Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ciX-sa9kSvAxo5Vp5bB3iUHQlOQ.roa
File: ciX-sa9kSvAxo5Vp5bB3iUHQlOQ.roa (raw, json)
Hash identifier: Tz1dutUdInLqDMhM/H2/AVmZ7s4MbXOll/plHQ5kTOc=
Subject key identifier: 72:25:FE:B1:AF:64:4A:F0:31:A3:95:69:E5:B0:77:89:41:D0:94:E4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198099C8408641E8175C0CF8F360B869CAC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ciX-sa9kSvAxo5Vp5bB3iUHQlOQ.roa
Signing time: Mon 14 Jul 2025 15:45:09 +0000
ROA not before: Mon 14 Jul 2025 15:45:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214208
IP address blocks: 31.56.225.0/24 maxlen: 24
31.57.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:9c:84:08:64:1e:81:75:c0:cf:8f:36:0b:86:9c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 14 15:45:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7225feb1af644af031a39569e5b0778941d094e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:ec:a2:97:44:4b:35:a6:00:02:6a:50:b2:
22:5d:76:f1:a6:84:93:db:ff:02:32:14:4c:db:10:
dc:b1:17:78:f1:09:4f:5a:fc:39:d4:00:d7:a7:9f:
a7:23:a4:ad:7f:97:12:8e:8d:2c:d9:6b:88:13:76:
03:b7:39:d5:e2:43:9d:cf:46:8b:2c:c1:f2:34:9a:
52:f3:f4:db:7b:52:38:81:7e:d3:21:94:9b:96:eb:
36:b9:80:d1:25:8b:10:73:53:15:36:e5:86:9b:3e:
55:5a:7b:dd:22:b0:75:e2:08:c7:38:4d:bf:ae:d3:
ef:ba:27:80:23:72:33:e7:57:d7:9c:ed:9b:7d:88:
b5:3b:2e:40:50:38:24:4a:15:ea:f5:d6:96:d3:d5:
90:93:01:ae:82:30:d8:4c:f2:b0:9e:c9:27:22:8a:
ff:09:8f:7d:ca:84:8b:6a:82:1c:91:25:5e:ba:9f:
97:e8:a1:16:ec:b3:15:16:5b:9c:ab:40:a0:d0:f8:
3d:f7:05:41:f0:3b:13:5a:21:b3:87:ce:66:bb:19:
47:fb:97:54:69:6d:22:45:3e:8c:6f:0e:d5:8f:90:
cb:17:b5:3b:df:30:43:92:29:b0:83:f0:f4:10:88:
59:e7:7c:86:e4:a3:a6:10:59:fe:b4:d8:bb:a1:6a:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:FE:B1:AF:64:4A:F0:31:A3:95:69:E5:B0:77:89:41:D0:94:E4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ciX-sa9kSvAxo5Vp5bB3iUHQlOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.225.0/24
31.57.127.0/24
Signature Algorithm: sha256WithRSAEncryption
11:75:0c:49:4d:cd:92:90:7f:bd:d0:ba:d9:c5:29:ba:18:c1:
cb:b3:9e:40:f7:31:a2:ac:3d:d3:44:2c:37:4a:e8:11:11:a2:
3a:44:50:82:6b:a2:19:fe:a2:30:30:79:62:3e:5c:a3:b8:f1:
c3:56:73:68:9c:25:3b:e8:20:bd:a4:49:2e:5d:e2:4e:66:44:
8b:ec:e0:7a:22:af:94:b9:a6:eb:fa:45:12:36:db:08:e0:c0:
b5:23:4d:8e:ef:fb:6d:34:30:11:92:f5:42:f4:18:61:d4:89:
5d:1b:c7:20:c6:1a:02:31:1c:ca:b8:7d:be:44:a3:12:10:30:
c5:d7:8e:db:4a:31:39:a9:89:ee:63:46:15:f4:04:7e:0c:e6:
00:31:54:3a:e1:89:2c:13:fb:ba:5e:9d:e8:1a:a4:a8:15:f7:
0f:73:c4:94:00:1d:2d:35:48:62:db:3a:3e:69:51:a6:5e:9f:
b8:0b:a3:08:b9:9b:3f:70:23:cf:63:cd:0f:c7:08:07:e5:e8:
ce:c8:ef:4b:29:10:5a:ed:a0:ed:30:99:2f:95:fe:7a:76:25:
56:ca:d4:85:96:e2:d9:fa:d1:4e:9a:38:e4:38:0e:ce:66:10:
c7:9f:f0:e2:96:43:a8:9c:ba:ea:04:7b:d4:dd:05:d6:17:52:
5e:47:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:02:53 2025 by rpki-client