Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ylIzfqoaF4wZKXyFj5BJQU9Xuws.roa
File: ylIzfqoaF4wZKXyFj5BJQU9Xuws.roa (raw, json)
Hash identifier: XbwA1Pxb9zu3om8kKlXcNhwRR++lg9AMsbLp+Kj4vcg=
Subject key identifier: CA:52:33:7E:AA:1A:17:8C:19:29:7C:85:8F:90:49:41:4F:57:BB:0B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198E204DAD3CF52F2797DEDC3F44C60F351
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ylIzfqoaF4wZKXyFj5BJQU9Xuws.roa
Signing time: Mon 25 Aug 2025 16:17:05 +0000
ROA not before: Mon 25 Aug 2025 16:17:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 31.57.190.0/24 maxlen: 24
31.58.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:04:da:d3:cf:52:f2:79:7d:ed:c3:f4:4c:60:f3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 25 16:17:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca52337eaa1a178c19297c858f9049414f57bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:85:12:11:c5:bf:38:88:7d:17:2b:e9:69:
4b:62:57:5d:fb:85:cf:a3:77:94:06:ac:ed:13:d0:
cf:93:ca:de:fe:24:36:a6:06:a2:a3:3f:bc:d7:b2:
6f:08:a9:42:b0:9a:19:25:af:57:96:10:11:38:57:
a1:1d:84:71:7d:19:b9:7f:a2:5e:45:65:5c:e4:c5:
5d:34:23:b1:ad:9b:2f:47:ae:3a:1f:b1:85:58:19:
3c:c3:98:04:d2:fe:84:b2:54:4c:a8:81:3b:f6:04:
c0:3c:52:e5:19:4f:c1:70:ad:ed:b3:8a:8c:4b:b4:
f8:00:78:60:d2:c1:e3:51:a4:07:f7:55:54:e6:29:
27:c1:17:04:33:6b:1d:0b:bc:c7:83:73:4a:c0:64:
9f:d3:1a:c4:5d:69:64:6e:df:7b:04:4f:7c:71:fc:
6a:e9:da:b5:7d:52:ca:28:22:b2:40:84:89:85:73:
cb:ed:cf:5a:52:a3:ee:f0:53:ed:b9:e1:4c:ca:c3:
51:53:82:41:c2:63:fd:93:10:87:55:4d:73:cc:bd:
cc:3b:40:7f:21:6a:fe:fe:1f:f8:91:e0:97:69:f4:
c6:51:6f:32:39:25:c2:60:a5:4e:1b:cd:08:54:23:
f4:57:b1:d2:07:1c:f4:8e:13:bf:b3:f0:00:83:5d:
53:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:33:7E:AA:1A:17:8C:19:29:7C:85:8F:90:49:41:4F:57:BB:0B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ylIzfqoaF4wZKXyFj5BJQU9Xuws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.190.0/24
31.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b6:77:00:c8:2f:60:ea:d3:86:b1:04:77:23:83:b3:95:9c:
7a:aa:16:8a:ba:3f:54:78:9a:24:85:c8:25:b7:91:bb:94:7c:
a8:fe:56:40:80:5a:22:27:f8:56:97:c8:d1:fe:f9:b7:f0:02:
5b:4a:9b:92:d9:27:06:b8:c1:c9:ad:8a:2f:60:b1:de:58:5e:
91:b8:d9:03:69:33:08:cb:19:95:b0:93:54:60:72:0d:7b:75:
e2:51:ab:95:ea:ab:91:c4:c8:a7:7a:cf:16:85:2d:a7:f8:29:
e6:a7:e7:7e:1a:dd:78:39:f9:c3:aa:32:f6:10:f5:30:37:6c:
ab:c6:53:9c:21:71:a9:37:c5:af:74:c4:fe:44:93:f2:b7:a9:
64:14:43:fc:79:29:78:3f:17:bf:31:14:8e:68:30:e6:78:65:
79:2b:62:67:2e:d6:18:60:10:1d:12:16:d6:5c:03:12:25:c9:
1e:8e:2a:11:7f:11:0f:3d:86:2c:84:f6:0b:ba:87:3c:22:d4:
6f:b1:2e:5e:e4:fc:49:f7:2e:50:4b:f7:2b:7f:b6:61:f4:4b:
30:77:12:1e:b8:9d:e3:28:30:82:37:83:86:5c:09:97:56:a8:
4d:94:62:e3:6f:73:b0:78:1c:af:36:a9:7b:42:8f:ae:3a:8a:
86:e7:9f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:20 2025 by rpki-client