Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jS4nfSUeyaNIUhQwQY_mSbV7bAI.roa
File: jS4nfSUeyaNIUhQwQY_mSbV7bAI.roa (raw, json)
Hash identifier: 3Jnla+11H6vyX74ijI4rmP2ir/3uP3sYQc1zvNHNEgI=
Subject key identifier: 8D:2E:27:7D:25:1E:C9:A3:48:52:14:30:41:8F:E6:49:B5:7B:6C:02
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01981C7C03640D303F32B3FB245F8B73FBDD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jS4nfSUeyaNIUhQwQY_mSbV7bAI.roa
Signing time: Fri 18 Jul 2025 07:42:26 +0000
ROA not before: Fri 18 Jul 2025 07:42:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 31.59.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1c:7c:03:64:0d:30:3f:32:b3:fb:24:5f:8b:73:fb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 18 07:42:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d2e277d251ec9a348521430418fe649b57b6c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:37:ce:f7:22:a1:38:60:22:1c:28:6c:c9:
0b:bc:db:b4:ce:a5:35:5b:02:a2:86:df:2f:1e:8f:
88:7e:ff:70:6c:97:1e:a4:06:ac:ef:a3:a6:fc:e1:
50:20:00:4c:94:5b:8e:d1:b6:06:5d:35:c1:2f:1a:
50:6b:11:ed:dc:d7:60:70:8d:05:a6:8a:92:fe:95:
c3:81:ef:93:8b:c6:de:65:b6:06:21:6e:85:93:f4:
ec:aa:a3:39:c2:98:ad:a0:52:2c:4c:92:ce:73:fc:
99:93:af:3d:a1:47:35:a0:dc:cc:bd:45:73:39:a0:
8d:e5:1d:76:12:fa:52:da:09:f3:f0:5b:8a:af:ba:
6e:11:73:4e:65:bd:58:11:40:0f:7a:cf:b0:e8:d5:
71:e3:b7:13:e2:0f:19:33:69:23:3c:fd:d9:d6:c0:
43:55:2b:e7:69:2c:0c:53:55:6d:10:52:a8:3d:5d:
e1:85:ed:b2:5f:3e:94:25:42:46:d0:57:7e:88:ad:
95:77:d3:c1:e1:3b:25:4b:69:af:21:5e:6f:74:e7:
fb:ee:7b:30:ef:66:2f:03:57:8c:14:b9:9d:46:fe:
b5:5a:76:0d:ef:b6:02:b9:11:bc:f4:9e:30:e1:31:
4e:1b:cd:81:95:62:db:e0:9f:4e:c9:e1:bb:d9:40:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2E:27:7D:25:1E:C9:A3:48:52:14:30:41:8F:E6:49:B5:7B:6C:02
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/jS4nfSUeyaNIUhQwQY_mSbV7bAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.59.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c1:9f:a1:7d:0e:d4:6b:4d:9a:95:db:1d:8b:a5:ab:aa:67:
8a:2a:02:de:53:e1:35:42:d4:2d:c2:0b:fe:f8:07:11:0c:49:
59:09:19:9a:61:ad:e0:16:1d:1a:7b:1d:6d:27:46:18:85:f9:
21:df:3b:3b:35:c2:7b:3b:c8:77:17:4a:b0:9f:6e:f1:8a:b4:
e1:80:65:91:d2:e6:4d:b9:40:7a:59:01:55:8a:81:c5:5b:38:
c4:1d:65:4b:62:cd:92:c9:d4:81:0e:d5:48:cc:61:9e:5c:0a:
ca:15:0e:b3:b0:e0:b7:a3:ca:ba:34:b8:7a:26:b2:e0:8d:89:
03:70:41:ea:44:06:cb:d0:c5:21:7f:2d:7f:3d:5f:e6:bb:ab:
0b:4c:1c:26:83:4a:e0:bf:1f:20:9a:77:00:93:b9:c8:84:c7:
4a:42:a2:a6:5d:29:fd:04:56:ee:9b:08:40:0d:d2:b3:e1:f2:
06:7d:12:cd:41:cf:7b:b7:d8:b5:8e:c9:d0:df:c2:09:f6:7b:
8f:12:d0:48:d5:ae:22:85:ac:d9:3b:78:b8:84:59:bd:ce:04:
1d:ff:14:14:ca:74:3d:ce:db:3f:78:bb:55:e8:bb:9e:0b:29:
5d:5a:1a:b1:99:9a:25:19:c9:08:07:58:53:a6:f3:87:d9:04:
30:db:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:40:50 2025 by rpki-client