Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1WeWEekIrZXlaw2YD8oQyEO7s3w.roa
File: 1WeWEekIrZXlaw2YD8oQyEO7s3w.roa (raw, json)
Hash identifier: 7qWy9oGV5azmwnsseXLeKTAk63Bh6Tn/tXWgYYpizQ0=
Subject key identifier: D5:67:96:11:E9:08:AD:95:E5:6B:0D:98:0F:CA:10:C8:43:BB:B3:7C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199510529EE920D794883F54451C9474E8D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1WeWEekIrZXlaw2YD8oQyEO7s3w.roa
Signing time: Tue 16 Sep 2025 05:35:16 +0000
ROA not before: Tue 16 Sep 2025 05:35:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 31.59.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 19:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:05:29:ee:92:0d:79:48:83:f5:44:51:c9:47:4e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 16 05:35:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5679611e908ad95e56b0d980fca10c843bbb37c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:03:0a:1a:9b:8b:cf:02:c0:d3:d4:91:b3:
08:88:09:ad:77:16:5f:6c:1a:24:a0:35:41:b6:f5:
a8:71:38:99:3f:0d:98:fd:e2:4d:fe:04:f6:47:ea:
74:c3:21:40:9e:31:a6:a4:09:04:65:ab:64:b6:04:
9d:bc:4c:03:f0:ad:75:75:7c:8d:5d:6f:51:2a:a7:
ac:7f:6e:3b:eb:c9:1a:ad:03:31:21:67:30:3e:a9:
47:59:8c:7f:c8:7c:67:9f:9f:b4:27:49:55:d5:4b:
0f:1a:19:61:4b:5c:2f:18:08:05:b3:57:3e:63:6b:
29:58:51:86:dd:24:71:45:dc:b8:3c:4f:5c:8c:01:
e0:fb:20:e2:55:57:ac:0c:94:2c:3c:6e:c1:b6:4b:
ef:bc:37:ca:1e:a1:cd:63:35:5b:c0:7a:b8:72:c6:
22:1c:64:38:7f:55:4f:4b:ef:54:37:43:cd:b8:c9:
29:89:63:c4:07:c2:e4:f2:78:53:10:ba:4f:e4:de:
c0:1d:ca:e7:39:67:62:04:57:0c:83:a3:46:65:0e:
3a:0b:6b:9f:bd:88:58:1f:12:7a:7e:39:ca:d2:b3:
e9:a5:9d:4f:48:3e:e1:cf:0a:c7:35:4c:2c:93:57:
3a:79:65:c8:11:58:0a:07:b3:3a:a8:f8:24:1c:a5:
8c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:67:96:11:E9:08:AD:95:E5:6B:0D:98:0F:CA:10:C8:43:BB:B3:7C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1WeWEekIrZXlaw2YD8oQyEO7s3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.173.0/24
Signature Algorithm: sha256WithRSAEncryption
92:2e:78:ca:b4:22:1f:a5:8b:3d:04:f4:e7:73:ae:3f:6f:34:
04:56:16:bc:87:c6:f3:45:1b:7b:0b:7c:8c:a6:47:19:b5:5d:
92:44:e1:13:c3:99:c3:93:7f:ac:11:83:2b:13:42:b1:42:a1:
c0:62:73:08:7e:7d:14:7f:5f:1f:d1:b7:de:b8:e8:f6:3e:d1:
39:cd:fc:1d:be:17:2c:22:33:22:58:31:2b:08:58:62:64:d3:
b0:45:14:2e:b7:8c:46:df:e5:08:84:0e:4f:65:37:ff:7c:0f:
8f:ec:85:3c:0c:d6:74:2d:b2:50:81:d6:cb:1e:57:10:be:82:
57:7c:1f:56:d4:de:2c:86:e8:80:42:9a:7e:32:40:ab:5a:0c:
b4:d1:77:cd:76:48:e0:26:b2:d8:d9:52:a9:22:a2:e0:1e:72:
8e:65:5e:99:75:41:70:24:84:63:6c:0b:d4:99:5f:71:af:7d:
e4:5e:70:f2:c5:b3:7e:79:92:5d:6d:cf:69:92:5e:ac:5c:4d:
5b:0e:38:8e:81:f3:52:d2:a4:ec:6f:61:f3:3e:36:da:17:c2:
87:16:e5:59:28:dc:1b:07:f2:29:06:d1:d4:db:49:23:4c:39:
ad:5d:db:6b:c2:7e:10:2f:0b:b4:9c:82:b7:79:d3:2b:c1:f8:
39:e2:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 04:30:17 2025 by rpki-client