Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0BiV56OcGKDHw7IkDfxuzYZQfvA.roa
File: 0BiV56OcGKDHw7IkDfxuzYZQfvA.roa (raw, json)
Hash identifier: ZUmC7MpCexKi1opE2Y/eGkjMblfzhjLp1/IpguvdG+E=
Subject key identifier: D0:18:95:E7:A3:9C:18:A0:C7:C3:B2:24:0D:FC:6E:CD:86:50:7E:F0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A3E2A7F15914D9F71378E50CB9550DED2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0BiV56OcGKDHw7IkDfxuzYZQfvA.roa
Signing time: Sat 01 Nov 2025 06:46:03 +0000
ROA not before: Sat 01 Nov 2025 06:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216145
IP address blocks: 31.57.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:2a:7f:15:91:4d:9f:71:37:8e:50:cb:95:50:de:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 1 06:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d01895e7a39c18a0c7c3b2240dfc6ecd86507ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:7f:6d:e3:2d:c7:dc:19:69:77:2d:a1:32:
b0:df:d0:1c:6d:71:d6:37:1d:b5:fd:d0:91:25:e3:
38:01:0f:79:6a:be:ed:4b:88:48:54:16:57:61:17:
42:4a:e8:f4:8c:37:9c:b3:32:4e:9c:4b:bc:ff:ae:
77:0d:b3:62:cf:11:dc:0e:b7:2d:0a:2a:7d:37:4e:
e3:72:fd:44:a2:38:84:c9:ea:15:c6:8b:65:ae:68:
20:e0:d5:1e:96:ee:be:c0:f5:f6:17:d0:08:d3:e0:
18:bd:50:49:30:fd:34:be:65:aa:93:b4:e3:fd:51:
9d:1e:ff:07:43:42:2c:ac:6c:b7:a6:b1:ae:17:dc:
22:61:8c:52:0a:7c:bd:32:dd:cc:be:ec:2c:3f:bf:
5e:1c:57:b7:02:df:17:81:ea:2c:18:bc:1a:b7:79:
a7:54:ab:06:53:37:81:4d:37:f2:df:9a:68:3f:50:
f7:de:c9:cb:87:4a:5c:27:f2:32:83:3e:db:79:e9:
c8:15:14:f8:32:ce:50:c2:8b:11:06:ff:6e:99:f5:
75:d7:c5:08:6c:ec:41:7b:84:fa:6b:8c:f9:b0:73:
23:83:7f:79:31:75:ba:55:06:91:cd:37:39:ef:25:
e8:11:01:59:de:62:e1:de:60:7c:c9:45:bf:67:9c:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:95:E7:A3:9C:18:A0:C7:C3:B2:24:0D:FC:6E:CD:86:50:7E:F0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0BiV56OcGKDHw7IkDfxuzYZQfvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.167.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:70:be:82:9e:64:51:db:81:46:21:49:f5:f8:56:94:9f:70:
d0:02:87:10:f2:e5:50:ff:a8:c7:d5:3a:a0:78:ec:d5:f2:ee:
74:f0:4a:a4:f0:a4:78:e7:8b:55:99:b6:34:c1:a4:8a:d9:6d:
84:83:68:07:76:49:3a:cd:26:23:df:f7:7b:3b:55:17:2e:59:
5b:40:8a:6d:6f:09:53:22:7d:97:ae:9c:2b:8b:7c:3a:1c:80:
dc:0e:f0:ff:48:2c:75:28:e1:2e:c6:32:21:b3:20:15:33:8a:
27:fc:a5:e9:f2:9f:ae:3e:cd:1e:81:15:6b:30:2a:77:0c:49:
18:d6:33:03:2a:03:60:b3:a4:8d:74:53:22:84:ee:56:bb:0a:
2c:95:d0:a3:bc:5b:2a:65:f7:8c:6a:55:f5:10:fc:de:e2:3c:
cd:c2:46:2c:a1:70:43:a5:be:5c:14:8a:c4:1a:72:f2:96:7e:
a2:16:2a:a8:40:cb:c6:48:35:5f:c2:00:2d:30:3c:d7:3c:9d:
6f:e3:42:a1:74:cd:9f:4a:44:69:1c:8a:a3:67:6b:09:15:37:
b6:4b:cc:f5:9a:85:93:56:74:93:09:8f:ad:1b:83:8b:28:27:
95:5b:5f:e7:4e:12:ce:c3:44:e6:8c:c8:1a:45:e7:11:0c:75:
39:de:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:42:03 2025 by rpki-client