Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fetXbfzn_yBTDW9RPzPXG7GGmlU.roa
File: fetXbfzn_yBTDW9RPzPXG7GGmlU.roa (raw, json)
Hash identifier: O6X/ZaIv0zhxB/eNjGJjrg03jnrpB9ughJXusFDpxS8=
Subject key identifier: 7D:EB:57:6D:FC:E7:FF:20:53:0D:6F:51:3F:33:D7:1B:B1:86:9A:55
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01980D69B93D8804AB913F86E4A2A0680489
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fetXbfzn_yBTDW9RPzPXG7GGmlU.roa
Signing time: Tue 15 Jul 2025 09:28:09 +0000
ROA not before: Tue 15 Jul 2025 09:28:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209000
IP address blocks: 31.57.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:69:b9:3d:88:04:ab:91:3f:86:e4:a2:a0:68:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 15 09:28:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7deb576dfce7ff20530d6f513f33d71bb1869a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:1a:6b:07:a2:3c:37:90:ef:a4:01:da:97:
e8:99:ae:b7:a4:62:c2:8b:63:2f:5a:e7:f1:ba:9a:
bf:62:81:b8:cc:02:99:0e:97:da:14:f4:58:50:e0:
e2:eb:73:b8:55:f5:ad:d2:9b:73:a1:15:4d:98:e4:
51:17:e4:d8:a2:29:b3:7b:e8:b3:49:a7:a5:31:89:
4d:04:2f:be:4b:62:7a:66:6d:05:ef:b0:a7:04:7c:
84:81:b8:fd:23:a5:9b:b5:82:4c:e1:c1:5f:79:22:
5f:bd:5f:81:ee:11:0d:e7:10:8b:0d:f8:f3:d2:9a:
a6:04:3d:98:fe:c9:8f:d8:9d:5d:54:5b:97:1f:56:
b8:b1:36:89:53:8d:3a:7f:97:d1:35:81:d8:6c:b6:
ee:bf:99:4c:0a:2c:ff:0f:aa:9d:a4:c0:84:55:68:
e0:dc:e9:0e:b8:3e:00:6f:34:f4:50:a1:e0:69:73:
f6:b7:86:4e:a3:b9:37:85:ed:42:45:0a:eb:9e:25:
a9:42:00:60:1a:ca:c0:40:27:d1:77:8b:8d:f6:c2:
a9:d6:ee:f5:3c:ac:d5:30:4f:21:6c:97:81:8b:d2:
2f:b7:24:9b:41:7d:8d:3b:1b:00:76:3d:27:87:60:
ad:1c:ff:ad:cd:c1:61:3a:a0:1b:a6:3c:c2:d0:fd:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EB:57:6D:FC:E7:FF:20:53:0D:6F:51:3F:33:D7:1B:B1:86:9A:55
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fetXbfzn_yBTDW9RPzPXG7GGmlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:cf:fc:7d:1d:a4:2a:21:09:82:0c:10:d4:c7:f7:55:ab:5d:
c8:cd:f6:f0:9b:0a:3b:2a:3b:c5:a0:33:30:64:ea:1b:50:0b:
ac:f3:f0:41:a3:86:fa:ff:cd:50:46:1a:eb:67:46:a2:c6:31:
4b:6c:23:54:12:2d:99:c1:45:ad:dd:d5:b5:88:dc:2b:d6:61:
94:4a:09:15:66:d2:e3:fa:1c:19:79:ea:cb:71:17:9c:5c:66:
9b:45:b2:8a:3d:5f:6b:a5:10:27:2d:b4:81:2c:1f:55:21:ec:
20:35:c9:86:35:9d:91:33:7b:1e:7f:ac:ba:2e:0a:b6:8f:4d:
09:2a:9d:de:85:07:82:8a:a7:67:8c:92:95:46:0f:ee:19:de:
1f:e9:bf:96:13:79:b7:4e:6e:86:97:69:fb:f8:af:93:44:61:
d9:a4:f5:ea:f2:81:c5:aa:26:89:e7:5d:c3:4f:98:51:80:14:
a9:75:06:23:69:f3:ea:1e:ed:1d:f4:3b:05:13:d3:be:cd:5b:
1a:86:50:5c:c1:50:19:63:b1:8e:e0:cd:57:79:1f:bc:0e:fc:
71:e7:a4:b7:8e:bb:f8:e3:d1:b9:3c:c7:f2:26:97:2a:ca:15:
66:a1:40:8a:6e:65:c2:83:22:fe:7a:d7:be:bb:e9:5b:45:e2:
66:9b:77:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:50 2025 by rpki-client