Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ZU0PEH0T_ZyDz7azxTyrONT1nc.roa
File: 8ZU0PEH0T_ZyDz7azxTyrONT1nc.roa (raw, json)
Hash identifier: qZjKOFJAiy62a4i48zaqO1Qom0qVADsbbsA0AQRk3yI=
Subject key identifier: F1:95:34:3C:41:F4:4F:F6:72:0F:3E:DA:CF:14:F2:AC:E3:53:D6:77
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198EA138994929D50A8E7AF0AB37E3ED929
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ZU0PEH0T_ZyDz7azxTyrONT1nc.roa
Signing time: Wed 27 Aug 2025 05:50:05 +0000
ROA not before: Wed 27 Aug 2025 05:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33739
IP address blocks: 31.59.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ea:13:89:94:92:9d:50:a8:e7:af:0a:b3:7e:3e:d9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 27 05:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f195343c41f44ff6720f3edacf14f2ace353d677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:65:d3:88:3b:8a:bc:0a:5d:4a:3a:dc:23:23:
e1:b9:5d:5a:5d:4c:4e:6d:3b:18:6a:1f:24:cb:db:
5a:59:bb:59:08:13:f5:34:88:98:9a:72:f2:23:1e:
55:e9:41:22:c2:3d:fe:38:6d:e9:52:f6:d6:61:b9:
b9:b3:5b:d2:f0:b5:9f:3f:24:d1:06:a4:02:0d:33:
5b:c4:0b:55:f2:d1:6a:92:da:8d:69:7d:3f:14:35:
a3:a4:5c:7a:bc:95:34:93:2f:55:70:a2:4e:3f:a7:
39:3b:e9:b0:53:13:a0:3e:e9:f3:aa:28:d8:3a:f6:
54:cf:9c:fb:55:c1:15:94:52:4c:03:24:ec:bc:eb:
9d:36:0b:eb:26:d9:ab:85:29:83:83:c3:54:a2:ad:
75:d9:5d:ca:80:e5:31:a6:e2:f3:64:ef:05:3a:a5:
62:a8:2f:a0:21:cb:5f:91:c1:0d:99:8a:e7:6f:2b:
a4:5c:ba:76:4d:b7:88:28:6e:a7:76:ad:0a:d1:51:
44:0b:a1:22:b4:cf:a5:22:c0:39:96:92:4f:69:75:
94:79:80:c5:fd:5d:2b:e7:d5:23:a3:37:0d:fe:1c:
24:d8:89:4b:d7:4c:ff:9b:e5:f8:73:0d:60:ba:a4:
9e:ce:e1:6c:f0:5d:c2:ac:74:6e:a5:1c:ad:1c:08:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:34:3C:41:F4:4F:F6:72:0F:3E:DA:CF:14:F2:AC:E3:53:D6:77
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8ZU0PEH0T_ZyDz7azxTyrONT1nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.137.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6b:c6:23:6d:52:e3:63:e6:6b:3b:73:84:ee:4a:d1:d6:f6:
3e:71:c4:0f:f1:3e:dc:99:16:ce:04:cc:c9:19:4d:72:7e:fb:
3a:ac:a0:74:d9:dd:86:41:11:64:57:56:7d:a7:c5:0a:4f:5d:
f5:b3:35:51:2b:0f:b5:55:0b:c8:6f:9b:80:30:c0:39:ff:77:
1b:ff:dc:eb:ef:ea:25:c8:96:6d:3a:24:6f:3f:03:05:1e:cd:
f2:e2:1b:5c:ee:a2:58:bf:20:74:88:fe:cb:81:2f:03:f6:4b:
c3:60:f7:20:90:b0:7e:fc:59:fa:3b:e7:e9:c3:5a:63:d6:f0:
e4:df:2e:31:f4:b6:bd:0c:b6:4f:05:45:2a:e5:a8:0d:1f:1b:
70:b6:57:7d:17:41:d9:b9:28:5c:73:e2:c9:4d:11:2e:9c:a8:
ff:cc:9a:39:af:e1:f7:be:e7:43:fa:31:9f:88:69:6a:f2:ac:
57:42:d8:dd:a7:ba:62:01:b7:f3:e2:79:ac:4f:90:28:0e:55:
2c:e5:f1:2a:88:72:e0:63:5c:7c:8f:ce:39:90:ef:de:4d:f8:
fa:3e:d4:a8:e8:14:67:88:a8:d0:eb:1b:72:e3:21:77:11:9b:
44:16:48:4c:b2:b3:98:c8:2b:df:94:c0:3a:ec:14:54:f0:6a:
ed:b6:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 08:22:25 2025 by rpki-client