Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hq4e-M-JB-xN5v0l5LqrMSCgMdE.roa
File: Hq4e-M-JB-xN5v0l5LqrMSCgMdE.roa (raw, json)
Hash identifier: akniQZ5A02BomsP+bJ1nRMLCZPRtj3pmwkD3ZD8udxw=
Subject key identifier: 1E:AE:1E:F8:CF:89:07:EC:4D:E6:FD:25:E4:BA:AB:31:20:A0:31:D1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199259E73771F0535BD78F4A21934924C4E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hq4e-M-JB-xN5v0l5LqrMSCgMdE.roa
Signing time: Sun 07 Sep 2025 19:19:25 +0000
ROA not before: Sun 07 Sep 2025 19:19:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209554
IP address blocks: 31.58.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:9e:73:77:1f:05:35:bd:78:f4:a2:19:34:92:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 7 19:19:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1eae1ef8cf8907ec4de6fd25e4baab3120a031d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:76:18:7b:21:4a:c5:e7:f2:15:71:aa:03:
7e:54:26:13:de:dd:7f:12:e2:05:07:23:48:e8:99:
df:ac:d6:fd:ff:3a:6a:80:e1:63:2e:bb:f6:aa:1e:
90:63:8a:44:a5:1c:81:73:51:30:16:67:8a:90:98:
21:b9:cd:9c:dd:86:47:86:2c:ce:6e:8f:21:3f:00:
4e:e0:ab:4a:1d:c9:0f:70:d7:e5:5f:5d:bc:4d:dc:
88:83:d5:3d:88:38:4d:11:44:59:2e:a3:c4:ae:fa:
dd:62:f3:d6:51:a5:30:04:2d:b1:2e:2e:ff:07:61:
f7:71:62:a7:38:18:3b:0c:d9:51:62:20:97:d3:9e:
45:ef:6d:be:7a:45:59:8d:03:7c:ef:27:bc:47:2f:
ba:42:ef:df:f6:0e:6c:19:dd:05:41:19:ed:d1:aa:
b8:a1:a4:2d:de:72:80:d2:97:f6:ce:6e:7b:7d:ed:
f5:e3:d8:f3:75:1b:14:75:06:df:f3:be:27:aa:e0:
fb:5b:2f:ff:e1:22:bc:b1:71:03:1f:d2:73:af:aa:
41:a8:15:2a:fc:98:bc:bf:32:fa:d5:33:0a:cf:06:
be:dd:bb:b4:79:e3:f6:ec:00:ae:ae:cf:bc:6f:fe:
0c:ab:56:96:ab:95:3c:73:41:78:1a:1b:96:11:db:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AE:1E:F8:CF:89:07:EC:4D:E6:FD:25:E4:BA:AB:31:20:A0:31:D1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Hq4e-M-JB-xN5v0l5LqrMSCgMdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.222.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:e0:16:25:dd:ce:5c:86:fb:d5:dd:84:74:02:17:b2:f4:b4:
45:0f:5c:9c:33:45:be:16:f4:95:0e:63:1f:f5:cd:3f:84:91:
96:40:1b:65:b2:99:01:7e:94:82:e2:66:fd:b8:7e:e0:c0:36:
3b:85:cb:bc:a3:98:02:5d:03:09:e7:5d:4f:ab:16:34:1e:02:
f7:d9:57:c3:a6:83:7a:84:35:b8:0a:4c:09:5e:33:6b:cf:6f:
6b:69:52:39:1a:88:ba:49:c6:4a:82:8a:e3:34:ed:b7:b6:8b:
43:3f:e7:eb:78:fe:8b:c5:8d:f8:ea:f1:12:34:c7:d6:44:ab:
2d:25:29:59:4d:ec:e3:2b:dd:7f:43:46:27:83:9a:47:65:49:
ef:38:5a:0b:35:ea:fe:e4:43:e7:24:68:c5:f3:37:55:1d:18:
2b:50:97:60:e6:b6:f6:0c:17:db:74:78:fc:ca:4e:e3:f9:44:
cf:7a:b7:53:57:74:9f:c1:fa:1d:21:52:77:e7:46:de:fe:a8:
e4:f6:21:29:57:59:f3:4d:3a:4a:1c:c4:5b:b8:e1:fb:90:46:
7f:b2:d0:c4:88:ba:d1:0a:ce:f8:32:5e:03:fb:28:aa:ec:ce:
01:ef:83:10:7f:4e:dc:94:7c:5c:ca:09:d5:00:f6:67:fc:13:
bd:14:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 05:45:19 2025 by rpki-client