Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KAV8d2IZ_hSwvslHaqsoYizl9Es.roa
File: KAV8d2IZ_hSwvslHaqsoYizl9Es.roa (raw, json)
Hash identifier: VXsHDKNQdRelKYW28fvDMwf9dZPuC5kMsq1vrZwuXKw=
Subject key identifier: 28:05:7C:77:62:19:FE:14:B0:BE:C9:47:6A:AB:28:62:2C:E5:F4:4B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198FEC7173DE9B9DC327226BC8A0B7F5231
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KAV8d2IZ_hSwvslHaqsoYizl9Es.roa
Signing time: Sun 31 Aug 2025 06:18:37 +0000
ROA not before: Sun 31 Aug 2025 06:18:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212336
IP address blocks: 31.57.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fe:c7:17:3d:e9:b9:dc:32:72:26:bc:8a:0b:7f:52:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 31 06:18:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28057c776219fe14b0bec9476aab28622ce5f44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:c7:fd:18:67:80:d4:30:83:cd:03:c3:90:
33:86:10:50:da:b8:1d:c1:6b:8d:3a:90:21:9f:c1:
ee:2c:b9:13:f6:b6:d6:82:7d:de:d4:4c:e3:d7:35:
31:1d:f4:16:2b:b2:6e:8c:0f:5b:66:f4:6a:42:7d:
5f:71:41:ce:82:8c:b2:98:89:a0:91:90:fd:17:c9:
3e:11:02:dc:32:d1:1b:25:d9:b5:25:84:97:eb:7e:
1f:bd:2d:31:7d:92:1b:27:e0:d3:02:a7:59:83:08:
8f:05:74:e2:d4:bd:87:55:4c:f2:84:fc:9f:17:f5:
68:47:16:b8:77:7c:fa:b9:d1:ec:d0:69:e2:ba:83:
97:ff:2f:6a:99:30:f4:b5:3c:8d:b4:d1:0d:fb:17:
0d:2d:9b:bc:ad:c6:58:fc:1d:9f:9e:a3:74:1c:b0:
5f:ea:53:d6:41:6e:28:e6:60:f5:e3:03:80:e0:1a:
43:e7:86:2e:fc:9d:4e:49:f1:e3:c3:ef:33:4d:44:
d8:77:25:71:77:bc:e8:65:e7:19:d8:31:5b:15:00:
c8:e3:76:a0:ee:8d:ae:a9:c0:0f:fa:9c:e3:7b:f7:
ed:70:30:86:cc:79:ab:82:3c:bd:a6:14:69:42:c8:
af:8f:e8:02:42:5f:4f:b7:77:4d:c3:9a:76:23:e5:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:7C:77:62:19:FE:14:B0:BE:C9:47:6A:AB:28:62:2C:E5:F4:4B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/KAV8d2IZ_hSwvslHaqsoYizl9Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.172.0/24
Signature Algorithm: sha256WithRSAEncryption
47:19:10:bf:0d:79:cc:1c:f4:23:5a:55:c1:7f:4d:4a:a5:53:
8a:9d:37:5b:39:24:a4:4a:db:7b:c3:8d:c0:0f:d2:84:9d:2a:
fb:77:21:78:1b:81:e1:c7:15:d3:28:ef:75:56:99:f7:04:09:
2c:87:89:2d:ff:bd:eb:d7:18:60:d5:77:41:32:ab:0a:a9:7b:
42:88:ae:ad:a6:97:45:c9:6f:6a:cc:04:ea:d9:c6:bf:98:32:
86:51:65:d9:61:22:2b:dc:fb:78:e4:09:c8:a2:b6:bf:dd:64:
bb:4b:66:f7:c9:bc:23:7a:ba:04:f5:06:d1:67:73:48:d4:17:
0f:10:04:7d:22:e6:7b:c8:15:d0:3a:f6:c0:1f:6c:be:4c:b0:
f7:83:c5:2a:f8:fc:86:d3:37:fd:b1:c9:a0:54:fa:03:a6:31:
95:1a:12:09:40:9b:01:51:38:79:06:ad:23:4a:67:25:fa:5f:
c0:04:b6:a9:97:e5:1d:9c:ad:54:cd:62:9f:79:2b:5b:c0:9a:
49:dc:22:87:ca:ab:97:e7:c4:f8:03:8d:74:db:17:3e:72:c7:
b7:f4:ce:bf:c5:08:40:35:59:33:4c:cc:21:75:d5:7f:14:8d:
77:85:b5:f9:28:03:c5:36:3c:aa:f5:11:e8:b2:cc:ff:c6:26:
27:29:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 11:32:47 2025 by rpki-client