f:f0:
f9:ed:6d:6b:a0:2c:fb:59:94:d0:e9:45:34:60:c9:
eb:f8:36:51:ce:29:e8:84:f4:29:a0:f4:93:de:3f:
f3:54:c9:14:27:1c:c2:ec:8d:e9:3b:b4:c9:29:d3:
b3:d3:cd:4a:87:66:11:1b:c5:d5:cc:c3:7e:3a:b8:
55:ca:9b:4a:6a:52:20:46:7c:64:9c:83:0a:64:da:
ba:f3:aa:1a:8a:af:65:c8:e7:e9:ea:ba:6e:c9:49:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:5F:C8:23:F7:16:13:5F:A5:4C:18:8D:98:E7:B4:5D:56:88:D7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PrNfyCP3FhNfpUwYjZjntF1WiNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.231.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a0:15:92:46:01:70:ce:4d:63:a9:b5:81:a5:73:0d:b2:22:
55:8f:dc:95:c7:eb:de:14:0b:37:5c:30:35:38:4f:99:e5:51:
c3:71:fa:7f:bc:f9:51:37:a5:5a:1e:e9:e1:7b:6a:0f:3f:33:
a7:6a:c3:5c:f2:51:f3:1e:a8:d3:bf:05:3a:4a:2b:9c:ad:6d:
00:dd:b4:21:ad:4d:b5:f3:52:6c:2f:c7:ba:e2:92:b0:88:41:
90:eb:2c:1d:aa:ce:8e:a2:e3:8d:93:a6:1e:15:02:cb:cb:e9:
9e:07:df:40:23:76:3f:cd:a3:6f:89:47:57:ce:4f:dd:e1:25:
a3:20:c2:a5:98:d2:6f:3c:85:c1:0d:54:55:02:8d:80:51:07:
0e:e8:4d:59:40:6a:57:d5:38:93:07:3f:3b:d3:93:af:d5:11:
7b:d2:31:c1:48:0e:e4:0a:6a:50:cd:25:19:26:ae:78:f5:c4:
44:2e:61:39:03:18:3c:f5:e0:79:bc:96:a2:47:17:55:7f:07:
01:32:68:e6:b4:69:2a:4b:d3:f7:a3:2e:39:be:21:51:0b:b6:
13:04:0f:3b:6f:95:16:14:50:3b:40:9c:13:b8:38:8e:6e:be:
2a:bd:a7:f7:61:3f:ac:5a:65:3e:1c:c1:36:76:fd:4c:5a:af:
cf:0b:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:28 2025 by rpki-client