Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f6xMQEi56rY5XfJWORf9g6cO_L0.roa
File: f6xMQEi56rY5XfJWORf9g6cO_L0.roa (raw, json)
Hash identifier: JW7+KBJmPx81KMC1uwbLP3tsq1xSZmRvkiROp8r12i4=
Subject key identifier: 7F:AC:4C:40:48:B9:EA:B6:39:5D:F2:56:39:17:FD:83:A7:0E:FC:BD
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198E7A150D8E8325E8B183E892EA944FA50
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f6xMQEi56rY5XfJWORf9g6cO_L0.roa
Signing time: Tue 26 Aug 2025 18:26:05 +0000
ROA not before: Tue 26 Aug 2025 18:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133337
IP address blocks: 31.57.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e7:a1:50:d8:e8:32:5e:8b:18:3e:89:2e:a9:44:fa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 26 18:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fac4c4048b9eab6395df2563917fd83a70efcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:e8:47:77:d9:f5:1b:e5:11:74:fa:0c:af:
ea:6d:3a:d3:91:22:4a:03:bb:cb:e4:cb:b7:24:0a:
14:b0:41:3e:be:93:df:5d:de:d8:cf:ac:22:87:6e:
ce:46:2e:40:09:d1:dd:17:e3:c2:f4:f1:62:42:0e:
56:a9:5f:9e:59:f9:0c:84:1c:fd:a4:f5:af:61:4b:
2a:b1:7b:c5:05:c1:f5:c5:f7:8a:c8:f2:9b:d5:98:
d8:ab:1a:b5:f0:42:7d:46:5c:45:4b:b1:8f:f7:b3:
d9:8a:29:c0:66:64:07:03:15:01:f9:3a:57:9e:0a:
1a:a4:73:83:29:f7:59:4d:b9:8a:f3:17:bc:83:4a:
1b:d1:3f:e0:96:9c:9f:e4:0c:a4:0a:01:72:31:71:
75:d7:ea:f2:6e:ab:ee:f5:69:59:6c:ef:6f:47:ec:
75:21:5f:25:19:e6:e9:a5:42:f1:e9:6b:6d:d8:05:
27:24:ac:f9:ac:c8:4a:81:52:12:b7:86:05:bc:dd:
4a:d4:7e:d0:fe:ec:0f:17:5e:57:4c:87:c4:84:e7:
72:35:75:76:13:bc:ba:fd:03:93:20:1d:55:7c:61:
a7:a6:01:98:5b:76:a9:3f:29:f1:27:a6:32:8b:2d:
90:a2:03:85:ca:22:af:21:6f:cc:d2:4e:51:45:af:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:4C:40:48:B9:EA:B6:39:5D:F2:56:39:17:FD:83:A7:0E:FC:BD
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/f6xMQEi56rY5XfJWORf9g6cO_L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.183.0/24
Signature Algorithm: sha256WithRSAEncryption
36:94:a9:c4:ce:83:4f:c7:0f:1b:98:ef:48:3f:4d:de:78:e4:
61:44:b0:ea:ed:62:5b:32:cc:b1:41:96:e6:90:98:a8:eb:e7:
eb:7a:32:05:67:6d:8a:67:3d:67:b9:66:00:d8:63:3f:1c:b0:
11:1b:26:9f:12:03:f7:92:e4:81:63:e6:9d:f3:58:47:d0:57:
0d:92:40:55:2d:a8:82:fb:34:df:71:6f:1a:13:61:89:a1:f1:
c9:a7:a3:af:77:01:63:b0:04:fc:52:1f:bc:42:1d:47:c0:1b:
38:b7:8d:ac:65:86:99:5d:5b:2c:00:20:51:7a:2a:03:dc:e2:
50:51:cb:dc:6f:ab:b3:f2:e5:9e:59:25:a1:9f:72:12:c6:96:
1c:90:6e:1f:ee:c6:9e:86:d8:66:c5:ed:a2:cd:c9:45:14:03:
fc:0f:43:33:8f:21:36:b2:af:cd:cb:56:34:48:3a:91:ed:89:
b1:1a:c2:92:27:7f:ce:78:d4:18:68:e1:07:10:54:2e:2a:55:
00:ab:1f:6a:aa:b6:38:ef:83:d0:cb:d7:01:57:82:c3:c1:f7:
28:32:aa:2f:2e:f0:02:90:25:b7:2f:3c:a2:f4:47:52:e5:d9:
fc:9e:84:ee:22:a4:ff:01:a1:3f:b2:a7:46:b6:64:7b:3f:9b:
9a:16:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:43:46 2025 by rpki-client