Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NW67rpjnYIw11Is4Lmfdnq1x0cw.roa
File: NW67rpjnYIw11Is4Lmfdnq1x0cw.roa (raw, json)
Hash identifier: GJusyHMdjjbNPnHxkUs20gfvlIsOZutnVyZpUHYDp38=
Subject key identifier: 35:6E:BB:AE:98:E7:60:8C:35:D4:8B:38:2E:67:DD:9E:AD:71:D1:CC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019735BFE726A8A053F31E0E6660BC17E76F
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NW67rpjnYIw11Is4Lmfdnq1x0cw.roa
Signing time: Tue 03 Jun 2025 12:24:18 +0000
ROA not before: Tue 03 Jun 2025 12:24:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212633
IP address blocks: 31.57.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:bf:e7:26:a8:a0:53:f3:1e:0e:66:60:bc:17:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 3 12:24:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=356ebbae98e7608c35d48b382e67dd9ead71d1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:f8:77:45:bd:d7:42:15:4f:0e:f6:f7:ca:
61:8a:c1:40:80:f1:57:42:06:de:81:63:f9:24:30:
47:4a:af:89:7f:7b:7d:39:bf:64:3f:ba:5f:85:d1:
78:1f:e4:8c:27:3d:26:f3:7b:82:a4:eb:38:78:c6:
ae:0c:9d:5a:1b:a8:84:aa:2b:4f:b4:e5:89:27:b1:
41:bb:1e:12:5e:2f:81:8b:9a:d3:2f:b7:3b:d2:c9:
60:d7:00:10:53:c0:91:b0:c1:51:58:4c:ff:72:af:
0a:2a:34:c6:c4:c5:83:a1:92:de:c9:88:cb:a6:4a:
0a:db:4b:5b:bd:8e:cb:16:0e:f6:a2:3d:82:28:4d:
ab:f2:f3:d3:5f:02:63:4d:90:aa:af:36:46:c2:8a:
d0:95:9d:98:4c:2e:ed:eb:ba:fd:34:8a:c6:58:87:
91:c8:8e:5c:41:e7:4b:27:32:80:4c:09:9c:f4:28:
1e:bf:e7:17:79:f1:e7:7d:c3:8c:f6:75:47:a7:65:
fb:07:8f:85:f7:d8:7e:bc:34:64:33:36:58:47:7b:
97:c2:be:d9:7b:8e:11:ad:f7:08:a4:ab:02:27:d9:
04:36:e9:da:6f:8b:09:df:3f:f2:50:89:3e:ae:84:
76:71:9d:0b:da:93:2d:3c:d7:60:72:1c:1f:53:ba:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6E:BB:AE:98:E7:60:8C:35:D4:8B:38:2E:67:DD:9E:AD:71:D1:CC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NW67rpjnYIw11Is4Lmfdnq1x0cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:05:f2:87:07:d0:f1:f7:fd:53:11:78:2d:42:87:bc:bb:f4:
0c:12:73:ee:32:ac:93:1d:32:b7:d3:69:c9:c8:71:2c:48:b8:
f1:17:f8:84:94:d7:a5:fc:fb:3d:fb:1d:dd:86:77:2e:82:ec:
b5:94:21:a2:7c:9a:81:06:85:94:0c:3c:c2:d0:3a:07:29:fb:
d3:9c:f5:fe:bd:b1:16:55:bb:63:3c:f1:53:11:7e:b3:cb:8b:
dd:9e:a8:73:2a:7e:9f:f2:b2:86:f3:55:01:d1:95:a7:e8:ea:
7f:30:d7:08:d8:59:20:f3:a7:b6:94:c8:f9:6d:0d:24:a4:86:
20:ae:88:4a:1c:81:3d:7e:5e:12:e5:99:6d:2a:74:4f:1f:b2:
2a:fc:e3:3c:49:ce:9c:b9:a7:c8:d3:4b:bc:55:5f:00:57:db:
6b:db:11:14:24:81:54:71:cb:1b:ae:b8:78:35:8b:2f:e7:c1:
00:8b:39:29:aa:f8:50:66:ca:9c:42:22:11:9c:08:45:32:1b:
6f:1a:51:f2:e1:0d:b2:9a:d2:ef:95:18:c9:9b:a2:9b:c6:60:
4b:ed:be:7f:c4:84:5d:64:de:10:c6:3f:12:a3:54:d4:e1:12:
2f:cd:50:6a:4c:d7:43:6d:65:34:8f:7d:81:8a:63:96:c5:6d:
c5:ad:29:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZc1v+cmqKBT8x4OZmC8F+dvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjAzMTIyNDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTZlYmJhZTk4ZTc2MDhjMzVkNDhiMzgyZTY3ZGQ5ZWFkNzFkMWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFX4d0W910IVTw7298phisFAgPFX
QgbegWP5JDBHSq+Jf3t9Ob9kP7pfhdF4H+SMJz0m83uCpOs4eMauDJ1aG6iEqitP
tOWJJ7FBux4SXi+Bi5rTL7c70slg1wAQU8CRsMFRWEz/cq8KKjTGxMWDoZLeyYjL
pkoK20tbvY7LFg72oj2CKE2r8vPTXwJjTZCqrzZGworQlZ2YTC7t67r9NIrGWIeR
yI5cQedLJzKATAmc9Cgev+cXefHnfcOM9nVHp2X7B4+F99h+vDRkMzZYR3uXwr7Z
e44RrfcIpKsCJ9kENunab4sJ3z/yUIk+roR2cZ0L2pMtPNdgchwfU7o+SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVuu66Y52CMNdSLOC5n3Z6tcdHMMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvTlc2N3Jwam5ZSXcxMUlzNExtZmRucTF4MGN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmLMA0G
CSqGSIb3DQEBCwUAA4IBAQB/BfKHB9Dx9/1TEXgtQoe8u/QMEnPuMqyTHTK302nJ
yHEsSLjxF/iElNel/Ps9+x3dhncuguy1lCGifJqBBoWUDDzC0DoHKfvTnPX+vbEW
VbtjPPFTEX6zy4vdnqhzKn6f8rKG81UB0ZWn6Op/MNcI2Fkg86e2lMj5bQ0kpIYg
rohKHIE9fl4S5ZltKnRPH7Iq/OM8Sc6cuafI00u8VV8AV9tr2xEUJIFUccsbrrh4
NYsv58EAizkpqvhQZsqcQiIRnAhFMhtvGlHy4Q2ymtLvlRjJm6KbxmBL7b5/xIRd
ZN4Qxj8So1TU4RIvzVBqTNdDbWU0j32BimOWxW3FrSl0
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:50 2025 by rpki-client