Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g9b6__Nh5-YqWTjhdEJMWOqlQjA.roa
File: g9b6__Nh5-YqWTjhdEJMWOqlQjA.roa (raw, json)
Hash identifier: piDPe3cZTqXo4GkjF/gUw7GlTuJw9FtB1tGivEBhqIA=
Subject key identifier: 83:D6:FA:FF:F3:61:E7:E6:2A:59:38:E1:74:42:4C:58:EA:A5:42:30
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A5FC29093205CA5CDB59ED51563DE84AC
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g9b6__Nh5-YqWTjhdEJMWOqlQjA.roa
Signing time: Fri 07 Nov 2025 19:19:37 +0000
ROA not before: Fri 07 Nov 2025 19:19:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213654
IP address blocks: 31.58.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5f:c2:90:93:20:5c:a5:cd:b5:9e:d5:15:63:de:84:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 7 19:19:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83d6fafff361e7e62a5938e174424c58eaa54230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:80:cf:7b:4a:63:8e:d8:01:26:3f:ea:32:c8:
cb:d7:ab:6c:52:5c:24:99:5c:9c:52:a1:cf:d2:fd:
45:5e:04:ec:72:37:ba:80:22:10:58:0b:ff:9c:52:
94:df:44:21:1c:be:de:45:52:31:7d:80:83:51:ef:
c6:57:76:f8:82:ea:39:06:b7:7c:2f:d5:58:a0:4a:
84:12:fa:47:f4:19:f8:ff:1f:84:29:29:5c:37:c3:
39:3f:7f:0c:51:8c:0f:a7:de:bd:27:d7:7a:d3:64:
1c:35:4f:6e:a7:3f:98:8b:32:c8:7c:fe:68:e9:c8:
c0:d6:cc:06:47:a7:0c:58:94:0e:05:24:2e:81:22:
67:5e:0e:a9:48:86:c7:99:13:0b:c5:64:33:26:9e:
92:07:27:ef:1e:26:25:62:b1:a3:6c:8e:46:63:ed:
b6:69:99:f2:6c:f0:65:a6:56:f8:b0:51:2f:99:45:
56:b3:27:ec:d1:84:7d:70:ef:02:e6:80:11:47:e5:
3b:08:3f:f7:20:59:14:f8:89:de:a1:dc:86:02:dd:
70:33:0e:3c:cd:f8:37:59:f6:49:e9:f5:c2:5d:ba:
b7:b1:88:10:da:d6:9d:36:1c:7a:9f:df:d8:19:7f:
26:f5:9e:84:16:37:44:e2:69:fb:f7:c1:17:96:0c:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D6:FA:FF:F3:61:E7:E6:2A:59:38:E1:74:42:4C:58:EA:A5:42:30
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/g9b6__Nh5-YqWTjhdEJMWOqlQjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.248.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c7:d5:e1:79:9a:9c:2a:81:1f:6f:dc:18:c9:0c:95:62:74:
a5:11:ea:de:0f:f4:56:de:5f:4e:c9:3c:cb:f5:da:f7:cc:e4:
b8:9d:09:e7:09:65:cb:33:c9:99:b5:37:b1:d1:fe:66:d4:cb:
7e:39:7f:f5:33:a7:7c:1a:9b:04:56:7c:a5:00:10:15:97:eb:
96:26:3b:7b:5f:07:dc:84:b6:51:19:ae:1a:90:05:cb:2d:09:
f8:85:03:1d:78:54:41:7d:c9:27:6c:80:a0:26:1d:00:56:56:
f8:46:87:54:14:bb:41:db:e5:12:44:e0:49:b6:f4:0c:dd:77:
d1:f6:c6:d2:ee:37:06:49:af:26:42:47:af:1a:22:53:0e:0f:
67:6f:1b:63:0c:97:07:a3:0b:07:e9:9d:aa:c1:a2:f8:f0:6d:
bc:f0:8e:6d:67:a5:6d:4d:89:a0:33:32:ed:b5:65:31:21:07:
d7:c5:c6:b2:9f:16:cc:96:6b:ae:5b:9b:2b:57:1b:71:d6:7c:
ca:8c:56:80:31:0e:bd:39:e1:e3:18:37:5a:f1:42:0b:fc:72:
5b:54:66:dc:53:5a:78:62:e9:40:53:30:8d:da:51:62:f4:3b:
3b:52:13:ea:12:79:81:f9:bd:76:ae:bf:fa:94:26:00:cb:ab:
3d:d1:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 20:51:54 2025 by rpki-client