Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A5eXdxmvsBz1Sg14oh4anEh1q1E.roa
File: A5eXdxmvsBz1Sg14oh4anEh1q1E.roa (raw, json)
Hash identifier: qru4ZfVv1aGttUHuybRqJcPWf+W02z/GXSd991oBTto=
Subject key identifier: 03:97:97:77:19:AF:B0:1C:F5:4A:0D:78:A2:1E:1A:9C:48:75:AB:51
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A359D782A1F07A6EB44D03B26293151F8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A5eXdxmvsBz1Sg14oh4anEh1q1E.roa
Signing time: Thu 30 Oct 2025 14:55:03 +0000
ROA not before: Thu 30 Oct 2025 14:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153100
IP address blocks: 31.59.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:9d:78:2a:1f:07:a6:eb:44:d0:3b:26:29:31:51:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 30 14:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0397977719afb01cf54a0d78a21e1a9c4875ab51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:e6:58:09:4e:9f:fd:3e:eb:74:d9:39:dc:
96:56:d8:b9:b9:cd:ea:04:3c:b5:3e:e5:eb:c1:f2:
34:12:2e:f1:84:16:0e:cd:d9:0c:8f:fb:c0:43:b6:
cd:52:7f:0c:10:9e:31:66:7a:9e:a0:74:4a:d8:09:
5d:9c:ac:81:45:0d:43:29:fd:d2:db:5a:0b:e9:60:
66:f6:f1:fb:58:90:c2:10:ca:76:14:be:54:c5:26:
80:d4:14:65:6d:c0:a4:4c:94:3d:13:7b:3f:b9:4d:
9e:e7:3e:ee:8d:34:54:9e:35:1f:9f:e1:ad:e4:d9:
0e:2e:d8:ca:bd:3f:60:af:55:b6:24:c0:f5:82:2d:
2c:4a:54:84:ca:66:1b:7d:eb:31:7a:12:f0:be:0f:
99:3e:2b:4b:25:23:37:68:b1:a6:96:4e:f6:e9:51:
b1:d2:57:34:ba:25:b7:03:59:a5:f1:e3:db:23:43:
79:8d:c1:3a:fd:92:a4:13:3d:a1:b1:3c:d1:6f:23:
73:cc:af:ab:de:35:95:f0:ba:4b:7d:52:33:af:3d:
31:f5:fe:0f:8b:6c:3c:62:6c:1c:e1:5d:f8:ac:df:
a6:f5:11:de:c3:1f:91:ee:9e:10:cc:c6:99:89:34:
69:e9:33:5a:39:c0:27:35:d4:4a:c1:84:b3:ae:06:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:97:97:77:19:AF:B0:1C:F5:4A:0D:78:A2:1E:1A:9C:48:75:AB:51
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/A5eXdxmvsBz1Sg14oh4anEh1q1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7a:a4:a8:83:e9:ea:ba:98:1a:c8:db:63:25:54:58:24:f7:
0c:29:ad:19:3e:8e:9a:a1:58:9c:9d:14:7d:d8:50:45:ff:a7:
02:9d:76:55:2b:cd:c5:5c:93:f5:91:b1:5e:1e:b4:c3:a4:7a:
30:29:3c:ad:ce:2b:6d:2d:86:56:fd:a5:fb:74:5c:8e:53:3a:
8a:63:44:9f:a3:89:0a:09:33:f8:28:74:f7:03:63:84:9d:ab:
e4:78:7f:22:08:87:da:f1:3d:17:31:c8:26:61:bd:5b:4f:5c:
89:d0:ce:cc:3f:57:f5:5a:9d:68:4a:5a:dc:9f:ce:bb:89:05:
a7:9d:2d:fe:2b:77:60:3a:aa:c9:57:aa:86:60:97:8d:9b:ed:
50:68:d3:2e:f9:da:2f:14:ad:c6:0c:c3:a7:cc:51:a0:db:6b:
99:74:94:4a:98:d3:bf:ca:44:8b:5a:3b:df:8e:28:39:d7:ce:
36:c5:a4:94:05:0d:0a:d1:9b:47:69:ca:e2:25:0a:86:ee:0e:
d8:ac:56:d7:2b:9d:00:ea:e9:38:cd:4e:42:ae:6b:f5:90:e3:
27:1c:56:86:19:0f:0a:e7:6d:bc:e1:ad:6c:31:9a:7d:11:d0:
d9:a0:26:b6:48:c0:c4:5e:7e:07:03:8d:42:b3:5c:f1:b1:68:
fc:a0:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:04:34 2025 by rpki-client