Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wIhhCUw6tzRlRKAJUjQjXzqGBBw.roa
File: wIhhCUw6tzRlRKAJUjQjXzqGBBw.roa (raw, json)
Hash identifier: QvdCy8215QWLv4+wgjoTQ09wIzRmwUNjLWmGDg0DYns=
Subject key identifier: C0:88:61:09:4C:3A:B7:34:65:44:A0:09:52:34:23:5F:3A:86:04:1C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198099D6F257B3393E4A98BED08B6436DA5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wIhhCUw6tzRlRKAJUjQjXzqGBBw.roa
Signing time: Mon 14 Jul 2025 15:46:09 +0000
ROA not before: Mon 14 Jul 2025 15:46:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 31.57.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:9d:6f:25:7b:33:93:e4:a9:8b:ed:08:b6:43:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 14 15:46:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c08861094c3ab7346544a0095234235f3a86041c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:95:00:2b:1c:ec:f6:3e:5a:5c:b9:6b:e0:
a0:75:da:af:1b:f9:f0:12:24:f5:22:2e:d2:93:27:
f1:35:a8:7d:23:4b:95:3f:65:a9:30:2b:34:e4:94:
87:54:31:59:a1:73:32:be:f2:4d:f4:99:7e:0d:c7:
42:3c:0c:d0:18:cc:8a:9e:3f:17:cc:32:f6:21:7f:
3e:b4:e9:b1:e0:43:5a:8e:3f:89:e0:4a:6e:15:0a:
f2:30:8c:30:96:9c:82:18:3c:a1:bb:90:d0:c4:4a:
ab:bc:d0:ca:1a:9d:59:f0:09:33:31:11:7b:39:9b:
5e:db:13:77:74:dc:a8:96:5c:5d:7b:12:dd:7e:cd:
5c:6c:13:00:a6:02:59:8e:c4:12:71:e4:8e:8f:70:
ad:dc:05:e0:8b:5d:2f:3d:37:2a:07:d1:af:1d:d4:
a2:47:4b:11:79:e7:6b:39:81:57:e6:8e:95:7b:6c:
9b:3a:20:24:97:d0:7f:49:5f:99:ca:f6:e7:6a:d1:
1b:a2:0f:54:8d:23:57:f0:8b:37:49:c1:ce:be:ae:
5f:2d:f0:12:48:bf:f1:d7:5a:94:39:e3:41:8f:61:
2f:a7:00:f1:a4:79:55:af:af:b9:21:61:d6:78:7d:
4f:99:1c:c9:5f:83:be:7d:8e:e0:75:79:18:ca:55:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:88:61:09:4C:3A:B7:34:65:44:A0:09:52:34:23:5F:3A:86:04:1C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wIhhCUw6tzRlRKAJUjQjXzqGBBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3b:a2:09:70:f0:a0:13:89:93:45:07:e9:ff:4a:cd:a2:40:
71:71:b8:80:03:80:86:4d:72:e3:2f:d6:06:07:42:1b:b5:0a:
37:51:4f:26:6b:80:bf:fc:37:a7:c8:ef:a0:f2:94:5a:22:7e:
3f:07:a2:93:2a:23:77:a3:c1:7e:2d:b8:18:3f:8d:d8:4d:b9:
8e:36:b6:2d:79:68:54:79:ce:37:cd:81:da:8c:07:4f:e2:f1:
1a:3d:4e:b8:aa:5e:f2:fb:c2:64:b6:fa:ae:eb:c9:99:97:23:
5e:02:c7:d3:a7:4e:fc:74:31:61:17:33:bd:f1:32:1a:b9:91:
12:81:68:38:ab:fe:61:b7:c0:94:05:b1:38:c5:f1:6a:95:1d:
23:81:16:72:60:f7:ac:a5:86:7a:1d:79:b7:d3:eb:a0:3c:e6:
74:ab:b3:49:38:66:86:57:6d:ea:50:d2:49:e0:d1:58:ce:d8:
6b:f4:1a:2f:a5:47:fb:36:44:9e:fd:61:c1:c8:e9:87:cd:78:
8b:8b:67:c4:68:17:f0:1b:8b:9c:dd:da:72:c2:d4:3b:29:40:
f0:ac:5f:56:18:cd:2a:5f:a2:0c:8f:dd:0a:5d:d8:8a:70:03:
0e:a3:91:87:15:44:89:1d:5b:55:a9:d8:68:31:f4:a7:d5:cb:
3f:29:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:32:02 2025 by rpki-client