Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e8VDWAGtZvTJwmWTu5cyRjhhwz4.roa
File: e8VDWAGtZvTJwmWTu5cyRjhhwz4.roa (raw, json)
Hash identifier: NSb2Cr7vMJ5Wvw+atbVoDv+c5nElbUkXaf2he6RTBFE=
Subject key identifier: 7B:C5:43:58:01:AD:66:F4:C9:C2:65:93:BB:97:32:46:38:61:C3:3E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198E656D02EA495D0C83FE320D00AEE62CF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e8VDWAGtZvTJwmWTu5cyRjhhwz4.roa
Signing time: Tue 26 Aug 2025 12:25:05 +0000
ROA not before: Tue 26 Aug 2025 12:25:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137564
IP address blocks: 31.58.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:56:d0:2e:a4:95:d0:c8:3f:e3:20:d0:0a:ee:62:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 26 12:25:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bc5435801ad66f4c9c26593bb9732463861c33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:78:e6:b0:97:44:f7:e2:71:9b:cb:da:bd:0f:
ef:fc:2d:bf:2f:88:85:7d:2e:6a:1a:d7:b9:5c:6a:
06:e2:fc:8c:10:d1:e6:52:52:dc:a6:73:4c:9e:21:
b6:19:ca:65:5b:ea:d7:4e:50:7b:ea:ed:19:60:d6:
fa:e7:61:1f:36:2d:69:11:41:78:a8:f9:ea:b5:cd:
62:31:17:dd:17:d8:22:5e:df:49:0a:e0:f5:4f:8f:
09:40:13:7a:d9:f9:71:e2:8c:30:53:58:a8:fd:80:
dd:0e:9d:71:fc:00:ad:72:da:19:e8:e0:fa:d7:ad:
24:b9:d5:85:17:ef:1b:4c:62:ba:43:2b:68:41:38:
c3:4c:af:12:91:19:23:a6:fa:af:51:e3:ee:fb:ac:
3c:03:c7:ed:a4:d6:a1:d8:70:73:96:a5:29:ba:89:
96:6d:57:56:ba:0a:1a:26:90:c9:5b:3d:12:c3:db:
7b:6a:38:73:08:ce:72:4e:05:3e:24:fe:78:2b:ea:
74:2a:cb:ef:5f:12:7f:1c:a2:7a:ce:da:94:b8:30:
50:48:2e:30:39:b1:d7:3e:f5:53:56:d6:e6:c0:c1:
0b:ff:45:bb:84:ac:ab:f4:0b:3c:6c:33:a5:59:d6:
23:a9:c2:47:17:82:cb:54:36:da:52:ea:ef:01:f0:
63:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:43:58:01:AD:66:F4:C9:C2:65:93:BB:97:32:46:38:61:C3:3E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/e8VDWAGtZvTJwmWTu5cyRjhhwz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.66.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ad:5e:83:d6:d1:2c:c1:c7:f4:ce:40:c7:96:48:75:32:76:
3e:76:aa:47:47:ad:6a:6b:6f:d5:95:6f:92:e9:5d:53:b3:37:
8d:7d:a2:fc:cf:43:b0:19:ab:c6:e6:7c:9a:c3:d9:4d:27:d5:
0a:04:20:fd:16:9e:7c:94:fa:ab:ae:cb:a7:60:1e:42:86:46:
b5:1f:92:7e:a5:53:ab:a0:65:fc:ce:ee:19:8e:04:6f:59:0b:
82:ef:79:c8:fe:28:2b:d5:77:64:aa:22:98:a9:20:30:50:e0:
ad:f3:83:1b:70:cb:d8:46:0e:b0:1f:98:09:c4:77:f8:e5:f3:
58:f7:6d:42:ea:06:41:86:42:7c:ef:0b:be:56:ad:91:b2:4b:
43:07:73:48:95:cc:6c:2e:2e:a7:8a:da:3f:65:72:05:56:0b:
20:97:08:b8:95:b4:c1:58:91:44:93:7c:fc:bf:34:e0:9c:08:
bf:66:b8:2d:e1:d0:a7:be:cf:97:91:74:12:00:dc:e4:7f:d4:
ee:a7:18:8c:b5:be:8b:94:65:1e:50:f7:70:49:0a:55:f3:9b:
39:10:83:da:99:13:79:9d:c6:c6:bf:ad:c6:9d:00:f8:72:51:
cf:8f:0b:56:56:7b:a2:b7:c4:f0:63:2c:c9:2b:e2:96:b4:08:
11:44:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 08:22:20 2025 by rpki-client