Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m4TkgFB8XgMAVO47RKELdy7mxKc.roa
File: m4TkgFB8XgMAVO47RKELdy7mxKc.roa (raw, json)
Hash identifier: 9BpL6VyEPMxMwbDgluzC1N63Gwp9H7G8hPXkjTqa3Cc=
Subject key identifier: 9B:84:E4:80:50:7C:5E:03:00:54:EE:3B:44:A1:0B:77:2E:E6:C4:A7
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199C7950E3A408D17FE372AC01C3FC30879
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m4TkgFB8XgMAVO47RKELdy7mxKc.roa
Signing time: Thu 09 Oct 2025 06:07:38 +0000
ROA not before: Thu 09 Oct 2025 06:07:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 984
IP address blocks: 31.56.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:95:0e:3a:40:8d:17:fe:37:2a:c0:1c:3f:c3:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 9 06:07:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b84e480507c5e030054ee3b44a10b772ee6c4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:64:1b:e8:ee:5a:a6:0d:fc:e4:cb:d1:f0:e2:
c7:97:8f:48:00:6f:7d:0b:29:48:79:78:13:e0:e4:
58:ed:77:46:2a:4a:72:19:35:0e:ce:03:a4:75:8b:
9a:f1:39:9c:65:40:fe:3e:3f:73:8c:ca:07:d7:20:
22:90:8e:c4:bc:03:d4:09:6d:83:e6:d8:c9:4a:91:
f2:b8:b2:d8:bb:20:86:65:3b:91:6e:22:d1:5a:00:
1b:b5:88:91:6c:40:4f:a5:b9:11:da:eb:ab:9f:a3:
73:82:02:19:6c:29:9d:2d:be:61:ec:d9:ee:75:80:
b6:cf:1f:a7:79:39:06:c9:ac:ff:b6:9d:f9:87:50:
05:c9:b3:b6:c8:d5:e2:e9:57:e8:41:ef:b0:9a:1d:
cb:f3:c8:7d:08:1d:f9:93:13:8e:9c:af:d6:da:5b:
72:e6:df:8e:4a:a8:c7:7e:61:f7:86:1c:cf:ea:cc:
b9:00:4c:66:e6:ff:ca:71:50:be:de:15:45:d0:c5:
64:e6:a5:56:ba:82:dc:f9:81:a5:70:18:07:e6:33:
3e:89:82:a6:11:25:cf:32:30:e3:87:ec:b2:02:c3:
de:fa:38:4f:67:72:af:fb:09:95:5b:aa:ac:c4:48:
f9:be:aa:cb:ae:a1:2d:3e:7e:9f:b5:d7:d2:b1:c3:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:84:E4:80:50:7C:5E:03:00:54:EE:3B:44:A1:0B:77:2E:E6:C4:A7
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/m4TkgFB8XgMAVO47RKELdy7mxKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1d:3b:d3:71:53:f1:d4:5f:dc:20:cd:14:3d:cb:c6:f6:65:
6f:09:07:d3:5d:f9:ff:69:43:22:ae:8e:52:85:72:a2:76:67:
23:55:80:07:98:50:91:69:58:62:5e:f4:23:92:eb:1f:03:4f:
ba:1b:8d:0b:07:8c:d6:20:47:9d:bf:3d:a7:6a:c5:f5:f9:92:
20:31:e0:b7:47:b6:e8:ab:96:0e:af:d2:91:5a:8e:55:48:23:
c1:96:b8:61:4c:68:a1:e6:81:a8:d5:1e:67:6e:41:75:8c:f3:
20:3b:74:d3:db:aa:11:82:e5:29:aa:ca:1a:f8:d7:e4:94:c6:
bd:49:ea:ba:4f:46:60:d3:cb:c8:ec:26:d6:b5:0a:df:8a:95:
b8:c8:c6:fb:18:15:70:65:7c:31:23:c4:dc:6d:62:50:a7:10:
d3:ca:13:df:d2:70:6b:fd:e3:ba:c1:c0:5e:36:4f:bd:16:8f:
9f:c8:a8:ff:00:e5:5c:a2:05:1d:88:0a:00:8e:1d:d6:bc:b9:
e0:74:98:04:58:1f:d4:61:bf:f6:71:7d:53:d5:b1:a4:0f:fe:
2d:cb:96:e6:23:7e:2d:93:58:06:e1:d8:dd:90:5e:94:62:99:
c5:82:1d:db:84:da:6c:6b:ca:75:53:1e:5b:4c:77:b9:ce:56:
27:e6:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:02 2025 by rpki-client