Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x-VSD473CdOwcRtZnCCkEDkye7s.roa
File: x-VSD473CdOwcRtZnCCkEDkye7s.roa (raw, json)
Hash identifier: QeY/7TqGBOZDIFtL3NNcIxr9RoPqmOz1GqC+1ii0a5s=
Subject key identifier: C7:E5:52:0F:8E:F7:09:D3:B0:71:1B:59:9C:20:A4:10:39:32:7B:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01983C04D364E378C909B7C097FD8C81EB95
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x-VSD473CdOwcRtZnCCkEDkye7s.roa
Signing time: Thu 24 Jul 2025 10:40:05 +0000
ROA not before: Thu 24 Jul 2025 10:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60117
IP address blocks: 31.56.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:04:d3:64:e3:78:c9:09:b7:c0:97:fd:8c:81:eb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 10:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7e5520f8ef709d3b0711b599c20a41039327bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:62:90:29:58:50:c7:7d:5b:ce:9b:c5:56:bd:
76:18:61:9e:00:04:c7:65:42:a7:09:d1:40:93:ad:
41:56:bd:18:a8:bd:e6:0d:84:9f:ca:ff:71:32:a8:
ee:83:54:16:c8:64:e5:c9:c9:3f:20:27:0c:8e:46:
b1:95:68:31:ec:0b:45:13:d9:c6:ab:ca:a8:f1:fd:
03:b9:b3:4a:cf:48:d3:c3:be:96:17:3a:51:02:66:
3f:14:f5:de:37:e8:99:e8:1e:69:aa:41:54:4a:4b:
74:ca:df:5b:1a:a9:c2:2d:37:56:16:49:9c:8a:bb:
f5:73:b0:1b:9e:b4:c7:38:71:7d:42:36:eb:fc:23:
ab:c1:27:b9:21:07:b9:52:79:a3:5b:44:c6:1e:3b:
70:34:f1:8c:d9:59:80:a4:00:9e:16:26:b5:4e:4d:
a6:27:e8:4b:4e:f4:f7:f2:1e:a6:a6:bb:a3:fc:b3:
81:f3:09:09:54:a3:6c:35:ba:d1:61:b8:a8:fa:2b:
d1:b3:d5:a0:a3:a0:79:99:1a:4c:3c:dd:4c:7d:ab:
2a:01:7c:a9:ec:19:b6:64:8c:a6:32:b4:83:78:76:
be:7b:52:65:05:44:5f:4a:28:a0:1b:77:99:6a:fd:
b9:c9:95:33:6b:2b:ef:7c:1e:a4:35:f5:eb:ee:7c:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:52:0F:8E:F7:09:D3:B0:71:1B:59:9C:20:A4:10:39:32:7B:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/x-VSD473CdOwcRtZnCCkEDkye7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.76.0/24
Signature Algorithm: sha256WithRSAEncryption
83:98:b1:b5:88:bf:34:f8:3b:62:5e:13:48:e1:7a:30:f1:cb:
05:7c:32:93:ea:d1:23:11:39:51:d5:a3:85:05:e5:62:4b:db:
54:e6:f4:b7:6f:a5:fb:bc:73:3f:e7:62:cc:08:a6:6c:db:d9:
be:d8:a6:fe:7f:a4:17:4f:ef:b8:a0:8d:df:43:fb:a4:6e:26:
32:c4:10:f3:03:0d:16:bb:df:7d:5c:f9:18:2c:3e:72:d9:20:
5e:df:fb:03:ca:9b:c6:25:08:ec:b5:fd:fd:41:28:07:d5:7a:
1b:16:86:27:ac:52:3e:ec:d8:91:e5:4e:94:3b:09:3b:fe:30:
2c:72:45:3c:43:e2:2d:cd:1b:9f:bb:14:5d:4d:a3:e6:17:a6:
61:c8:68:f3:76:36:f8:1b:bd:fa:29:6a:a9:a2:92:ba:fa:f0:
58:de:bd:bd:8d:9f:31:18:99:54:fa:53:bc:7c:c9:99:b2:4f:
ba:58:87:60:06:86:4c:60:08:55:d3:6c:63:a0:47:49:ef:c9:
e2:0e:4d:1e:a4:13:be:f9:d9:f9:e1:20:13:e2:f0:40:fc:83:
fb:d8:1e:9e:33:f9:ba:a2:f0:fa:e8:e0:c5:c2:1f:ea:c5:fa:
fc:d7:81:07:56:12:22:d5:73:70:1e:bd:4d:99:66:b4:53:a5:
e0:61:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:29:56 2025 by rpki-client