Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U5k_YOIuitlo31ojoLGF56XYyUU.roa
File: U5k_YOIuitlo31ojoLGF56XYyUU.roa (raw, json)
Hash identifier: BZ1a2rAtuaE8lSrgXLB/F1BTQmraXyQmSQMNrKsJU64=
Subject key identifier: 53:99:3F:60:E2:2E:8A:D9:68:DF:5A:23:A0:B1:85:E7:A5:D8:C9:45
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199332B856E39C7D52B1BCF703C9192B824
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U5k_YOIuitlo31ojoLGF56XYyUU.roa
Signing time: Wed 10 Sep 2025 10:28:34 +0000
ROA not before: Wed 10 Sep 2025 10:28:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205896
IP address blocks: 31.56.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:2b:85:6e:39:c7:d5:2b:1b:cf:70:3c:91:92:b8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 10:28:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53993f60e22e8ad968df5a23a0b185e7a5d8c945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:c8:90:44:33:19:ad:b2:82:81:b3:48:f9:
ce:be:30:44:6d:b5:ea:83:59:03:5c:61:b2:3c:90:
c4:ed:1d:5c:c3:68:5f:2c:70:5e:77:da:b0:88:43:
f2:10:0c:fa:54:fa:bb:e9:1f:e8:37:ee:f2:1e:1b:
34:60:e7:ec:3c:1d:76:72:c0:c6:80:5b:01:5d:16:
c6:01:77:4f:22:4c:d2:4e:b0:3b:c4:3d:ae:ab:ab:
76:a0:37:2e:d7:d0:c7:f4:1e:ba:3b:4a:06:7e:f1:
c4:45:4b:50:44:ba:c5:e0:a8:a5:d2:4d:a4:6a:df:
4f:86:1d:ca:41:5c:74:6f:a3:6c:0b:81:eb:e9:3f:
f0:21:e9:6e:03:44:a0:d9:ae:2e:c6:3f:33:71:76:
95:5f:85:7a:ac:2b:95:5f:8e:47:8e:c0:f5:0a:32:
53:41:1d:1a:6a:34:3e:cd:fb:bb:e5:7d:6b:e4:f3:
b1:df:fc:ff:83:a3:f8:ea:b0:0e:d2:d2:49:62:27:
80:13:a4:59:c8:85:ba:e2:00:65:5c:67:da:4a:22:
a9:12:5e:e7:7c:7f:20:c5:36:1c:ba:46:27:01:ac:
46:b9:47:5c:3c:b8:d4:04:3b:59:0c:6f:5a:80:69:
64:2e:c6:bd:62:10:49:93:dd:2b:0c:3e:17:a2:f9:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:3F:60:E2:2E:8A:D9:68:DF:5A:23:A0:B1:85:E7:A5:D8:C9:45
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/U5k_YOIuitlo31ojoLGF56XYyUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:83:05:9e:8b:8e:81:8f:25:ac:d9:61:6b:bf:87:e8:6d:b1:
e7:42:f9:d8:3b:89:90:ec:3d:95:d3:51:04:5f:ab:97:69:79:
1a:c6:5f:93:2f:ac:24:dd:40:de:48:c4:96:fe:11:8c:e3:6e:
0b:98:3d:fa:a5:27:3d:5e:27:6d:81:e1:81:39:cc:fa:27:b4:
a8:2d:a0:6f:4b:9b:cd:f8:3e:c9:e9:1f:92:23:93:31:95:d9:
be:07:4d:76:64:28:40:2f:9a:2c:c3:fa:1b:c3:cf:f0:35:36:
0f:26:23:f4:37:c4:5c:88:4b:8d:d4:06:c3:c6:af:68:c1:61:
c5:87:62:ab:54:bb:f0:ec:f1:c2:60:f6:1b:49:f3:65:d8:dc:
b3:b5:4e:94:45:eb:9c:68:ce:2f:22:f3:06:0c:c7:b8:7c:d3:
8d:9a:5c:82:e0:30:8b:e6:ef:e3:90:12:1a:8d:cd:2b:5b:bf:
54:8f:a6:a7:c3:21:a0:59:06:c5:2f:64:1d:62:c3:86:27:c9:
f9:6c:60:21:d2:7f:96:ea:3e:57:30:16:b2:0d:5c:d3:92:22:
49:eb:49:88:e4:d4:6d:a3:22:63:1e:77:e3:d7:4d:f9:0e:76:
e5:a0:69:18:8d:3b:b8:74:bd:ab:c8:61:45:5d:5f:5c:fd:73:
18:03:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 06:45:56 2025 by rpki-client