Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rpz9C-FPeb6KEekkqx-0TSl4E-g.roa
File: Rpz9C-FPeb6KEekkqx-0TSl4E-g.roa (raw, json)
Hash identifier: IuXtWXcjRzi+jOtJ2a6+WN4aRi2Ef2j+4r1SxRSqQnA=
Subject key identifier: 46:9C:FD:0B:E1:4F:79:BE:8A:11:E9:24:AB:1F:B4:4D:29:78:13:E8
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197B08CBDE5FD0EE5414E62A59B4CA44807
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rpz9C-FPeb6KEekkqx-0TSl4E-g.roa
Signing time: Fri 27 Jun 2025 08:41:43 +0000
ROA not before: Fri 27 Jun 2025 08:41:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137564
IP address blocks: 31.58.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 16:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:8c:bd:e5:fd:0e:e5:41:4e:62:a5:9b:4c:a4:48:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 27 08:41:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=469cfd0be14f79be8a11e924ab1fb44d297813e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:b4:d0:3e:f5:d9:c1:16:3c:46:19:49:65:
19:80:c0:a2:8d:29:3a:08:b6:1a:dd:79:39:f1:da:
0d:b2:b1:30:9c:a8:0a:64:6b:5c:d5:d4:85:22:8d:
82:e3:b5:50:e8:ab:7b:34:5a:5a:99:a5:74:28:f5:
a5:7f:ed:ae:8c:f0:bf:ef:fd:ae:ad:80:6b:63:80:
e1:72:c8:85:99:dc:b6:39:2c:19:5c:f3:96:d4:30:
1f:12:d2:a6:ee:2c:b5:cd:70:5d:bb:ba:e3:0b:59:
91:c8:bd:a5:5a:16:30:5e:c0:51:ae:e1:ab:98:7e:
15:72:e4:97:97:e4:b9:e8:3b:2c:92:1e:57:ce:29:
75:02:6b:da:94:c6:6a:44:8d:8b:10:02:1f:78:6b:
04:82:9d:48:40:da:23:87:74:49:4b:83:91:58:eb:
d4:56:e1:ea:fc:43:b0:24:87:06:b7:ce:b8:2c:81:
ce:52:8c:28:69:c8:b3:77:6b:65:00:65:88:48:67:
ef:b7:59:88:72:34:2c:25:ff:c6:12:5b:c7:fa:60:
ef:8c:e7:f8:6f:b0:6c:82:58:43:33:7e:a3:8c:ec:
c0:31:8a:0b:7f:b8:8c:d5:63:81:9d:98:3b:31:f9:
ff:7b:f0:a2:b9:69:d2:6a:39:03:de:33:21:af:dc:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:FD:0B:E1:4F:79:BE:8A:11:E9:24:AB:1F:B4:4D:29:78:13:E8
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Rpz9C-FPeb6KEekkqx-0TSl4E-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:10:20:0a:04:e7:1d:e2:c3:ea:c0:f3:f8:e9:0b:02:86:42:
20:01:3d:89:9b:b3:f3:3f:30:32:94:01:95:cd:59:27:e3:7d:
44:e5:d1:91:51:ff:c6:d2:62:f5:a9:42:fb:23:b5:7c:1b:5a:
68:b7:19:cf:d5:f2:45:ee:a1:d0:b0:17:6f:71:bc:3e:4d:bb:
e5:ab:2a:61:57:72:dc:2e:40:a7:1d:4e:a4:e5:90:08:bc:35:
79:bf:be:f3:d5:e0:da:48:1c:3e:a4:f3:30:e0:47:15:54:59:
91:55:61:9f:96:43:e6:a7:79:a1:70:9a:b4:7c:42:d4:96:0c:
7e:a3:32:ec:22:fb:60:cd:d5:ef:62:c4:83:86:13:5c:c2:d4:
63:00:61:34:50:28:6d:42:51:d2:b1:95:f1:da:62:ae:b1:93:
51:0e:4a:07:24:9a:2d:e1:42:eb:9b:8c:77:3c:cc:7a:8e:d5:
e8:11:b8:38:9c:57:4b:22:a9:9e:14:6e:d9:14:e0:9c:00:3c:
ae:66:78:d1:73:89:b8:bd:f2:d0:91:2a:a8:92:94:72:57:a5:
ab:bb:3c:34:ad:0c:5c:54:55:7c:69:a4:5e:eb:2a:1e:1a:1e:
73:4d:db:17:af:c5:a0:5d:a6:fd:35:ea:79:fc:49:fc:64:11:
4c:c7:78:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:15:01 2025 by rpki-client