Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XehIyutkVyAujt5jRgvkepG_I5A.roa
File: XehIyutkVyAujt5jRgvkepG_I5A.roa (raw, json)
Hash identifier: 3Dju5qpvK4tB3n0JOin17yhPTBnirsUtHO+39Pmfn+g=
Subject key identifier: 5D:E8:48:CA:EB:64:57:20:2E:8E:DE:63:46:0B:E4:7A:91:BF:23:90
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198E67F1723CF251747D1B9C33C84B69713
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XehIyutkVyAujt5jRgvkepG_I5A.roa
Signing time: Tue 26 Aug 2025 13:09:05 +0000
ROA not before: Tue 26 Aug 2025 13:09:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213570
IP address blocks: 31.58.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:7f:17:23:cf:25:17:47:d1:b9:c3:3c:84:b6:97:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 26 13:09:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5de848caeb6457202e8ede63460be47a91bf2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:5f:02:5e:e5:28:4e:b1:e4:9a:ad:2f:8b:
a8:cf:f2:5f:06:c3:19:a9:0d:dc:c3:a2:b8:62:ec:
95:ca:e0:8a:80:be:67:be:9b:48:81:d3:6e:67:f4:
cf:fc:a5:52:fb:17:e6:65:74:e1:12:a7:6e:b2:af:
0c:dc:9a:47:e5:9d:84:01:2f:6f:07:76:51:6d:59:
38:5d:a5:bf:10:4e:ac:cc:8f:39:83:df:5b:a6:82:
4c:01:bb:e3:12:31:0c:ae:b4:e3:7a:0d:ee:63:9d:
d5:fb:14:fe:68:49:d1:df:32:7b:3e:91:78:14:bf:
99:6e:f4:4c:71:60:2d:d8:5e:6c:cb:7c:70:9f:41:
96:3d:1c:3a:ec:0e:29:dd:a4:5b:f1:ba:3b:62:07:
87:e9:98:be:9d:70:44:85:69:df:d0:5f:68:94:79:
cb:56:18:c8:08:b1:80:b0:41:29:ba:90:6b:ac:ac:
b3:eb:f8:41:9a:a8:bb:7e:a2:cd:2e:d9:0b:91:f6:
b9:91:d9:8c:07:8f:05:35:ce:64:58:e7:49:8e:07:
40:f7:40:5f:fb:75:d5:4c:a7:d7:a2:99:57:2a:c7:
49:d9:93:36:64:cb:d9:00:da:84:44:b7:3b:89:81:
d1:40:ff:7e:74:c3:dd:6f:40:e4:78:c0:0d:bd:df:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:48:CA:EB:64:57:20:2E:8E:DE:63:46:0B:E4:7A:91:BF:23:90
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/XehIyutkVyAujt5jRgvkepG_I5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bb:54:c0:e5:72:71:4b:fc:df:9e:c3:cb:f2:fd:e2:c3:31:
59:e5:a7:6d:6d:b5:69:5d:d3:c8:ac:ef:35:9c:e2:67:32:b5:
66:32:4e:1d:2e:20:12:35:d0:0b:91:1a:17:65:e4:8f:77:e5:
90:d4:19:7a:a7:58:0d:5e:3c:4b:58:45:8e:79:01:5d:15:c9:
83:b8:4e:d9:bf:3c:42:8e:e8:85:de:52:d0:37:95:b2:ee:26:
80:e1:73:ca:87:c0:07:16:d3:c0:c3:0c:4b:b5:bc:4c:6d:92:
fc:6c:84:bc:0d:2f:c1:78:79:2b:b4:2f:d8:1a:a4:9c:71:28:
43:f2:13:10:21:fa:c2:8f:7b:bd:a7:b0:f9:b6:06:cc:7e:99:
95:e5:00:e2:2b:32:57:ba:63:bd:e4:ff:b0:24:89:ff:94:b7:
c4:02:79:aa:80:f9:b1:79:52:6f:dc:b2:10:7f:e9:2e:ec:e5:
04:c2:39:ff:2f:18:db:3d:69:4a:6e:c0:78:f7:5b:5c:67:a2:
b0:e5:18:06:8e:85:c1:6e:82:68:45:fe:12:5a:96:59:fd:23:
60:9f:1c:bd:ca:11:de:1a:ae:6b:8d:9d:4b:65:d9:f7:7a:a4:
0f:17:ff:61:03:a0:bd:fa:34:11:8d:23:f5:92:e4:a3:66:50:
f8:e3:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 06:32:25 2025 by rpki-client