Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xdd9OYO94qzSTI4HRBYK5yPsBpw.roa
File: Xdd9OYO94qzSTI4HRBYK5yPsBpw.roa (raw, json)
Hash identifier: zRBEfrHi/9seBZivJCfquDCuu7h3cKZs/3aopGiI7oM=
Subject key identifier: 5D:D7:7D:39:83:BD:E2:AC:D2:4C:8E:07:44:16:0A:E7:23:EC:06:9C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01990B6258CE5DD106F8EF25A027D42ED286
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xdd9OYO94qzSTI4HRBYK5yPsBpw.roa
Signing time: Tue 02 Sep 2025 17:03:38 +0000
ROA not before: Tue 02 Sep 2025 17:03:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211407
IP address blocks: 31.56.78.0/24 maxlen: 24
31.57.178.0/24 maxlen: 24
31.58.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 15:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:62:58:ce:5d:d1:06:f8:ef:25:a0:27:d4:2e:d2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 2 17:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dd77d3983bde2acd24c8e0744160ae723ec069c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:56:c9:54:4e:e7:8f:f1:c0:aa:28:fd:f5:
c6:35:2a:c1:e8:d2:cd:78:41:42:ba:44:33:db:7d:
01:20:17:70:be:e4:04:2a:e6:b6:2b:8e:8e:20:4b:
ab:f5:f8:2c:0d:83:7a:8d:df:64:42:1d:1b:f4:1b:
68:b6:1e:73:a3:57:3b:0e:58:37:53:f0:11:63:6e:
81:dc:c9:e1:63:38:02:58:d2:28:96:66:66:2a:57:
36:91:4c:71:ac:44:31:23:f8:f6:34:ed:0b:88:e4:
2d:9f:68:51:9d:9a:0e:99:ba:2c:3e:8a:a5:59:95:
17:ae:61:c6:0d:eb:1f:86:64:04:2e:c0:a5:81:63:
39:fa:04:00:0e:88:cd:97:04:85:a4:b6:93:90:04:
ba:05:74:99:a3:25:14:9b:91:42:f4:5c:fe:33:b0:
e0:2f:3d:1c:ef:9e:bb:a9:30:ea:7c:9c:f9:e3:0f:
63:04:1f:57:a1:de:08:ac:28:fb:f6:02:44:be:8e:
b8:24:4c:61:5d:cd:77:71:61:01:4f:c4:94:b8:18:
0c:21:e7:4b:3c:a3:02:9a:16:30:af:f6:78:0e:0b:
fc:b9:7b:6c:8a:b6:fe:68:ef:79:40:75:ef:36:95:
11:39:45:7c:49:30:ba:02:65:28:56:49:82:5a:7e:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:7D:39:83:BD:E2:AC:D2:4C:8E:07:44:16:0A:E7:23:EC:06:9C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Xdd9OYO94qzSTI4HRBYK5yPsBpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.78.0/24
31.57.178.0/24
31.58.158.0/24
Signature Algorithm: sha256WithRSAEncryption
13:82:60:9f:86:1e:73:b5:28:bf:de:62:f7:5f:20:c7:85:7c:
0c:6a:d0:55:9e:d7:70:62:a2:be:7a:f0:d5:5e:ce:96:b5:87:
b0:3c:13:3c:47:a6:07:98:e4:df:47:94:0d:b7:f9:0b:b4:94:
0e:ec:2d:e7:a7:4f:90:cf:15:6a:43:f9:03:27:a8:61:8f:36:
1c:5e:9f:ab:9d:cb:84:af:6f:0d:7e:72:29:f9:de:8c:68:76:
63:84:4a:85:c0:4a:71:80:ec:71:28:99:2c:85:8c:dc:c0:f2:
a9:fb:2b:c3:e9:62:e9:21:46:75:77:da:b1:50:22:e6:4f:00:
45:05:0e:fb:c4:5c:73:22:5e:a8:3d:cc:2d:9f:53:c7:ca:f4:
a4:3b:18:48:81:4e:27:97:6e:25:01:6c:af:4b:b5:01:ad:1f:
da:25:5b:dd:93:22:67:11:6a:d7:e5:c8:a6:2c:9e:91:f6:1e:
7b:1e:f3:93:c1:78:02:4b:2d:b3:35:4e:65:8e:15:85:e4:d1:
46:ad:e7:e3:6e:ef:5f:a1:11:12:32:b7:25:e0:59:ca:be:80:
22:af:07:4d:5e:14:cb:ca:9a:54:e9:b1:53:60:00:ff:c5:d5:
bd:76:88:f1:de:55:89:29:c0:c7:fd:ae:e6:87:85:c9:0a:29:
d5:bc:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 00:32:42 2025 by rpki-client