Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mVVvG4gI9g1aOs8mMWJ2mhgE-dw.roa
File: mVVvG4gI9g1aOs8mMWJ2mhgE-dw.roa (raw, json)
Hash identifier: BO1n/gXunkzwBHwJjG0fAQHISD16bIH3eibQivQlxvQ=
Subject key identifier: 99:55:6F:1B:88:08:F6:0D:5A:3A:CF:26:31:62:76:9A:18:04:F9:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A6DC4B238E14883892CCB2A135499F41C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mVVvG4gI9g1aOs8mMWJ2mhgE-dw.roa
Signing time: Mon 10 Nov 2025 12:36:38 +0000
ROA not before: Mon 10 Nov 2025 12:36:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207708
IP address blocks: 31.56.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:c4:b2:38:e1:48:83:89:2c:cb:2a:13:54:99:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 12:36:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99556f1b8808f60d5a3acf263162769a1804f9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:1a:dd:e6:4b:2f:0d:29:4f:8f:9f:b2:1e:
59:ab:da:0c:5d:95:5a:0c:c7:d4:76:b3:37:af:04:
16:b2:21:52:79:3e:fb:63:10:c8:90:d5:ea:c9:ae:
c4:65:da:f9:df:9b:5d:c7:60:b1:8d:82:40:69:ae:
ad:23:42:3d:14:e3:8b:38:8a:37:8b:1c:97:85:39:
1f:61:2a:2b:8a:6a:6b:2c:e7:24:5e:9e:f8:ad:e3:
f8:0f:be:04:38:24:08:6f:5d:c2:01:c5:86:cc:1b:
e9:08:0c:7b:5d:b3:79:6d:97:5b:91:5a:91:88:a2:
e5:81:76:34:e9:03:7b:b1:47:46:80:1a:d6:88:0d:
54:8b:44:0a:77:ce:d5:7d:4c:69:53:eb:b4:d3:6c:
ec:b4:6e:5b:43:14:45:6e:14:08:e8:0a:7e:af:00:
ce:e9:6b:fb:ba:b7:61:c6:16:5d:e7:3c:2b:38:9b:
7e:1b:1d:59:e8:9a:1b:1c:d9:c8:5f:2a:01:c1:be:
1a:be:45:ed:f6:5d:5a:b8:f6:f0:18:fd:11:15:90:
4e:4e:28:76:c5:cc:57:f9:be:f1:3f:cb:e8:d7:7d:
6a:57:d1:02:cb:27:65:94:ab:f0:91:0e:21:db:59:
90:c0:75:64:62:f4:77:8a:ed:b2:04:78:56:a5:81:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:55:6F:1B:88:08:F6:0D:5A:3A:CF:26:31:62:76:9A:18:04:F9:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mVVvG4gI9g1aOs8mMWJ2mhgE-dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:eb:a1:62:8e:11:54:66:d0:75:2e:eb:54:64:d4:bb:36:ad:
90:12:24:14:fa:65:75:09:2e:dd:15:0a:7b:e8:fe:2e:4d:04:
83:78:9d:93:43:0b:b1:2e:f1:08:d4:60:e3:9a:b4:bf:67:f3:
db:a0:3a:0b:a9:f4:78:6b:de:19:84:7f:6d:7f:4a:66:d6:39:
ef:d4:80:cc:ee:85:a7:fc:e1:dc:dd:7c:6d:76:25:02:93:80:
e3:bb:9c:85:ac:d5:a3:30:9b:7b:3d:9b:98:93:2a:ac:9c:08:
ef:7b:4f:2b:25:e4:6d:54:5d:43:93:ed:84:64:c1:d9:da:5f:
7f:08:cf:3e:78:0e:60:09:67:23:28:86:33:0d:43:ec:7b:3a:
6b:71:43:7e:64:27:a1:fc:62:fe:e3:3f:62:42:66:22:7f:df:
af:bb:f6:e4:34:0d:ef:14:d1:f9:90:2f:cb:0d:9c:1a:4a:2e:
82:1d:65:84:de:b4:37:f3:00:05:ce:dc:49:60:d8:ad:cc:35:
ae:1d:6b:59:a1:7f:65:93:3d:e8:be:10:b0:24:bd:9e:56:56:
61:4f:66:2a:aa:2b:6c:64:64:fe:83:6d:72:82:94:8f:8d:e7:
24:ee:c3:ad:e1:72:8d:75:b5:04:f9:9c:ff:73:79:60:29:3d:
f1:1f:e3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 20:51:02 2025 by rpki-client