Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cJckkdmn4iJ40Y80Jnau8KYAy1E.roa
File: cJckkdmn4iJ40Y80Jnau8KYAy1E.roa (raw, json)
Hash identifier: GJB98ZZcfNkVF4r7i/alxRgb3Skx5W5laHZ/FreswZg=
Subject key identifier: 70:97:24:91:D9:A7:E2:22:78:D1:8F:34:26:76:AE:F0:A6:00:CB:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01992A7093F28DB464DD0AD8D14FA7446EAF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cJckkdmn4iJ40Y80Jnau8KYAy1E.roa
Signing time: Mon 08 Sep 2025 17:47:24 +0000
ROA not before: Mon 08 Sep 2025 17:47:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 31.58.49.0/24 maxlen: 24
31.58.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2a:70:93:f2:8d:b4:64:dd:0a:d8:d1:4f:a7:44:6e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 8 17:47:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70972491d9a7e22278d18f342676aef0a600cb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:28:81:04:e7:7b:29:7b:dd:99:cd:f0:2d:
c5:10:f6:89:60:c0:df:c8:e1:8f:0d:d9:a6:6d:d3:
61:f3:3f:6f:0f:da:61:94:c7:78:32:1e:19:ff:ac:
bd:d7:7a:3b:65:1a:05:8e:9c:7c:8f:8c:48:07:45:
e7:44:90:0d:2a:49:29:90:5f:49:a3:37:a0:df:3b:
f3:1d:b0:ab:6a:75:25:eb:94:7b:4d:32:ea:39:77:
47:96:77:29:19:20:ae:26:ac:33:d5:b6:c4:38:2a:
f5:d3:19:f1:1b:7e:3a:7a:f8:9b:74:af:ff:10:a8:
5c:74:4d:c2:93:ef:7a:3c:99:6d:03:5f:7e:7e:02:
73:bd:ba:b2:53:61:77:19:71:b9:b0:bc:2b:e5:ed:
d3:e7:8a:f2:a4:d9:66:db:c1:7d:d9:e3:18:3a:ea:
8f:ed:c5:08:41:72:b7:17:0f:43:8c:58:bd:95:48:
d5:3b:1d:0e:58:43:71:df:17:98:f5:c3:bd:f4:44:
a2:86:45:58:a2:5e:26:8e:ed:ad:3c:12:ec:d0:bf:
7a:21:42:06:fb:2d:d4:87:f7:a4:95:5d:f0:ab:de:
da:4e:c0:24:39:59:f1:8b:e6:b7:d6:a8:e3:26:c9:
87:8f:94:ad:20:01:f8:6a:e7:45:a1:c9:14:7a:48:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:24:91:D9:A7:E2:22:78:D1:8F:34:26:76:AE:F0:A6:00:CB:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cJckkdmn4iJ40Y80Jnau8KYAy1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.49.0/24
31.58.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:0e:45:66:6d:d0:75:98:8e:52:d9:e3:e7:93:53:45:63:3a:
da:5c:95:46:77:55:78:09:bc:97:0b:54:21:aa:c6:3a:fb:53:
19:61:c4:5d:25:9b:0d:30:59:65:75:ad:ca:fb:10:f6:7d:c3:
62:af:dd:99:45:e1:84:25:e3:ca:eb:e9:60:db:cd:89:dc:80:
9d:b3:45:93:d0:57:61:34:bb:3a:e1:54:d2:26:d5:0d:1a:1c:
e4:c1:cf:84:0e:cf:07:29:6c:65:75:40:29:3c:d0:18:60:bc:
a4:a9:73:ea:ab:8e:00:5c:22:5b:a1:30:47:35:2a:7d:c0:3c:
94:04:07:a7:a1:e6:f4:07:61:5a:85:91:c0:fe:fe:d7:68:d0:
dc:58:e8:f2:8a:a9:2b:80:ad:1f:d3:cd:e6:1f:b7:9e:b7:0b:
96:fc:5a:99:a4:44:24:9a:e5:0e:9c:d8:94:10:dd:ad:86:6d:
e4:58:88:41:29:c3:cd:2d:1b:0f:e7:5e:de:c6:29:df:0d:9b:
7a:4d:a4:f1:4f:ae:cb:b0:80:4f:e9:63:90:75:87:48:53:0f:
d2:c8:47:fb:c6:ff:6e:ed:d6:1c:50:d0:ac:1e:22:21:be:49:
ed:6b:67:5c:c8:eb:e2:61:41:50:8a:49:81:48:99:ed:43:41:
57:f9:f9:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZkqcJPyjbRk3QrY0U+nRG6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwOTA4MTc0NzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDk3MjQ5MWQ5YTdlMjIyNzhkMThmMzQyNjc2YWVmMGE2MDBjYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDQogQTneyl73ZnN8C3FEPaJYMDf
yOGPDdmmbdNh8z9vD9phlMd4Mh4Z/6y913o7ZRoFjpx8j4xIB0XnRJANKkkpkF9J
ozeg3zvzHbCranUl65R7TTLqOXdHlncpGSCuJqwz1bbEOCr10xnxG346evibdK//
EKhcdE3Ck+96PJltA19+fgJzvbqyU2F3GXG5sLwr5e3T54rypNlm28F92eMYOuqP
7cUIQXK3Fw9DjFi9lUjVOx0OWENx3xeY9cO99ESihkVYol4mju2tPBLs0L96IUIG
+y3Uh/eklV3wq97aTsAkOVnxi+a31qjjJsmHj5StIAH4audFockUekjKKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHCXJJHZp+IieNGPNCZ2rvCmAMtRMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvY0pja2tkbW40aUo0MFk4MEpuYXU4S1lBeTFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzoxAwQA
HzqpMA0GCSqGSIb3DQEBCwUAA4IBAQAvDkVmbdB1mI5S2ePnk1NFYzraXJVGd1V4
CbyXC1QhqsY6+1MZYcRdJZsNMFllda3K+xD2fcNir92ZReGEJePK6+lg282J3ICd
s0WT0FdhNLs64VTSJtUNGhzkwc+EDs8HKWxldUApPNAYYLykqXPqq44AXCJboTBH
NSp9wDyUBAenoeb0B2FahZHA/v7XaNDcWOjyiqkrgK0f083mH7eetwuW/FqZpEQk
muUOnNiUEN2thm3kWIhBKcPNLRsP517exinfDZt6TaTxT67LsIBP6WOQdYdIUw/S
yEf7xv9u7dYcUNCsHiIhvknta2dcyOviYUFQikmBSJntQ0FX+fn2
-----END CERTIFICATE-----
Generated at Sun Sep 14 08:24:52 2025 by rpki-client