Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nMBFFWLYmz2_vQbVta5Y2bOKtPQ.roa
File: nMBFFWLYmz2_vQbVta5Y2bOKtPQ.roa (raw, json)
Hash identifier: oqkvLwKuvbI3b2HrldlZ8Ta5h9O6nqOWI6+TJb3RucM=
Subject key identifier: 9C:C0:45:15:62:D8:9B:3D:BF:BD:06:D5:B5:AE:58:D9:B3:8A:B4:F4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F497F695596959057E34883F25FA2FF0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nMBFFWLYmz2_vQbVta5Y2bOKtPQ.roa
Signing time: Thu 10 Jul 2025 13:48:09 +0000
ROA not before: Thu 10 Jul 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399486
IP address blocks: 31.57.38.0/24 maxlen: 24
31.57.147.0/24 maxlen: 24
31.57.188.0/24 maxlen: 24
31.57.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f4:97:f6:95:59:69:59:05:7e:34:88:3f:25:fa:2f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 10 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc0451562d89b3dbfbd06d5b5ae58d9b38ab4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:77:85:31:2d:6a:42:03:73:39:c8:dd:53:
e3:f8:a1:c6:08:ff:b2:96:81:f7:02:d7:07:80:61:
e6:b9:9a:91:4c:5d:7c:07:31:3f:a3:4d:cb:0b:b3:
7d:aa:93:4c:23:50:70:c9:ec:b9:2e:7a:3a:63:4d:
e0:d1:b1:7b:df:97:3d:5c:36:2f:69:0e:09:d6:07:
b6:4d:b8:88:70:ea:b6:4d:0a:c3:df:8e:7a:5e:cd:
3c:df:24:df:c7:82:f5:96:f0:59:54:28:fb:4f:9d:
da:96:e9:6c:b7:1f:39:69:97:ca:8a:23:45:46:57:
28:92:a9:40:09:35:30:3a:f7:f4:ba:0c:99:ee:c6:
c7:1e:14:e4:54:57:39:8a:6c:d2:21:ca:d2:1e:9c:
67:d9:16:17:56:2b:c3:b3:3f:d8:bc:6d:46:c6:05:
36:25:94:3d:e8:24:9d:24:64:cc:a1:aa:2a:ca:39:
be:74:ed:fd:ae:91:e2:68:ee:1f:71:4f:ba:f0:2b:
e3:7e:ec:92:10:da:af:5e:10:44:65:ad:23:1b:6b:
87:78:4c:fb:47:75:06:53:2a:c6:63:72:ed:8b:2a:
77:a5:64:4b:06:c5:f2:26:40:98:37:d4:45:5f:e3:
8e:b9:93:af:1e:30:78:f3:0c:bc:d6:8c:60:3c:5c:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C0:45:15:62:D8:9B:3D:BF:BD:06:D5:B5:AE:58:D9:B3:8A:B4:F4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nMBFFWLYmz2_vQbVta5Y2bOKtPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.38.0/24
31.57.147.0/24
31.57.188.0/24
31.57.219.0/24
Signature Algorithm: sha256WithRSAEncryption
56:47:87:6a:f5:7b:83:5b:c9:14:ca:44:52:c5:93:52:81:03:
bd:af:91:9a:7e:97:d1:d1:be:91:58:25:44:18:38:8a:54:46:
e5:ef:a8:45:d5:f6:ed:c3:11:84:09:ab:16:6d:bf:b9:ab:20:
3b:7a:fe:9b:8e:16:0a:83:3e:a3:34:63:8b:a8:c6:ea:f4:93:
cd:89:04:a1:20:18:24:48:41:68:44:37:71:e5:3e:bc:0b:73:
de:c6:5e:0c:cc:e7:60:69:33:fa:fd:0b:78:62:db:96:86:87:
a1:22:3c:a1:f0:b8:3f:06:7b:15:80:17:eb:13:59:66:00:9b:
d5:67:69:dd:b7:fa:ff:75:19:eb:a9:b6:f7:c4:d5:c5:d2:20:
cc:c0:58:4d:45:e5:0e:06:00:f0:04:68:97:d3:19:c5:b4:0c:
65:b9:32:b5:7b:83:d6:bc:9f:99:27:02:3b:0e:ab:3d:be:13:
3f:99:9a:e4:c4:5a:e3:31:c0:86:6c:bd:60:25:6d:8f:c6:29:
5c:0c:3a:47:47:2e:c3:a7:05:c3:dc:35:45:e6:22:55:eb:34:
f4:8f:d3:eb:78:23:5b:45:a5:56:12:6b:b5:c8:f6:86:6f:9e:
c6:4a:a9:36:93:99:5d:1a:34:85:bf:53:de:54:03:ca:be:4e:
99:88:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:28:45 2025 by rpki-client