Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sh1KQGFCKztr_sPG9CBuc9YSJHU.roa
File: sh1KQGFCKztr_sPG9CBuc9YSJHU.roa (raw, json)
Hash identifier: Lcuahdf7J3l6L92YaWNqJrA83vFpuX9oHER8B4kgOBY=
Subject key identifier: B2:1D:4A:40:61:42:2B:3B:6B:FE:C3:C6:F4:20:6E:73:D6:12:24:75
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197EE0624855D3E1B0E076EBE17B9EFF4FD
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sh1KQGFCKztr_sPG9CBuc9YSJHU.roa
Signing time: Wed 09 Jul 2025 07:11:09 +0000
ROA not before: Wed 09 Jul 2025 07:11:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 265919
IP address blocks: 31.57.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:21:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ee:06:24:85:5d:3e:1b:0e:07:6e:be:17:b9:ef:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 9 07:11:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b21d4a4061422b3b6bfec3c6f4206e73d6122475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:15:be:04:8c:10:3a:2a:71:95:fe:97:18:
1b:ce:e1:ef:17:cd:df:da:4e:95:14:21:45:8d:0b:
00:37:c5:f8:05:19:b6:30:c3:16:a4:96:40:e6:ab:
b9:d4:c8:a1:ca:88:8f:3d:95:bd:b3:59:ba:1f:16:
00:c0:a7:f8:59:24:27:77:05:23:a5:76:3f:0a:61:
48:68:83:3e:bb:be:c9:30:ae:01:6a:fe:20:1a:36:
b5:38:37:c7:3d:42:1f:ba:ff:bb:b2:e7:9d:2f:23:
0b:d9:49:fc:5d:85:fd:a8:2f:ca:12:da:e3:e8:e9:
89:cb:fd:7f:1c:8c:cc:41:45:49:d4:02:76:aa:5a:
5d:45:8c:14:dd:9c:50:09:bf:88:d1:f1:73:65:75:
c7:27:b7:9a:82:16:dd:7e:ae:5f:9a:2e:d0:df:09:
5f:4b:2f:52:a8:aa:13:82:6a:a1:a8:36:5d:81:da:
32:56:25:4e:a0:0d:ba:45:4e:af:70:30:d3:2e:11:
81:78:c7:05:f6:06:30:71:3a:5a:ee:9f:13:a2:fb:
8a:b5:93:1a:fe:02:af:88:c8:66:4c:12:19:ac:a3:
fd:bd:82:13:ee:48:c4:56:3c:31:c2:d7:78:14:42:
9a:28:7e:c3:34:bf:c9:84:e1:f5:fd:96:e2:2b:11:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1D:4A:40:61:42:2B:3B:6B:FE:C3:C6:F4:20:6E:73:D6:12:24:75
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sh1KQGFCKztr_sPG9CBuc9YSJHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.60.0/24
Signature Algorithm: sha256WithRSAEncryption
28:76:e9:33:99:c9:c1:a1:ef:2c:79:b1:3f:5b:9d:06:da:63:
db:be:92:19:18:52:ce:74:4d:3e:f5:cd:c6:30:01:d2:45:30:
c2:8d:97:04:10:86:7a:e4:b6:1b:8c:74:87:97:8d:7d:80:48:
e3:01:fc:a9:d3:18:b7:0d:54:93:3d:98:2b:21:e4:98:7a:06:
50:7f:78:bc:b4:81:7b:39:c9:39:9c:d2:c0:c8:46:f7:ca:56:
c4:54:56:06:03:b0:30:53:eb:c7:e3:f4:1c:7c:f6:ac:a2:0e:
71:c6:20:a8:ce:ab:6f:e4:e6:fb:a1:d0:af:ad:aa:c1:a2:84:
b1:3b:87:87:6b:24:54:1f:92:58:b5:2a:3d:7f:f7:09:e9:68:
22:aa:c6:e6:dd:de:9d:48:c4:c8:9f:79:0b:e1:0a:21:f3:08:
ef:d5:54:76:d7:88:a5:0d:ff:52:2c:78:39:f3:87:0e:2a:e6:
4a:3a:ba:5c:aa:7a:02:81:b3:cd:b1:d8:f1:00:c0:e3:5d:91:
70:f2:02:88:b3:b3:0a:e7:80:33:99:99:35:94:a6:b5:e1:57:
f9:80:64:ef:53:af:82:65:51:24:8a:b6:04:bf:69:0c:84:b1:
02:d9:4c:23:7a:18:fc:04:6f:3e:a0:45:28:e4:97:f9:b4:ab:
4c:64:36:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfuBiSFXT4bDgduvhe57/T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzA5MDcxMTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjFkNGE0MDYxNDIyYjNiNmJmZWMzYzZmNDIwNmU3M2Q2MTIyNDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP4VvgSMEDoqcZX+lxgbzuHvF83f
2k6VFCFFjQsAN8X4BRm2MMMWpJZA5qu51MihyoiPPZW9s1m6HxYAwKf4WSQndwUj
pXY/CmFIaIM+u77JMK4Bav4gGja1ODfHPUIfuv+7suedLyML2Un8XYX9qC/KEtrj
6OmJy/1/HIzMQUVJ1AJ2qlpdRYwU3ZxQCb+I0fFzZXXHJ7eaghbdfq5fmi7Q3wlf
Sy9SqKoTgmqhqDZdgdoyViVOoA26RU6vcDDTLhGBeMcF9gYwcTpa7p8TovuKtZMa
/gKviMhmTBIZrKP9vYIT7kjEVjwxwtd4FEKaKH7DNL/JhOH1/ZbiKxHHMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIdSkBhQis7a/7DxvQgbnPWEiR1MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvc2gxS1FHRkNLenRyX3NQRzlDQnVjOVlTSkhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzk8MA0G
CSqGSIb3DQEBCwUAA4IBAQAodukzmcnBoe8sebE/W50G2mPbvpIZGFLOdE0+9c3G
MAHSRTDCjZcEEIZ65LYbjHSHl419gEjjAfyp0xi3DVSTPZgrIeSYegZQf3i8tIF7
Ock5nNLAyEb3ylbEVFYGA7AwU+vH4/QcfPasog5xxiCozqtv5Ob7odCvrarBooSx
O4eHayRUH5JYtSo9f/cJ6Wgiqsbm3d6dSMTIn3kL4Qoh8wjv1VR214ilDf9SLHg5
84cOKuZKOrpcqnoCgbPNsdjxAMDjXZFw8gKIs7MK54AzmZk1lKa14Vf5gGTvU6+C
ZVEkirYEv2kMhLEC2Uwjehj8BG8+oEUo5Jf5tKtMZDZ+
-----END CERTIFICATE-----
Generated at Wed Jul 23 08:06:35 2025 by rpki-client