Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p928TvSHzicuRzKleQa-OK38OQs.roa
File: p928TvSHzicuRzKleQa-OK38OQs.roa (raw, json)
Hash identifier: muVVAiwQvQguqCCxHxoZoFMJhC4i977kW7ppYbuRTHA=
Subject key identifier: A7:DD:BC:4E:F4:87:CE:27:2E:47:32:A5:79:06:BE:38:AD:FC:39:0B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A78F38B6A04A7BAEDAC991807332715D2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p928TvSHzicuRzKleQa-OK38OQs.roa
Signing time: Wed 12 Nov 2025 16:43:38 +0000
ROA not before: Wed 12 Nov 2025 16:43:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207267
IP address blocks: 31.56.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:78:f3:8b:6a:04:a7:ba:ed:ac:99:18:07:33:27:15:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 12 16:43:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7ddbc4ef487ce272e4732a57906be38adfc390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:97:30:e9:29:d8:15:86:3a:5d:59:12:dc:
1f:8f:54:1d:05:df:27:80:94:42:38:5d:68:33:f2:
41:78:c6:3a:4e:4e:5b:cf:3b:ba:f8:29:40:96:48:
60:5e:c6:e0:24:c7:8b:6e:37:6f:50:aa:09:6e:4d:
9f:5d:98:32:fe:9d:b5:e1:b3:75:0b:9a:fd:29:fa:
29:ab:8c:75:63:94:f9:94:22:5a:96:75:ba:4f:f6:
16:08:c2:b8:66:3c:ba:f4:20:cf:e8:a0:d3:7f:b6:
b2:98:7f:ca:bd:94:65:f8:d6:1f:e1:e3:23:67:1b:
df:3a:40:69:cf:8e:8c:b8:09:d8:78:a3:fe:8d:64:
1d:75:c4:63:f1:01:af:3d:c5:c9:a8:13:a0:49:cd:
66:f3:56:85:c3:e0:10:7e:1e:ea:bd:b6:c9:e6:f2:
30:1f:49:88:08:fa:0c:7b:e4:1a:be:f6:39:b9:2c:
9e:a2:35:0e:55:3f:3c:2a:d9:e6:46:9e:be:01:78:
6e:d2:77:83:f5:e9:98:ca:e8:06:39:31:79:7d:aa:
f1:a7:ff:05:d3:4e:00:1d:18:c4:92:44:f6:dd:cb:
97:9c:01:d8:20:06:95:ea:f4:6a:cd:dc:ac:2f:7a:
36:55:92:57:25:5d:93:aa:58:1c:66:7d:a7:c6:2e:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:BC:4E:F4:87:CE:27:2E:47:32:A5:79:06:BE:38:AD:FC:39:0B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p928TvSHzicuRzKleQa-OK38OQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:75:57:89:72:af:de:46:86:28:b7:63:dd:35:da:11:8f:e5:
fc:ca:c2:d5:c0:e9:58:09:72:0a:41:9a:57:96:74:8b:0f:91:
b4:c9:31:22:a3:15:2e:40:9e:a9:71:24:13:c8:b9:64:65:d5:
c5:be:0d:82:19:0b:d4:8e:8b:4f:bd:b3:e3:e1:29:3f:43:15:
99:dc:12:08:16:be:e8:f0:fc:02:bc:7a:6e:6f:04:b0:91:dc:
62:ee:3b:24:58:97:10:b2:cc:a9:b0:a1:3d:0e:f2:74:42:44:
c4:2e:3d:eb:03:a4:f6:03:73:f4:af:15:1e:f1:65:09:6c:fb:
ee:03:fe:62:bf:8b:0e:87:c3:aa:6e:bd:66:be:60:bb:e8:fe:
7d:b6:3d:23:90:27:04:9b:7d:6e:70:f4:6d:47:e0:72:af:80:
bb:5f:37:ac:d6:ae:0a:c0:f9:ea:10:6f:b8:5e:b0:12:ef:a9:
20:44:50:e3:12:82:b8:28:a2:a8:10:88:bb:60:4a:5f:1b:32:
64:b0:67:20:d3:af:22:41:eb:8b:87:c8:a4:14:02:5c:b6:f7:
59:d9:b4:d1:4a:f9:a0:68:e0:e0:b3:ed:08:51:7a:c3:cb:18:
c5:58:86:05:e3:cb:47:ee:21:6d:f8:61:ef:eb:c1:a5:ec:af:
9b:e1:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 20:51:53 2025 by rpki-client