Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D6JeRPTVl_8yVEiSzzmqwAIQeeI.roa
File: D6JeRPTVl_8yVEiSzzmqwAIQeeI.roa (raw, json)
Hash identifier: qTkCEYOIDQM9ubVbbDaXuA/xs698VHAIcRYL12BiC74=
Subject key identifier: 0F:A2:5E:44:F4:D5:97:FF:32:54:48:92:CF:39:AA:C0:02:10:79:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199195DDAB7C0E5229AAAE0284D8E747901
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D6JeRPTVl_8yVEiSzzmqwAIQeeI.roa
Signing time: Fri 05 Sep 2025 10:13:25 +0000
ROA not before: Fri 05 Sep 2025 10:13:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 31.57.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:5d:da:b7:c0:e5:22:9a:aa:e0:28:4d:8e:74:79:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 5 10:13:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fa25e44f4d597ff32544892cf39aac0021079e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:de:24:15:8a:61:bb:7d:2c:58:52:67:a9:
92:50:ab:c7:a7:45:01:42:93:0d:96:78:cc:d4:c9:
7f:50:ac:92:60:95:f0:95:5c:be:0a:78:f0:0b:9a:
c9:c3:2e:00:76:a5:64:f8:73:0e:59:cd:62:d9:11:
00:bb:6e:77:04:19:6d:ac:40:4c:36:ad:a4:f0:bc:
59:19:f8:d5:7e:39:d7:50:c2:e8:d6:70:3f:6e:68:
0e:52:6d:4f:1a:f3:19:29:07:7d:ff:2b:17:94:1e:
9c:a9:25:88:e8:0f:ae:ad:72:e7:89:31:1c:12:12:
6e:da:55:a5:98:d4:73:ee:87:46:46:a8:e0:3f:f3:
e3:6b:8b:5f:6e:e5:59:ea:2f:cb:6a:96:54:a4:04:
10:19:6a:1c:09:ef:d9:21:57:92:d1:62:08:70:2c:
3c:6d:f8:54:d2:31:b8:8f:52:0e:41:ef:93:82:d4:
fa:22:68:3c:11:17:b3:ea:29:5f:85:ac:48:11:9b:
13:dc:43:79:41:58:ea:a8:16:27:81:0f:c6:b3:6d:
d4:1c:50:dd:ce:83:f7:3f:b5:2e:4d:69:af:a8:8c:
f9:47:38:50:0b:16:0a:f5:57:b1:35:62:51:3e:07:
7a:58:0e:e3:79:d0:3d:a6:7d:7a:d0:9b:bc:c9:f0:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A2:5E:44:F4:D5:97:FF:32:54:48:92:CF:39:AA:C0:02:10:79:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/D6JeRPTVl_8yVEiSzzmqwAIQeeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:75:8f:94:df:82:54:db:53:63:53:72:ea:c6:da:b3:08:7e:
7c:7c:6a:1d:34:c2:d3:8b:aa:b9:7e:55:7a:b0:3f:f8:3b:d9:
72:eb:f8:0f:06:cc:b0:02:d9:4f:b6:78:49:88:fa:3b:0c:61:
8d:b4:90:fd:43:5c:03:c1:3b:90:77:58:aa:3c:b8:d5:8c:c8:
96:d4:62:aa:35:72:a1:20:78:f1:b1:77:43:68:15:55:0d:39:
9e:85:50:8c:c4:99:c8:00:e2:46:83:32:1b:50:81:a1:c1:5a:
c9:12:55:08:3b:5f:ca:25:9e:47:d2:d5:68:49:8d:fa:4d:f2:
b0:f1:29:c8:d3:97:89:3f:0d:84:77:aa:5a:e5:c8:83:90:93:
62:35:34:14:d6:a4:c1:79:e3:38:63:14:ac:08:8f:30:ea:00:
26:0d:23:57:89:22:4b:3a:68:9c:84:07:31:14:08:31:28:71:
aa:d9:7d:e3:b8:82:41:b7:62:bc:57:9c:c5:b8:5d:7a:18:3b:
55:88:c0:47:5c:98:63:81:86:64:35:a0:de:2d:16:53:9c:cd:
8b:d6:b4:84:42:59:17:59:5b:bd:90:a5:c2:f8:b6:f7:d6:11:
9d:89:df:85:b7:5f:19:8b:b6:36:6f:a3:86:ac:75:80:d7:b6:
84:a1:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:43:22 2025 by rpki-client