Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u-pjSL8_ivb29e_J0w5uOuGvL-I.roa
File: u-pjSL8_ivb29e_J0w5uOuGvL-I.roa (raw, json)
Hash identifier: VYfQT3ldZicIc75UZqXH7GKqv0+b9mEV1wmRp0zDdh8=
Subject key identifier: BB:EA:63:48:BF:3F:8A:F6:F6:F5:EF:C9:D3:0E:6E:3A:E1:AF:2F:E2
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198EF212CE89A856CCA44B3AD1155F010CE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u-pjSL8_ivb29e_J0w5uOuGvL-I.roa
Signing time: Thu 28 Aug 2025 05:23:05 +0000
ROA not before: Thu 28 Aug 2025 05:23:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 31.56.125.0/24 maxlen: 24
31.57.44.0/23 maxlen: 23
31.57.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ef:21:2c:e8:9a:85:6c:ca:44:b3:ad:11:55:f0:10:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 05:23:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbea6348bf3f8af6f6f5efc9d30e6e3ae1af2fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:7b:b8:28:89:62:b8:c5:66:14:8c:60:03:
bc:0e:74:75:2e:89:36:7a:0a:0a:bf:38:21:fb:87:
0c:d1:71:9f:0f:c5:f4:d8:a6:72:d7:44:05:00:63:
5a:4a:6d:78:de:df:c0:b2:7e:40:7a:5e:05:e4:cf:
00:c5:a7:d1:d1:6a:3c:f2:83:a8:ac:e3:49:94:29:
eb:7b:b5:0e:4f:17:60:bc:77:e8:70:d4:5c:c9:54:
24:ec:34:ff:4a:b0:b9:68:a3:21:b1:78:1a:66:df:
bb:c3:da:d1:cb:f2:0a:ef:fa:ef:c9:c4:45:6f:c3:
da:1c:fd:8f:0e:c5:7d:7e:26:18:7f:30:c7:e0:74:
af:28:7f:00:4a:03:f0:b6:3c:08:83:4c:1e:53:bb:
1a:c3:52:cb:66:27:7f:8b:56:e5:59:77:dd:a8:61:
04:50:92:5e:a4:0a:8a:07:05:bf:15:0f:2c:2d:4c:
82:65:ac:f7:9f:43:f1:90:f2:0b:56:91:f7:85:aa:
31:73:5c:76:da:a9:7b:c9:79:72:f5:0d:40:f8:f7:
79:70:ed:aa:d0:57:c1:09:d1:ef:62:0d:c5:ef:11:
d6:b3:95:76:a1:02:b5:45:b9:93:43:ad:1a:38:94:
85:10:5a:34:a1:fa:c1:2e:53:63:9e:1c:09:07:86:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EA:63:48:BF:3F:8A:F6:F6:F5:EF:C9:D3:0E:6E:3A:E1:AF:2F:E2
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u-pjSL8_ivb29e_J0w5uOuGvL-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.125.0/24
31.57.44.0/23
31.57.148.0/23
Signature Algorithm: sha256WithRSAEncryption
45:d0:66:56:2a:a5:ff:64:95:fe:68:af:bd:16:f2:1c:ae:e7:
46:9f:8e:64:2f:57:20:f6:d1:fa:8a:23:24:7b:97:55:03:30:
04:e0:f0:25:61:12:2f:26:b7:0a:3e:b3:4c:c8:17:13:4c:7f:
bf:24:a3:3e:95:f3:05:3e:83:43:27:16:b2:02:01:41:41:de:
54:87:8e:e7:55:41:bd:a7:a8:b1:0e:fc:a4:20:d5:e2:26:98:
62:c3:ee:bc:65:80:f9:4a:9b:e6:93:ae:0f:f8:76:41:c9:c0:
50:fd:24:72:e6:ca:da:39:a2:26:03:a6:4a:8f:b5:c8:cb:87:
f3:bd:04:a6:ee:81:5e:89:19:81:4e:aa:82:5c:4a:d1:dc:fd:
1b:9c:b7:28:8c:35:e8:c4:f3:1a:ee:b1:e6:eb:a4:c0:c0:57:
2d:78:89:11:c9:7b:53:76:ce:7f:b8:de:1b:25:33:6d:f1:fd:
e0:3d:dd:7e:39:84:39:c8:11:2b:a2:89:36:42:36:18:1c:4b:
88:32:09:54:72:1d:68:ec:d9:68:e0:66:9e:e7:55:67:76:95:
c7:31:01:8e:12:58:54:27:07:0a:f3:29:85:f5:be:24:52:57:
3e:b8:cb:80:48:02:95:01:64:1b:89:68:90:6c:52:2a:c7:69:
f4:90:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:02 2025 by rpki-client