Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kuFC9gXvzzZZ7CmXXqH4FZXWAnI.roa
File: kuFC9gXvzzZZ7CmXXqH4FZXWAnI.roa (raw, json)
Hash identifier: hRz5O/syViUlOv2FHnFNQNM8WDhsh2Zorj72W4Py6hk=
Subject key identifier: 92:E1:42:F6:05:EF:CF:36:59:EC:29:97:5E:A1:F8:15:95:D6:02:72
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197FEC58D8385A8C40803576C96FF2D6893
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kuFC9gXvzzZZ7CmXXqH4FZXWAnI.roa
Signing time: Sat 12 Jul 2025 13:14:09 +0000
ROA not before: Sat 12 Jul 2025 13:14:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 31.57.98.0/24 maxlen: 24
31.58.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 12:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:c5:8d:83:85:a8:c4:08:03:57:6c:96:ff:2d:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 12 13:14:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92e142f605efcf3659ec29975ea1f81595d60272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:ba:12:06:8b:05:70:05:0c:5f:d5:f8:8c:
68:6b:45:3f:97:be:f2:ec:ae:db:83:0a:db:2d:67:
1e:38:df:03:4f:68:99:2a:5b:2e:e4:aa:3e:c3:ae:
83:d1:ec:a6:e4:10:7b:81:7d:a7:01:0c:8e:24:7f:
1e:90:52:38:e5:d2:82:46:2f:80:37:10:17:54:5e:
4e:70:a4:b7:38:5c:16:38:c7:68:67:46:d9:63:cb:
59:0c:39:67:f4:01:47:31:85:72:e1:7b:e5:d4:d2:
8b:71:b1:be:1c:9b:33:a7:31:f0:f1:e5:33:6c:10:
16:88:c7:2e:de:de:92:9f:08:bd:ae:62:dd:13:18:
00:70:95:23:48:66:c4:b9:5b:f3:d9:f9:36:31:65:
6b:d6:65:f2:6b:30:33:68:d2:cf:82:37:df:df:5e:
e2:69:18:2b:5e:a2:05:23:f4:2f:a0:be:76:0a:90:
14:fc:dd:66:3d:4d:e3:20:2c:f3:37:3c:9f:46:5e:
ef:1f:18:5c:ac:d9:21:0a:64:80:3e:24:1b:74:f8:
2a:8d:65:51:8a:14:c2:cd:59:44:06:34:54:c0:a4:
a4:d4:f4:67:58:b1:fc:2c:93:f3:7f:10:07:d0:d0:
61:5c:65:fd:ca:aa:e0:c5:78:f2:f3:05:4c:c9:b1:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E1:42:F6:05:EF:CF:36:59:EC:29:97:5E:A1:F8:15:95:D6:02:72
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kuFC9gXvzzZZ7CmXXqH4FZXWAnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.98.0/24
31.58.65.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:63:a6:aa:c5:a1:d8:a0:ab:bb:cf:d6:d2:a3:b0:79:fa:7c:
4b:ec:aa:c1:87:d1:76:95:dc:28:c7:c1:38:49:4f:39:40:97:
c2:7d:18:b7:14:3c:02:a3:1f:9d:b4:b8:02:36:4e:49:55:e3:
e9:28:65:4b:5f:72:54:6e:9b:ae:a0:b8:00:bb:61:95:47:60:
03:73:4a:9d:8c:d9:23:0d:c3:3e:6e:5a:fa:8f:16:f9:ed:82:
72:ad:51:2d:16:7f:b4:f6:05:21:5d:52:0d:5c:26:a4:de:f6:
4c:9e:9b:bd:42:4d:25:a1:17:f7:81:c9:99:c5:2f:43:a2:17:
f2:d0:b7:a7:c6:5b:ba:8f:0e:6e:33:bc:4b:c0:a1:92:09:4b:
43:23:a1:11:4d:cc:39:59:40:13:5b:29:a8:e5:50:d9:c0:e5:
58:43:7a:3c:7c:22:9a:17:20:dd:2c:b2:c0:1a:3b:f5:93:10:
3a:31:bc:56:58:8d:c8:d9:d3:0e:f0:27:5c:66:0e:ca:1a:01:
68:6c:28:43:84:72:78:b3:12:41:be:82:d9:2d:37:c6:2e:02:
a8:91:02:b8:84:89:50:74:4a:53:e4:a5:da:51:9b:9e:b1:99:
05:21:bd:ff:e8:98:8b:db:5c:5e:1a:98:e4:63:d6:d9:0e:38:
7a:53:67:e8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZf+xY2DhajECANXbJb/LWiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzEyMTMxNDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmUxNDJmNjA1ZWZjZjM2NTllYzI5OTc1ZWExZjgxNTk1ZDYwMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofq6EgaLBXAFDF/V+Ixoa0U/l77y
7K7bgwrbLWceON8DT2iZKlsu5Ko+w66D0eym5BB7gX2nAQyOJH8ekFI45dKCRi+A
NxAXVF5OcKS3OFwWOMdoZ0bZY8tZDDln9AFHMYVy4Xvl1NKLcbG+HJszpzHw8eUz
bBAWiMcu3t6Snwi9rmLdExgAcJUjSGbEuVvz2fk2MWVr1mXyazAzaNLPgjff317i
aRgrXqIFI/QvoL52CpAU/N1mPU3jICzzNzyfRl7vHxhcrNkhCmSAPiQbdPgqjWVR
ihTCzVlEBjRUwKSk1PRnWLH8LJPzfxAH0NBhXGX9yqrgxXjy8wVMybGNAQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJLhQvYF7882Wewpl16h+BWV1gJyMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEva3VGQzlnWHZ6elpaN0NtWFhxSDRGWlhXQW5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzliAwQA
HzpBMA0GCSqGSIb3DQEBCwUAA4IBAQCdY6aqxaHYoKu7z9bSo7B5+nxL7KrBh9F2
ldwox8E4SU85QJfCfRi3FDwCox+dtLgCNk5JVePpKGVLX3JUbpuuoLgAu2GVR2AD
c0qdjNkjDcM+blr6jxb57YJyrVEtFn+09gUhXVINXCak3vZMnpu9Qk0loRf3gcmZ
xS9Dohfy0Lenxlu6jw5uM7xLwKGSCUtDI6ERTcw5WUATWymo5VDZwOVYQ3o8fCKa
FyDdLLLAGjv1kxA6MbxWWI3I2dMO8CdcZg7KGgFobChDhHJ4sxJBvoLZLTfGLgKo
kQK4hIlQdEpT5KXaUZuesZkFIb3/6JiL21xeGpjkY9bZDjh6U2fo
-----END CERTIFICATE-----
Generated at Thu Jul 24 17:16:04 2025 by rpki-client