Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PrzJcz80g7p_2joZ4gLZ95l5moU.roa
File: PrzJcz80g7p_2joZ4gLZ95l5moU.roa (raw, json)
Hash identifier: QblMQCZrqB/VcVZbQoDQu+kLckRszGFg7NrwEazMuFw=
Subject key identifier: 3E:BC:C9:73:3F:34:83:BA:7F:DA:3A:19:E2:02:D9:F7:99:79:9A:85
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199B565F4166BAC4CB86FC9DB29127E9A2D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PrzJcz80g7p_2joZ4gLZ95l5moU.roa
Signing time: Sun 05 Oct 2025 17:23:01 +0000
ROA not before: Sun 05 Oct 2025 17:23:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215728
IP address blocks: 31.58.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 15:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:65:f4:16:6b:ac:4c:b8:6f:c9:db:29:12:7e:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 5 17:23:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ebcc9733f3483ba7fda3a19e202d9f799799a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:ce:15:3d:46:7e:8d:0d:84:50:e6:ed:1e:
99:48:f9:21:b3:16:86:a4:23:26:10:96:9b:4a:d2:
78:b8:28:04:98:2c:69:34:39:4c:cd:80:7e:bf:34:
9f:0c:94:75:e7:81:98:64:4a:89:1c:0a:07:8b:a5:
71:d7:63:2e:03:78:c4:c9:a2:0f:64:95:91:4c:f4:
22:00:16:07:b5:af:3c:9c:72:cc:2a:f3:49:89:11:
3a:9d:0b:52:b2:0f:a0:40:3e:f0:2a:d7:e7:64:2a:
a9:1d:18:90:77:ba:78:9f:74:d1:ea:41:4f:41:ad:
00:bd:f7:0b:70:6d:7b:00:57:a3:87:bf:41:bf:42:
26:4e:d3:9f:35:2c:ce:c4:b5:59:11:a5:ea:47:f6:
13:b3:07:62:7b:19:ae:25:c9:7e:3a:e8:2b:75:7d:
94:01:d8:98:6e:5b:71:f1:6b:d7:cb:1d:fb:04:c3:
e0:a9:51:6e:69:f1:ea:a3:e4:51:56:41:4a:87:99:
ec:75:df:f4:17:4b:f9:63:07:70:88:e7:ef:45:8a:
9b:da:eb:41:da:72:e7:d3:36:52:a4:7f:ca:e9:f3:
ce:c7:a6:ea:2d:f1:99:c0:f5:53:be:e5:df:70:1b:
dc:f5:24:fa:fd:e3:76:70:80:f9:14:b7:1e:43:3b:
1c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BC:C9:73:3F:34:83:BA:7F:DA:3A:19:E2:02:D9:F7:99:79:9A:85
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PrzJcz80g7p_2joZ4gLZ95l5moU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.212.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:95:1b:4e:e5:cf:43:3a:00:69:ec:ef:a1:2d:61:13:a3:27:
b8:50:b0:bd:c8:b2:d2:15:66:70:ae:b1:54:90:65:c9:45:75:
e0:df:92:7f:df:fb:f4:b6:39:59:2b:99:47:b2:af:83:e6:08:
91:3f:ed:23:47:55:4c:ef:3b:8d:d7:9b:f8:7a:15:b2:c1:f6:
d3:04:93:9c:8d:fb:87:72:f7:a8:f0:6c:e7:ea:0c:f9:c8:42:
10:a8:0a:ec:cd:62:9e:1c:5c:fc:04:25:51:6c:88:57:6d:db:
f4:a4:ce:12:89:6c:36:21:58:cf:cc:98:0b:ac:8a:76:a3:ca:
6b:05:b4:06:83:9c:34:81:50:e7:97:32:ca:08:36:d4:76:42:
c0:9f:57:63:cd:f6:27:8c:a3:3d:23:5c:a7:63:23:21:de:d2:
c0:ca:49:b4:52:44:3c:b4:28:7f:ea:7b:df:1d:f0:f0:a7:4c:
07:04:ec:f6:19:10:a8:c2:b3:22:a4:d8:a2:f6:23:8b:14:07:
ed:d4:22:b0:3c:30:9e:b5:a0:09:0b:7f:9e:05:7f:b3:b4:e9:
0a:75:bf:be:cb:1f:82:6c:e2:74:bc:77:da:b2:0a:7f:6e:0a:
0f:e5:5a:08:34:b7:63:32:8c:68:05:29:e5:c4:4c:6e:77:3e:
b5:f2:15:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:26:12 2025 by rpki-client