Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i2cn65ACQ2RwLdPNTSLWGS7FKJc.roa
File: i2cn65ACQ2RwLdPNTSLWGS7FKJc.roa (raw, json)
Hash identifier: YpH1U25IAyrkRn8wxJvC6/4fyCDkUbTjkWulEjVhZNw=
Subject key identifier: 8B:67:27:EB:90:02:43:64:70:2D:D3:CD:4D:22:D6:19:2E:C5:28:97
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198EF1E6ED3979732EAEB5D09628F8E0AB7
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i2cn65ACQ2RwLdPNTSLWGS7FKJc.roa
Signing time: Thu 28 Aug 2025 05:20:05 +0000
ROA not before: Thu 28 Aug 2025 05:20:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401818
IP address blocks: 31.56.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:1e:6e:d3:97:97:32:ea:eb:5d:09:62:8f:8e:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 05:20:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b6727eb90024364702dd3cd4d22d6192ec52897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:de:3f:a9:a9:4a:3f:2d:ad:22:d1:64:ff:
09:d6:27:94:0b:86:76:50:8d:eb:77:6c:1d:7b:a8:
3d:b8:9c:07:26:19:c0:05:b9:05:dc:40:84:23:0b:
d7:d7:75:d0:ae:6b:58:2d:13:6f:da:76:1d:75:7b:
31:64:24:f0:0c:45:f3:a8:74:72:02:78:59:c3:8b:
e5:2c:25:20:35:91:73:f3:36:be:eb:a4:ec:65:f7:
a7:f7:7a:de:51:e2:a5:5c:b8:0f:e6:5d:1d:8d:c2:
32:0e:da:ac:39:33:bb:f7:f1:c5:88:4a:2d:5e:3c:
a7:bf:dc:4b:a1:0c:0f:59:a8:a3:32:18:0a:41:a7:
75:f8:28:9d:0b:c6:fc:93:f2:f7:8d:f4:0b:51:64:
34:6c:ed:a3:d4:7c:1f:c0:e2:d6:a2:63:c2:0c:bf:
7c:1f:a9:39:6c:09:3c:e3:78:81:9c:68:c5:91:06:
0d:bf:6b:3c:f3:56:e5:be:90:b6:b6:66:eb:90:22:
9f:ae:14:c9:a6:54:14:57:70:57:bf:a8:2c:2e:18:
c8:dc:bb:17:3e:6f:fe:0b:b9:a0:46:3b:6d:06:ff:
76:9e:3f:7e:7a:aa:d8:98:05:20:c2:d9:f6:a6:0d:
93:34:d1:7b:d5:d6:42:17:fe:b0:9e:11:11:5c:01:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:27:EB:90:02:43:64:70:2D:D3:CD:4D:22:D6:19:2E:C5:28:97
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/i2cn65ACQ2RwLdPNTSLWGS7FKJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.87.0/24
Signature Algorithm: sha256WithRSAEncryption
79:5a:c6:2e:7e:14:63:ed:1c:be:03:0f:b2:94:31:17:eb:e1:
2c:be:b1:37:17:a2:48:a7:f4:a5:3e:b2:86:0d:e5:63:e4:ce:
9c:9b:27:ac:5f:11:cf:05:6b:59:c3:ee:06:6b:b6:51:2c:e7:
e7:02:fe:06:e5:2c:98:9d:5e:db:5c:73:5e:3d:62:e0:76:2f:
3b:3c:8c:a3:60:de:d2:ba:99:34:0e:de:c4:9e:a6:e0:3d:d7:
68:d4:b4:26:e9:b2:40:d7:51:cf:01:b2:a3:75:6f:ee:af:47:
2a:ec:ab:00:68:75:44:31:34:a9:c0:28:27:6e:95:cc:31:51:
21:54:0a:f7:c2:bf:41:96:29:81:b0:06:6a:b6:b2:a2:0c:02:
af:04:9e:d0:e7:89:1f:ff:e3:b6:03:e4:b3:96:e8:3e:13:8b:
e3:91:75:1a:f9:f3:42:be:b2:d2:0e:4c:6c:31:ed:b2:13:c9:
0c:b1:58:42:11:ae:2c:38:b6:15:c9:37:e7:0b:95:a6:eb:57:
47:65:ba:bd:86:a8:40:80:65:e3:27:ce:72:7d:bc:07:fa:7f:
67:cb:24:20:d0:b1:aa:6b:5c:44:eb:97:4a:11:90:70:b8:a1:
5e:7e:11:41:48:09:54:3e:a5:c7:26:6d:e0:d4:79:58:6e:bd:
90:8c:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 11:27:46 2025 by rpki-client