Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ecrBPN6cHxcWYGatHcxvxBBtJ5I.roa
File: ecrBPN6cHxcWYGatHcxvxBBtJ5I.roa (raw, json)
Hash identifier: pQOgkyagKljtMv8NCZ6ra3DxYVgYmoH7Gel0XG2ToG0=
Subject key identifier: 79:CA:C1:3C:DE:9C:1F:17:16:60:66:AD:1D:CC:6F:C4:10:6D:27:92
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01990625FF869F7AFF7DCB24399E3FB765F6
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ecrBPN6cHxcWYGatHcxvxBBtJ5I.roa
Signing time: Mon 01 Sep 2025 16:39:37 +0000
ROA not before: Mon 01 Sep 2025 16:39:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211011
IP address blocks: 31.56.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:06:25:ff:86:9f:7a:ff:7d:cb:24:39:9e:3f:b7:65:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 1 16:39:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79cac13cde9c1f17166066ad1dcc6fc4106d2792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:56:4c:e6:4a:06:97:6a:b7:a3:fe:93:24:
1d:c4:fa:6d:dc:c3:ee:29:87:ec:08:fc:02:42:7d:
b5:d6:c4:a5:17:b3:4c:27:e5:26:73:79:d0:43:85:
7f:ec:c9:87:b1:66:73:d4:6f:6a:52:09:7d:c1:65:
3d:04:eb:50:71:79:10:d4:9e:27:d7:ba:89:f3:28:
e2:e1:bc:85:e4:4d:44:be:c3:0e:7f:58:93:53:24:
3e:5f:43:78:f5:02:cc:1c:10:c8:fd:93:9e:e5:ef:
03:d0:dd:44:0b:4b:d2:d3:0c:66:a6:ba:34:ba:4d:
64:a1:92:3d:31:c5:b1:62:ca:85:d6:ca:42:4e:89:
7e:79:d5:0a:9c:8d:14:8a:50:78:65:fa:a7:84:df:
30:91:95:50:9e:d0:9a:7b:1e:0b:d4:95:b4:49:69:
e5:12:36:97:3e:cd:1c:24:d4:2b:a1:c5:7f:e7:ea:
f2:f2:13:da:91:92:3c:c7:3c:db:e9:a9:c3:ed:37:
8b:5c:b6:57:48:da:cb:33:83:62:bb:87:ed:42:ad:
33:ce:8d:c2:a6:e5:bc:bc:60:27:f5:bd:d2:39:88:
3b:1b:e3:55:ef:39:95:7b:21:a2:40:11:d0:c2:3c:
52:02:01:73:41:1f:65:94:08:9a:26:38:e4:a1:78:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CA:C1:3C:DE:9C:1F:17:16:60:66:AD:1D:CC:6F:C4:10:6D:27:92
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ecrBPN6cHxcWYGatHcxvxBBtJ5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.26.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:21:a2:22:11:e0:22:a3:af:f8:4b:81:93:51:c7:1c:ec:84:
48:64:92:2f:24:de:6d:32:32:32:2c:fa:39:4f:da:48:04:15:
0d:f2:53:ab:95:0b:8e:2e:65:d0:b3:9c:8e:02:a6:85:f6:20:
a9:9f:84:68:81:13:89:4d:f6:09:5d:b6:e7:ff:1d:24:0b:29:
1d:51:d8:6c:d5:41:f3:fb:ba:e5:7e:b3:3c:52:31:14:14:7b:
af:7e:41:c9:a2:a4:0d:00:1d:3f:55:df:c6:8f:85:46:22:40:
81:12:fb:1e:35:9c:5c:72:4c:11:dc:e0:ce:e5:b0:c2:18:cb:
a5:c8:4c:2d:a1:5c:f7:8f:89:2c:85:c5:84:78:3d:c3:b1:76:
9f:99:47:ad:72:c4:e2:69:51:99:9c:9a:6c:49:0e:0f:1a:63:
21:ff:c0:ee:f2:9e:9b:9f:97:53:78:f0:e7:b6:55:47:fc:dd:
2a:ed:52:de:02:22:28:5e:62:be:43:f8:25:f7:be:66:4c:3e:
e4:38:de:d5:bb:5f:28:14:14:36:38:e1:28:96:56:16:ec:89:
e0:55:58:99:5a:3b:d1:4c:0d:c5:a9:76:6f:c5:27:67:8b:bb:
76:d6:c3:27:28:51:93:fe:a3:ee:85:03:7c:d7:fd:8c:d1:8f:
bf:35:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 13:23:39 2025 by rpki-client