Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8kCWQU5U2M6qAVkw5YVLoaUNu2c.roa
File: 8kCWQU5U2M6qAVkw5YVLoaUNu2c.roa (raw, json)
Hash identifier: ebZzXfAPGcWneUiuJi9Sh7H/9b7LUhaOF37/WkSGJfs=
Subject key identifier: F2:40:96:41:4E:54:D8:CE:AA:01:59:30:E5:85:4B:A1:A5:0D:BB:67
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019941DB54F30F5424542D0F23345F0F8E57
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8kCWQU5U2M6qAVkw5YVLoaUNu2c.roa
Signing time: Sat 13 Sep 2025 06:55:16 +0000
ROA not before: Sat 13 Sep 2025 06:55:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211617
IP address blocks: 31.57.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:41:db:54:f3:0f:54:24:54:2d:0f:23:34:5f:0f:8e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 13 06:55:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f24096414e54d8ceaa015930e5854ba1a50dbb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:86:b9:9c:7d:41:e0:67:7b:77:19:46:7b:
f0:51:56:40:95:d1:1a:9e:d0:8b:9d:16:83:00:c2:
7b:01:a1:19:ea:a2:22:b6:83:7b:68:5e:7b:0b:d7:
45:0c:c1:0c:4b:6b:68:c1:60:ea:12:d3:2c:da:ce:
9a:69:04:0a:c7:2b:15:25:ea:4a:62:de:5c:09:3d:
72:4f:39:77:0f:22:e7:2a:99:ed:1b:83:5f:63:a6:
32:d9:8d:ea:2b:91:3b:64:cd:ad:ca:c4:cf:2c:59:
9a:c2:51:59:cf:1a:e7:fe:50:c9:92:c5:66:af:15:
ae:2a:2b:f9:7a:5b:56:9e:f9:53:b7:e1:aa:de:55:
be:20:db:23:9a:88:ac:a2:5e:73:92:71:95:1e:52:
58:94:51:b8:bb:1d:62:41:a7:a1:ee:34:d2:0e:c7:
44:d3:91:39:13:13:4b:d1:0f:17:ac:a3:c4:0d:f4:
bd:a3:75:8b:05:f2:46:44:1c:7c:e9:22:f9:1e:5a:
6b:8f:ce:ee:9f:17:cf:da:b6:a4:f1:a5:1e:4f:ab:
af:37:97:53:1f:c7:3a:5e:81:a1:76:8e:8a:e8:14:
cf:84:5e:51:ce:fe:19:eb:d5:e8:d2:14:cc:48:2e:
12:2a:5d:22:8b:e1:40:34:24:68:74:ea:cc:51:4b:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:40:96:41:4E:54:D8:CE:AA:01:59:30:E5:85:4B:A1:A5:0D:BB:67
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8kCWQU5U2M6qAVkw5YVLoaUNu2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.227.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e8:c7:2c:0c:9d:fb:a9:73:e5:6c:1d:8a:e3:4f:c2:78:7e:
54:ce:95:00:b6:a9:08:65:75:21:cf:7b:97:f7:06:1d:b0:61:
1d:15:21:b5:90:6f:cf:c1:60:42:0c:51:ca:a8:26:c5:3b:25:
e5:2b:e3:e4:76:bc:13:31:bd:10:31:10:f0:09:37:50:a0:3b:
2c:cd:bf:8a:d9:ca:b8:98:34:7f:5b:5b:0a:a2:b1:b7:d4:90:
2d:c1:e2:45:5c:bc:81:2c:28:f4:3d:c0:f0:d8:e5:d0:c9:92:
65:00:0b:ee:39:c0:cd:93:94:c6:1e:87:0f:bf:5c:61:d9:0a:
ea:a9:8a:03:2b:bc:fb:ac:a7:88:8e:90:31:d5:bd:57:a5:c7:
e6:4f:7a:1c:29:c0:ac:f4:29:74:78:32:6d:01:7b:bd:99:50:
33:97:41:a8:c2:45:6d:92:0b:a3:60:05:35:4a:89:f6:39:be:
d1:4c:ce:83:5f:57:ac:04:41:3f:22:0e:bc:9a:3a:11:83:a4:
61:70:1e:06:d8:a3:f5:35:97:85:62:32:7a:ff:a9:6b:48:08:
ba:f7:88:35:4b:a1:e9:f9:0d:5a:3b:05:7e:b0:e4:77:0c:c8:
f8:69:17:72:49:3a:01:be:c8:bf:16:0f:11:7b:b9:6c:d7:bf:
1f:5d:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 10:14:44 2025 by rpki-client