Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OOhCjGJwSuogdvkmAowhnzZtPwc.roa
File: OOhCjGJwSuogdvkmAowhnzZtPwc.roa (raw, json)
Hash identifier: pqvqT/gsjW5pAnyOkFiZwobwRRM8lQrsIPUquLr7/1M=
Subject key identifier: 38:E8:42:8C:62:70:4A:EA:20:76:F9:26:02:8C:21:9F:36:6D:3F:07
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01999BA8EDC33AF18A8C22FA48F65C702048
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OOhCjGJwSuogdvkmAowhnzZtPwc.roa
Signing time: Tue 30 Sep 2025 17:26:03 +0000
ROA not before: Tue 30 Sep 2025 17:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.58.52.0/24 maxlen: 24
31.58.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9b:a8:ed:c3:3a:f1:8a:8c:22:fa:48:f6:5c:70:20:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 30 17:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38e8428c62704aea2076f926028c219f366d3f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:2a:b0:c9:52:9f:4c:a9:18:bb:90:dc:f0:
c3:71:4b:47:4e:25:aa:23:5d:f2:35:b4:ec:9d:c8:
fc:bf:0d:62:4c:6d:84:01:06:f0:d5:60:3c:b0:35:
a6:a6:a7:35:28:47:8f:e5:7e:3d:89:08:41:89:e6:
c3:1f:2c:b6:4d:4a:f1:62:44:c8:d8:0b:99:88:10:
4c:d2:cf:b0:10:f7:9c:f5:df:dc:05:9e:52:9e:1b:
77:b9:b0:27:e1:63:5f:ee:37:ae:c9:4b:76:ae:03:
7a:87:73:3a:47:59:75:d8:fe:8e:2f:4f:cb:f9:36:
3e:67:18:d7:c4:2d:37:96:d6:97:03:0f:09:10:cc:
64:83:e9:97:d4:1f:bc:14:00:42:9d:0f:f0:f5:a6:
33:bf:df:e9:ba:bb:a4:14:f7:fe:c6:5f:52:c8:90:
de:a4:bd:b2:fe:33:e0:c9:07:d3:a3:a9:58:4b:9f:
0e:f8:a4:8a:30:4b:73:fa:1b:ec:cb:ee:5f:23:47:
12:7c:21:97:98:58:0d:ff:ee:cc:6c:b0:ad:5a:b5:
12:ec:ab:96:3d:72:e8:ea:8e:05:92:fb:19:85:db:
47:26:10:b5:cd:89:5d:81:c0:0b:f2:cf:9d:e7:c9:
d2:de:27:99:86:b5:4c:01:6c:fa:28:99:aa:db:1a:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E8:42:8C:62:70:4A:EA:20:76:F9:26:02:8C:21:9F:36:6D:3F:07
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OOhCjGJwSuogdvkmAowhnzZtPwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.131.0/24
31.57.150.0/24
31.58.52.0/24
31.58.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a1:95:0d:66:40:d1:6c:99:b4:02:a2:0c:1e:b8:63:2e:ec:
4e:75:b5:d7:7b:1f:94:f9:dd:20:31:28:e2:f2:ab:56:81:ad:
c7:aa:17:8a:0d:a5:94:f8:e1:2a:30:e9:e0:a0:d2:8f:e5:76:
95:20:30:18:9c:c2:b9:c7:5a:c4:3c:11:1a:bd:64:ce:d7:9c:
63:5b:5a:20:15:10:35:45:10:eb:a8:74:37:a2:e9:41:a2:30:
03:e3:eb:6a:7a:31:d2:e7:93:bf:12:90:b9:5b:24:e0:80:da:
08:2b:cf:3f:1f:b1:b1:fc:d0:f6:75:e4:e0:2d:62:19:a1:01:
60:61:87:01:87:53:65:12:80:c0:98:6e:69:b9:dc:40:ed:a0:
11:ed:c3:0a:30:62:eb:a7:f9:09:8b:9f:41:95:1c:0a:bf:8f:
ff:5e:18:d4:b3:f9:7e:80:0c:e7:da:9f:66:95:eb:ff:13:81:
9a:ba:bb:bb:49:49:0c:c7:a9:71:be:47:19:f8:52:5f:e6:a4:
50:d5:61:b1:ba:7c:49:4a:25:2f:44:55:fc:40:38:75:1d:fc:
00:9d:b4:4d:21:0d:45:48:ba:74:ea:11:e6:77:5d:89:f3:5b:
f7:ef:7d:bf:3f:0a:83:d9:ee:21:bc:12:9d:61:84:fd:ce:c7:
db:81:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:56:25 2025 by rpki-client