Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2FSe8ZoW68RZ0eW33wUPJoEhoiM.roa
File: 2FSe8ZoW68RZ0eW33wUPJoEhoiM.roa (raw, json)
Hash identifier: mrbLQWdAZ1Gz7WNibEpopl+QhDBp9zQAYPRARpkt+2Y=
Subject key identifier: D8:54:9E:F1:9A:16:EB:C4:59:D1:E5:B7:DF:05:0F:26:81:21:A2:23
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A01F68210D7211A97AAB2655206E32F87
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2FSe8ZoW68RZ0eW33wUPJoEhoiM.roa
Signing time: Mon 20 Oct 2025 14:12:03 +0000
ROA not before: Mon 20 Oct 2025 14:12:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208483
IP address blocks: 31.57.135.0/24 maxlen: 24
31.59.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:f6:82:10:d7:21:1a:97:aa:b2:65:52:06:e3:2f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 20 14:12:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8549ef19a16ebc459d1e5b7df050f268121a223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:c0:be:1c:e3:67:00:a8:77:6d:ad:7f:50:
bf:5a:2a:ab:a5:b9:79:60:2c:51:8a:17:79:79:85:
bd:6d:b9:bb:3d:a6:c2:a2:0c:07:a3:ec:9a:36:58:
93:8e:7e:cf:57:aa:c0:3b:f9:9c:ce:ba:03:c0:dc:
1c:e7:a1:16:5e:ae:74:c6:09:05:e2:2a:ec:22:7c:
83:fc:dd:96:81:bb:89:4d:cd:c3:cc:be:c1:58:fe:
cf:06:56:32:f5:b3:19:8c:fd:a0:8b:39:0e:4a:6a:
25:a4:b9:b7:9c:ae:a2:49:e6:d5:e1:6f:78:77:e1:
5f:8b:df:3b:4c:be:e0:51:8a:25:43:04:20:f3:fe:
9c:b5:6c:e7:c2:f4:a6:a0:41:d6:13:dc:95:ed:52:
a8:62:47:aa:ef:20:b1:2f:c4:e3:47:c5:3c:a0:97:
6e:20:d4:bb:39:17:ca:27:e9:8e:d2:83:a6:c5:83:
4b:f4:ca:2f:6f:9b:df:f5:e5:fe:5f:9d:cf:1f:6a:
8f:cf:f8:f8:5a:ef:49:c8:52:3b:84:ac:47:e2:2f:
aa:96:14:e0:1f:82:c5:64:6e:bf:e5:fd:81:65:74:
e8:31:60:8e:58:57:e7:79:58:13:c4:33:36:02:71:
db:03:4c:fc:c4:17:36:cb:55:73:aa:b6:72:87:83:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:9E:F1:9A:16:EB:C4:59:D1:E5:B7:DF:05:0F:26:81:21:A2:23
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2FSe8ZoW68RZ0eW33wUPJoEhoiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.135.0/24
31.59.59.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d7:bb:50:ca:6d:c7:4d:b6:07:5a:1d:0e:6d:6a:65:36:6b:
0d:e4:ca:ae:03:85:eb:61:5a:bb:3a:57:bc:2e:fd:d4:89:43:
f1:86:27:f0:57:97:13:c8:4f:ef:3f:0a:f9:10:5b:99:05:39:
61:6a:38:ad:93:2b:ce:e1:ab:96:44:9d:cd:6e:be:e7:a1:14:
01:5c:9b:3e:fc:48:65:85:34:db:ca:72:1b:a6:94:b6:e7:03:
2c:83:aa:a5:95:a9:ae:77:fa:2a:22:d4:7f:20:d8:0e:41:0a:
3f:ee:f4:52:04:98:19:36:0b:34:d3:27:3b:fd:e6:a3:1d:57:
52:bd:58:37:d2:8a:da:5a:76:24:9a:fb:87:e7:36:91:8b:c7:
6a:9e:37:26:fd:5a:29:c6:5d:1a:af:ef:de:20:c7:92:07:8b:
f8:30:41:f1:4a:cb:c2:ff:7d:d9:24:4d:38:cb:23:83:6d:05:
0b:8a:23:5e:d9:aa:3d:a7:8b:31:10:c0:a6:9c:01:04:85:4d:
a5:3a:f2:25:c0:3a:cf:f4:a9:fa:fa:f1:54:56:15:be:0b:64:
09:19:ef:61:4b:6c:24:6d:12:f0:3b:77:32:34:bc:29:67:19:
be:f3:96:a7:2f:5b:b7:36:dc:db:c9:6f:d7:2e:bc:67:a8:23:
f7:ef:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:27:51 2025 by rpki-client