Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9PF39WeRVhcoPiy64qTkoOJJKDw.roa
File: 9PF39WeRVhcoPiy64qTkoOJJKDw.roa (raw, json)
Hash identifier: bL7QQpw/VYcfcRyGYGFezlh5FSpDZJ2H/F9PzJJbImg=
Subject key identifier: F4:F1:77:F5:67:91:56:17:28:3E:2C:BA:E2:A4:E4:A0:E2:49:28:3C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197D4DD02B1FA1D13468585A29A57EC293A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9PF39WeRVhcoPiy64qTkoOJJKDw.roa
Signing time: Fri 04 Jul 2025 09:55:43 +0000
ROA not before: Fri 04 Jul 2025 09:55:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 31.56.211.0/24 maxlen: 24
94.183.150.0/24 maxlen: 24
94.183.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:dd:02:b1:fa:1d:13:46:85:85:a2:9a:57:ec:29:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 09:55:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4f177f567915617283e2cbae2a4e4a0e249283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:b6:47:ff:de:a6:f3:47:32:df:e0:19:4c:
fe:95:77:4f:4f:1f:f9:ba:e1:60:9e:05:8b:9f:48:
b0:48:54:fd:18:8d:b6:b5:ec:26:7d:95:05:cb:72:
fb:be:cd:91:20:92:1c:af:d0:14:a9:7f:f4:13:ef:
70:16:71:f2:e4:a2:83:a3:de:cd:dc:3d:ea:ac:43:
ac:9a:92:55:12:b8:64:f9:5c:53:f4:5c:e0:7a:6b:
c7:9f:98:a6:b9:f4:bb:e2:09:03:71:9c:94:d8:49:
5f:09:46:9d:f8:3c:e3:b4:d8:03:94:b2:7f:12:08:
c6:78:7c:0c:9f:84:aa:4e:14:a4:1e:22:5b:d0:15:
ad:e9:77:02:f0:f5:eb:dd:d4:12:3b:f7:01:82:48:
04:b7:1f:a0:f5:a5:a8:b8:c9:0e:45:a2:e0:ea:d7:
c8:72:06:ac:b5:81:c0:a7:d9:a4:5a:ef:c3:fa:d2:
c7:00:4f:ca:6c:54:f8:a5:1a:51:7b:86:19:db:8d:
7f:7c:84:cc:59:c6:59:0c:c2:60:68:40:a1:86:4c:
31:07:cf:64:a9:79:30:39:c9:45:4f:c3:b3:a7:ec:
e6:b2:7f:52:7a:fd:54:41:1a:f4:c0:fb:bd:ff:21:
0e:0a:57:dd:09:c4:16:8f:b3:8f:61:c0:00:82:d6:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F1:77:F5:67:91:56:17:28:3E:2C:BA:E2:A4:E4:A0:E2:49:28:3C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/9PF39WeRVhcoPiy64qTkoOJJKDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.211.0/24
94.183.150.0/23
Signature Algorithm: sha256WithRSAEncryption
79:98:b1:27:1b:ba:c5:fb:80:71:b5:d0:f6:91:05:bf:d5:73:
de:1f:44:46:90:38:d6:e3:ed:5c:6c:6f:9b:20:06:37:12:ca:
4b:db:e9:dc:97:6e:b3:d3:d5:e8:80:46:9e:7e:20:03:70:fc:
81:4f:68:fc:c7:58:c7:26:0e:a6:fc:89:71:18:40:a6:6c:ec:
1d:92:14:46:04:0a:2b:8b:96:16:d2:64:29:10:6d:38:16:88:
97:5a:53:69:dc:b1:de:7b:c3:84:c8:32:e6:c5:7d:fc:31:c4:
b7:79:1d:ad:21:a2:0c:c1:ff:52:7b:a1:53:8c:cb:92:ee:86:
ae:4c:ab:6e:59:e1:7b:e2:c7:08:b9:b1:bf:af:67:c3:a4:83:
b0:9f:c0:df:ee:9d:74:44:b7:df:64:78:91:29:9c:a6:59:c6:
f0:0f:12:b4:7e:32:8c:cd:52:26:d8:30:af:7c:23:68:84:d9:
64:d3:f7:66:d7:34:8a:63:ad:d6:2d:20:57:bb:56:89:53:c8:
1c:9c:9d:76:c4:79:1f:68:65:2c:66:3f:f7:af:37:dd:c6:65:
c3:f1:c4:6b:2a:5e:a8:54:e6:a0:be:b3:92:3e:cf:9f:2b:ad:
ca:24:d9:07:0a:d8:71:1d:ad:17:23:32:88:1f:b8:78:ab:d6:
0c:7c:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:56:46 2025 by rpki-client