Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/prmygGxLRzwCZOgMgsZrsiR1PMs.roa
File: prmygGxLRzwCZOgMgsZrsiR1PMs.roa (raw, json)
Hash identifier: bBVuLJmLcUsjeGWrNr03tGbEchqBcsWEYwhB2ZoM6yc=
Subject key identifier: A6:B9:B2:80:6C:4B:47:3C:02:64:E8:0C:82:C6:6B:B2:24:75:3C:CB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A6E9BD648B5D80DBAB8D44E13E0962B19
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/prmygGxLRzwCZOgMgsZrsiR1PMs.roa
Signing time: Mon 10 Nov 2025 16:31:37 +0000
ROA not before: Mon 10 Nov 2025 16:31:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215286
IP address blocks: 31.59.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6e:9b:d6:48:b5:d8:0d:ba:b8:d4:4e:13:e0:96:2b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 10 16:31:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6b9b2806c4b473c0264e80c82c66bb224753ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:50:75:cf:d3:6c:d3:a8:c0:7d:cc:39:fc:
c7:68:9a:8c:e7:7c:cc:5d:f5:10:12:07:f3:fa:00:
14:7a:09:d0:2e:c8:6a:84:2f:b4:1a:d4:c7:77:7c:
d0:a5:f0:22:84:02:7b:94:f3:40:ed:e7:dd:fb:2e:
1e:05:72:1f:60:d0:76:0e:15:bb:d0:0c:c1:80:9d:
22:2f:5f:3f:ad:6d:b0:14:2b:9d:6f:ab:85:f5:dd:
6c:50:4c:83:16:54:3a:fe:54:cf:31:c1:6f:e2:31:
68:7c:c8:24:b8:4b:cd:7a:2e:a3:eb:0b:4f:6a:a4:
b8:bd:99:be:14:c0:3b:f3:b3:06:df:1e:cb:64:13:
c0:b1:93:cc:20:11:2a:ed:b7:e5:44:8e:4a:c6:8d:
a4:a9:b0:e4:55:cf:8e:53:ff:eb:c8:34:b7:34:d2:
2c:7e:d1:91:21:a9:3c:b9:16:5e:c7:c8:b2:6c:eb:
69:8c:57:2d:45:1c:b7:36:c2:54:a3:79:fb:37:da:
eb:a7:4a:80:5c:2c:dc:31:b4:cd:3a:ae:99:8f:54:
58:30:eb:41:8a:cc:af:26:3f:b0:77:8a:a3:51:22:
3f:12:fa:21:b5:ef:ca:11:30:82:73:c2:e5:42:5f:
95:7c:b8:33:64:04:fb:71:97:ac:81:de:d1:1e:b1:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:B2:80:6C:4B:47:3C:02:64:E8:0C:82:C6:6B:B2:24:75:3C:CB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/prmygGxLRzwCZOgMgsZrsiR1PMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.137.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4b:e3:21:d9:d0:ba:59:a2:b9:45:d2:93:c8:65:14:55:e0:
ed:e2:15:a6:f0:9e:68:26:21:42:81:5a:64:85:ba:fc:b0:fc:
3d:d3:3b:6f:96:2f:02:50:d8:96:8c:28:77:23:12:2e:8a:6d:
3e:46:82:38:80:ac:96:1b:93:44:28:23:d8:50:ec:df:01:dd:
d7:de:60:0d:dd:ce:a2:df:01:89:b4:75:f4:f8:73:bd:76:20:
ce:b4:2b:f8:bd:44:61:10:c0:b4:ed:2f:fa:84:cc:cf:07:60:
97:cf:f2:2b:aa:03:63:5e:ad:75:29:80:56:08:2b:c9:d7:de:
c0:2b:ae:ca:96:6f:b6:63:46:b2:30:fa:b1:83:55:d8:44:73:
b8:6e:c8:da:5c:cc:5f:8b:8e:a2:bc:37:d1:3f:9e:a2:71:ea:
27:56:a6:94:dc:f7:02:bb:07:f4:6b:cd:21:23:fe:cf:1f:30:
85:e2:a0:33:f6:3a:dc:19:8b:98:bd:ab:a6:e9:fc:2a:f0:da:
31:90:44:8f:46:39:a8:a3:a1:ba:a5:6c:9d:9c:3d:a0:99:90:
f3:2c:53:0d:bc:03:7c:6d:02:8b:a3:57:75:2f:85:7b:8a:ca:
f6:5b:84:a4:15:b0:db:07:9b:33:72:e8:56:5e:ba:0f:cc:79:
5d:c1:c1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 20:51:53 2025 by rpki-client