Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ac4OxkIfUw60u9n2fLv1C8dPazM.roa
File: ac4OxkIfUw60u9n2fLv1C8dPazM.roa (raw, json)
Hash identifier: TAskvY4nZ4XB7+TeN1U/vdrYQ9MMOUSE2uYQqtPHsuA=
Subject key identifier: 69:CE:0E:C6:42:1F:53:0E:B4:BB:D9:F6:7C:BB:F5:0B:C7:4F:6B:33
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197E941BD629974857204C5B0B6087BFA90
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ac4OxkIfUw60u9n2fLv1C8dPazM.roa
Signing time: Tue 08 Jul 2025 08:58:09 +0000
ROA not before: Tue 08 Jul 2025 08:58:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61003
IP address blocks: 31.56.117.0/24 maxlen: 24
31.56.221.0/24 maxlen: 24
31.56.230.0/24 maxlen: 24
31.57.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:41:bd:62:99:74:85:72:04:c5:b0:b6:08:7b:fa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 8 08:58:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ce0ec6421f530eb4bbd9f67cbbf50bc74f6b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:26:b7:d7:39:2b:6a:19:21:b0:c6:c8:b6:
e6:f7:4e:a8:5a:9d:fb:78:49:b0:75:01:14:1f:af:
c5:c4:54:53:c4:66:2c:e0:24:6a:83:9c:31:27:68:
2d:e7:1a:0d:3d:7b:87:d3:40:12:14:17:dd:a0:b5:
a5:5f:c5:37:f6:7c:6c:72:13:60:35:fa:de:80:bb:
c4:40:b7:22:07:5c:2a:c0:a3:87:90:c9:d7:25:cf:
77:74:3a:34:77:09:b5:e7:31:6f:1c:4b:03:93:88:
49:21:5f:66:30:15:4a:46:e9:da:72:ef:62:fb:b2:
9e:35:96:1f:17:36:5f:3d:c3:fb:33:38:ec:6e:19:
a2:db:c1:0b:08:c0:10:b2:a6:ec:5e:15:ed:20:6e:
7f:62:0e:07:18:80:ac:fa:99:91:de:1d:04:e2:d5:
71:72:f4:14:20:4b:a4:ba:62:c5:7f:86:af:a0:bf:
07:b4:dd:ad:81:cc:87:06:2a:56:8c:d1:42:a5:24:
28:85:7b:f9:d8:61:15:d3:a2:04:21:f9:b0:70:e0:
63:3a:ef:ba:30:36:2c:7a:88:4e:17:ed:5b:ca:1a:
80:97:00:df:48:64:1c:c8:63:32:db:04:32:83:be:
ad:70:82:ed:cc:48:36:44:71:4c:69:8c:f5:1a:09:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CE:0E:C6:42:1F:53:0E:B4:BB:D9:F6:7C:BB:F5:0B:C7:4F:6B:33
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ac4OxkIfUw60u9n2fLv1C8dPazM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.117.0/24
31.56.221.0/24
31.56.230.0/24
31.57.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2b:ca:cf:d9:42:75:12:78:5c:57:26:20:1e:a7:74:72:b2:
8d:18:a1:54:3e:6a:30:f7:e9:eb:05:bb:57:08:1b:a5:63:87:
80:b3:35:a9:28:b4:f9:75:62:79:2d:0e:9e:de:49:2a:9f:fe:
43:bc:f0:e1:63:09:5e:d5:60:a8:d2:91:24:b2:9d:ff:27:58:
00:79:d9:34:04:24:8a:da:a2:02:08:e0:35:37:0e:05:e1:fb:
a7:0d:8f:b7:83:78:e7:f8:a2:10:af:e2:0c:03:2a:5e:55:4a:
2a:5b:cc:3a:d2:6b:1e:5e:e6:9e:c4:38:d4:a1:fc:f1:de:d1:
cd:dd:0d:8c:10:11:49:85:b6:a0:94:58:72:8a:de:42:14:77:
54:3e:9b:d2:d6:61:d0:aa:a5:3d:78:93:cf:92:8c:13:b5:b0:
3c:af:eb:be:2a:84:f3:92:98:28:c1:06:bb:a0:72:a7:39:28:
04:7d:21:f6:9b:7d:29:58:d7:02:7b:23:71:ab:6e:87:9a:eb:
ec:59:8b:ef:47:39:02:90:bd:7c:1c:f4:e4:c9:45:7f:f1:99:
40:15:07:8f:8f:ee:f8:bf:34:8b:d7:64:0e:71:e0:7c:f5:b5:
9d:bb:63:d8:73:1b:c3:35:49:6f:db:9e:f3:ec:5a:b5:19:4b:
8d:de:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:29:02 2025 by rpki-client