Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UdCywjvHcZeGtXsX6NIidS2RxkY.roa
File: UdCywjvHcZeGtXsX6NIidS2RxkY.roa (raw, json)
Hash identifier: 95nSY9On1DjjKZvFMAOZUyFshJ28Twi/DOB8NYgPukk=
Subject key identifier: 51:D0:B2:C2:3B:C7:71:97:86:B5:7B:17:E8:D2:22:75:2D:91:C6:46
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197D970E08D72C6DAFB4F872E173D5EAAED
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UdCywjvHcZeGtXsX6NIidS2RxkY.roa
Signing time: Sat 05 Jul 2025 07:15:42 +0000
ROA not before: Sat 05 Jul 2025 07:15:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 31.56.192.0/22 maxlen: 22
31.56.216.0/22 maxlen: 22
31.58.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:70:e0:8d:72:c6:da:fb:4f:87:2e:17:3d:5e:aa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 5 07:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51d0b2c23bc7719786b57b17e8d222752d91c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:7f:0d:37:77:52:ad:4d:b8:59:96:c1:b7:
94:9b:e5:62:45:02:f7:b9:10:3a:ff:91:ba:8b:40:
c7:c6:3c:17:42:fe:03:db:0b:58:2f:03:e1:e0:ae:
84:76:a9:b8:2a:48:89:eb:5b:a9:d1:96:cb:a0:d3:
b4:33:d7:05:fa:ad:56:f6:45:da:9f:7b:03:9a:59:
21:42:8f:29:f6:47:71:15:6d:f8:53:4e:05:a5:f6:
63:72:00:7e:ef:0b:be:f0:ad:83:93:f0:8a:6d:75:
73:cf:6c:aa:3e:18:88:a5:f2:2a:ba:a0:9b:c5:81:
2d:0e:78:0b:8d:00:08:11:99:65:f5:b9:42:3a:e2:
34:14:a5:0a:96:a5:24:ee:75:98:45:ac:63:14:7d:
c0:26:03:05:50:8a:6c:3f:f4:a9:0e:48:77:90:25:
b1:60:5a:e7:8d:2b:c4:bf:e0:ca:aa:b2:a2:ed:c3:
d1:9d:47:02:78:b7:52:32:8e:2e:e4:3b:fe:5a:cc:
9c:86:ea:b6:2b:8a:1c:f8:71:da:54:3c:cf:5e:ee:
b6:fe:70:89:a9:e1:d0:e5:52:aa:21:d6:92:3f:23:
d1:78:16:57:f8:a2:7b:f7:d9:a1:34:12:c5:40:40:
d6:e4:49:2a:a6:72:16:d4:b9:ea:8c:29:dd:94:5c:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D0:B2:C2:3B:C7:71:97:86:B5:7B:17:E8:D2:22:75:2D:91:C6:46
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UdCywjvHcZeGtXsX6NIidS2RxkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.192.0/22
31.56.216.0/22
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:7b:98:60:84:9e:42:9b:be:05:bf:e7:bf:ed:92:42:7e:2d:
b4:8c:86:e9:3f:2f:15:52:db:c0:a8:ac:a8:e9:e1:30:d5:35:
b9:aa:e6:4d:27:a6:b1:c8:7c:50:08:70:ac:a6:15:af:8d:4f:
aa:b5:44:cf:cc:1e:78:9a:cf:9e:22:23:94:08:0b:83:be:9c:
41:33:72:dd:11:03:7b:0f:3f:ef:b5:39:6c:e0:57:bc:72:8e:
c4:38:0a:dd:6a:2e:09:bd:df:9b:92:a2:2d:82:91:c7:d1:6e:
e0:05:3b:d3:f2:ba:64:3e:5d:68:52:c0:57:a0:f1:c8:45:9c:
49:71:f3:de:bb:f9:7d:dd:ea:16:8f:f4:b2:00:d0:93:26:c3:
f0:43:f6:13:6d:79:20:00:45:be:82:f7:1f:c8:9a:d1:81:19:
db:68:98:f3:9d:d0:93:ae:2d:41:93:16:6c:ed:92:44:8f:14:
79:26:4b:04:d8:37:02:8c:c6:9a:92:2a:e1:c9:0f:db:be:62:
14:7e:a2:b3:22:c4:9f:f4:50:1e:42:ea:2b:3c:8d:ce:ae:05:
63:fb:58:3d:9a:15:d7:1c:c8:97:d6:e4:a9:f3:a4:dd:86:5e:
b4:ae:9f:40:a5:23:12:a3:e3:bd:c0:8d:dc:e2:5e:82:65:85:
4f:d3:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:42:50 2025 by rpki-client