Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nThsrCU2omPfpnBxUQW9SVs0VIs.roa
File: nThsrCU2omPfpnBxUQW9SVs0VIs.roa (raw, json)
Hash identifier: 4hQ1pyO9gcdFNXpfYGSGorWirWLFzQAf4yBwuBFR//Y=
Subject key identifier: 9D:38:6C:AC:25:36:A2:63:DF:A6:70:71:51:05:BD:49:5B:34:54:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198F9D6C10743E9A33CDBBF3726689E810C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nThsrCU2omPfpnBxUQW9SVs0VIs.roa
Signing time: Sat 30 Aug 2025 07:17:37 +0000
ROA not before: Sat 30 Aug 2025 07:17:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214347
IP address blocks: 31.57.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 17:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:d6:c1:07:43:e9:a3:3c:db:bf:37:26:68:9e:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 30 07:17:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d386cac2536a263dfa670715105bd495b34548b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:5d:e1:89:ac:63:1c:e4:86:eb:0e:af:db:
9d:69:2b:15:84:01:e4:de:6c:c2:a8:e1:b6:f0:14:
8a:22:f9:ee:cd:e2:91:7e:62:34:22:0f:85:43:4c:
82:db:d5:c1:b1:fd:89:ce:fc:69:40:6c:43:b7:a9:
9e:8f:ee:05:0a:67:a2:a9:65:c6:c0:16:30:61:7e:
0c:32:9e:d7:43:cb:21:e4:1c:e2:de:6b:cd:ef:ab:
08:d5:f3:fa:a6:2a:02:af:27:96:b6:1b:92:ff:3e:
7c:87:c7:d8:cb:b8:9a:9f:45:6e:e0:77:cb:67:f9:
c3:7c:8b:6b:e9:99:4b:b9:e1:2f:21:44:82:24:05:
bb:fb:6d:9e:fa:a2:ed:26:c8:36:1f:6e:65:3f:91:
6b:bf:1f:78:f6:41:0d:ea:8e:1b:ac:c4:27:59:2f:
7e:86:56:c3:4e:8a:85:43:b2:15:25:f9:a0:90:8e:
24:90:4e:db:bf:d3:33:c7:79:75:a7:84:bc:85:26:
5f:4c:d5:24:45:86:9e:6a:ce:bd:c7:1b:ad:09:fb:
8d:5b:4d:d7:87:89:cc:bf:37:28:46:b4:86:a1:c9:
c7:2c:3e:9b:3d:cb:2b:1c:e5:fb:cd:ad:63:c9:c6:
66:c5:21:bd:ab:c3:ee:23:a1:4c:d9:78:29:8f:19:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:38:6C:AC:25:36:A2:63:DF:A6:70:71:51:05:BD:49:5B:34:54:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/nThsrCU2omPfpnBxUQW9SVs0VIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.48.0/24
Signature Algorithm: sha256WithRSAEncryption
49:41:19:f0:fb:1b:95:6f:9a:ae:ea:96:f8:34:3e:f2:00:79:
80:66:f4:48:7e:cc:f3:2c:1b:63:89:6d:83:f5:7e:ff:10:62:
ce:f4:89:42:91:14:67:6a:bd:71:0a:86:2f:46:2c:fd:8f:aa:
7e:fa:93:01:be:96:54:df:fa:73:87:64:72:7d:44:ae:ce:d9:
d2:76:4a:0d:c8:38:92:9f:e9:b9:e7:d7:c7:3f:e3:9c:66:35:
ba:75:18:e3:da:92:65:ff:fd:e2:21:2a:89:1b:9d:2b:a8:88:
3e:c6:07:43:f6:44:a8:70:d4:96:25:d5:40:55:b4:f9:bc:f4:
cd:78:ae:07:60:78:7b:3a:3e:a7:6c:26:5b:02:e8:ad:6d:36:
25:73:66:5a:e2:ee:6a:1a:9b:fb:28:8d:69:f0:c4:11:c1:ca:
5c:1b:60:2d:bc:14:42:6b:af:90:7d:78:dc:bc:d9:b3:0b:8b:
ba:db:88:14:33:59:f2:d0:bb:47:24:28:a1:64:1f:63:4d:94:
0b:0b:f4:f6:d4:89:4f:25:d9:74:65:7d:86:e7:b8:72:d2:b1:
6c:e9:1c:ce:c8:ac:95:27:35:d1:49:3a:1e:08:8c:4f:99:14:
4a:6a:7a:25:76:2b:76:70:2e:8e:0f:74:49:56:9e:59:07:cc:
e8:08:a0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 03:09:50 2025 by rpki-client