Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vnqb8YLdT5M2OmDN190LXmLTNh0.roa
File: Vnqb8YLdT5M2OmDN190LXmLTNh0.roa (raw, json)
Hash identifier: +KfgZFor1e0kslvR8jNPl9xoIUEL7lltDAwfsDTOINU=
Subject key identifier: 56:7A:9B:F1:82:DD:4F:93:36:3A:60:CD:D7:DD:0B:5E:62:D3:36:1D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01990BFC23F20EABE11FE33B9527137FBA08
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vnqb8YLdT5M2OmDN190LXmLTNh0.roa
Signing time: Tue 02 Sep 2025 19:51:37 +0000
ROA not before: Tue 02 Sep 2025 19:51:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 31.57.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:fc:23:f2:0e:ab:e1:1f:e3:3b:95:27:13:7f:ba:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 19:51:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567a9bf182dd4f93363a60cdd7dd0b5e62d3361d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:19:d1:53:2c:93:65:3c:a0:ba:d2:db:57:
0d:9b:dc:0b:13:93:52:53:81:5a:07:2e:1d:53:6a:
26:8e:46:b3:62:e3:34:4d:2c:b8:f2:b1:14:4e:3e:
02:44:76:4f:64:35:73:37:be:e1:64:00:cc:49:6e:
da:9d:c8:2a:8a:f9:f8:e5:3c:af:60:59:ff:d6:54:
53:5b:2c:e3:e3:44:39:00:45:95:08:26:26:63:69:
86:b6:fd:2c:eb:ef:75:b1:5d:df:9f:0d:64:17:1e:
3d:39:ba:b6:83:9b:8d:b7:4d:b5:d7:b8:fd:3c:e3:
57:d9:30:b8:0f:47:89:e2:26:d6:dd:22:af:1d:fa:
c9:94:e5:21:bc:55:30:03:2a:a1:67:fb:e1:6e:bf:
cf:6e:1b:a7:81:f6:2b:6c:14:43:68:4f:4d:16:eb:
f3:37:34:de:9d:d2:5f:f7:14:d5:c1:10:9a:1b:22:
bd:66:85:ba:80:5d:cc:cc:0e:cb:75:79:b2:97:5e:
b8:e9:9a:77:ff:51:d1:f3:aa:8f:a0:4d:00:50:d8:
90:66:39:13:69:d6:26:69:68:5b:e4:c4:71:1e:e0:
97:e8:23:ce:6a:06:b4:3c:a4:5d:77:ae:a1:f0:2b:
92:5c:76:cc:67:d9:86:01:55:d4:1c:22:61:f5:76:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7A:9B:F1:82:DD:4F:93:36:3A:60:CD:D7:DD:0B:5E:62:D3:36:1D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vnqb8YLdT5M2OmDN190LXmLTNh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.39.0/24
Signature Algorithm: sha256WithRSAEncryption
53:59:3d:84:ff:fd:1d:b0:1e:84:37:e7:42:05:b4:dc:7d:c1:
f0:bf:0a:b8:0b:27:d8:39:27:e1:3a:64:cc:35:da:8e:9a:18:
84:12:4d:0f:94:9a:d8:f0:d7:16:9c:db:b7:34:1b:53:1a:9e:
79:47:cc:12:24:f4:34:58:8f:12:3d:99:1c:d3:31:e1:46:26:
99:af:ea:9f:d7:7b:29:44:ca:63:c1:4d:db:85:5b:09:57:33:
b4:e9:f7:b0:2d:46:48:53:4a:39:2e:be:b5:d6:51:63:b9:12:
40:01:ea:7d:04:ab:29:f4:21:8d:c5:85:b8:e7:b8:81:78:df:
d6:65:08:ba:68:95:81:91:75:a4:0d:28:d0:10:5d:5b:c1:ab:
5b:07:03:e6:39:d3:65:31:bd:f2:92:ce:32:06:f1:ba:1d:c5:
05:7b:5d:a1:c1:ec:a9:eb:0d:38:bb:1e:c1:93:55:66:a4:b6:
4b:70:85:72:8f:31:70:c9:c5:13:0e:c7:ae:bf:c1:b9:ce:d0:
a5:ab:ea:09:8e:af:62:43:97:7f:75:cd:cd:45:ab:01:81:f5:
5d:80:67:a2:82:0b:26:a8:f1:b0:6f:10:78:7d:a9:3b:6d:0a:
e8:a0:e8:f6:c2:c6:47:f5:74:fb:e6:22:51:af:e2:a2:4b:66:
57:dd:5a:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkL/CPyDqvhH+M7lScTf7oIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwOTAyMTk1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjdhOWJmMTgyZGQ0ZjkzMzYzYTYwY2RkN2RkMGI1ZTYyZDMzNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVAZ0VMsk2U8oLrS21cNm9wLE5NS
U4FaBy4dU2omjkazYuM0TSy48rEUTj4CRHZPZDVzN77hZADMSW7ancgqivn45Tyv
YFn/1lRTWyzj40Q5AEWVCCYmY2mGtv0s6+91sV3fnw1kFx49Obq2g5uNt02117j9
PONX2TC4D0eJ4ibW3SKvHfrJlOUhvFUwAyqhZ/vhbr/PbhungfYrbBRDaE9NFuvz
NzTendJf9xTVwRCaGyK9ZoW6gF3MzA7LdXmyl1646Zp3/1HR86qPoE0AUNiQZjkT
adYmaWhb5MRxHuCX6CPOaga0PKRdd66h8CuSXHbMZ9mGAVXUHCJh9XbxGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZ6m/GC3U+TNjpgzdfdC15i0zYdMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvVm5xYjhZTGRUNU0yT21ETjE5MExYbUxUTmgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzknMA0G
CSqGSIb3DQEBCwUAA4IBAQBTWT2E//0dsB6EN+dCBbTcfcHwvwq4CyfYOSfhOmTM
NdqOmhiEEk0PlJrY8NcWnNu3NBtTGp55R8wSJPQ0WI8SPZkc0zHhRiaZr+qf13sp
RMpjwU3bhVsJVzO06fewLUZIU0o5Lr611lFjuRJAAep9BKsp9CGNxYW457iBeN/W
ZQi6aJWBkXWkDSjQEF1bwatbBwPmOdNlMb3yks4yBvG6HcUFe12hweyp6w04ux7B
k1VmpLZLcIVyjzFwycUTDseuv8G5ztClq+oJjq9iQ5d/dc3NRasBgfVdgGeiggsm
qPGwbxB4fak7bQrooOj2wsZH9XT75iJRr+KiS2ZX3Vpj
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:50 2025 by rpki-client