Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HJUR0f_TGbADFJwwyjwmo__367A.roa
File: HJUR0f_TGbADFJwwyjwmo__367A.roa (raw, json)
Hash identifier: 9qNMkg0R+VnRXo5R44pTkaw7P47Vt9hAx/L5y5HVSbA=
Subject key identifier: 1C:95:11:D1:FF:D3:19:B0:03:14:9C:30:CA:3C:26:A3:FF:F7:EB:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198513BBA202954B57DDB41211C312549A5
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HJUR0f_TGbADFJwwyjwmo__367A.roa
Signing time: Mon 28 Jul 2025 13:32:05 +0000
ROA not before: Mon 28 Jul 2025 13:32:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207075
IP address blocks: 31.57.53.0/24 maxlen: 24
31.59.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:3b:ba:20:29:54:b5:7d:db:41:21:1c:31:25:49:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 28 13:32:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c9511d1ffd319b003149c30ca3c26a3fff7ebb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:9b:47:d4:84:97:e8:44:d3:32:ba:6b:e9:
09:6a:4d:06:c2:cf:3a:e1:20:65:bb:bf:ec:ca:fa:
c5:fe:ac:41:3a:f4:e6:0e:dd:ef:1f:29:a9:d6:be:
58:a8:0c:29:4a:22:72:75:58:d8:d6:7e:e3:6e:44:
e4:b7:0c:76:e9:ef:8f:56:1e:e9:80:26:2b:b6:79:
6b:f4:20:a4:58:ce:86:92:83:65:b0:4c:23:f5:1e:
fd:92:bd:e1:7b:63:77:1a:07:2c:fb:5b:08:51:ec:
52:e5:27:1a:eb:64:2e:8d:ec:c8:d8:d6:a6:2d:53:
91:e3:e0:30:f9:a9:22:16:3a:15:da:b0:8c:6f:dd:
fc:0d:fb:8b:bd:d3:5b:a6:ba:f2:2c:9f:59:30:6b:
3e:81:a2:2a:e4:ba:21:2d:77:d5:ad:68:84:67:83:
58:c4:21:eb:b4:e0:cb:19:66:34:6c:8a:f9:10:a3:
fb:b1:ea:c7:15:e6:5c:2d:9e:d4:12:94:5d:07:df:
1b:5e:67:78:3e:32:32:0c:b2:60:97:1d:8b:79:37:
4e:88:53:15:1e:f7:7e:6a:44:89:8b:1d:39:9b:fc:
e5:40:cd:6b:22:7f:04:20:e1:15:4d:ab:3b:52:c3:
b6:29:37:99:39:66:70:b8:bb:4a:71:ed:61:ea:6e:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:95:11:D1:FF:D3:19:B0:03:14:9C:30:CA:3C:26:A3:FF:F7:EB:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/HJUR0f_TGbADFJwwyjwmo__367A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.53.0/24
31.59.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9d:6c:f0:32:62:31:9f:f1:a6:43:52:4e:df:21:a8:d9:d2:
32:ed:1f:6b:04:3c:a0:08:50:33:38:2d:75:36:26:d3:14:a9:
0d:41:87:4a:7d:f4:ae:a4:af:2f:9f:8c:06:78:45:cc:b3:f2:
3e:d2:50:ed:34:80:e6:76:ed:74:b1:b5:cb:53:11:75:b2:3b:
26:2b:bf:f8:2a:b4:22:33:9e:a1:14:b9:15:dc:a9:ba:a0:93:
16:a6:78:0b:a6:9b:35:a4:de:9c:46:c7:35:63:a8:10:fb:8f:
17:f1:67:b8:48:8e:be:dd:e7:d9:da:75:02:64:c7:32:68:cf:
be:52:e0:da:7d:fd:b3:73:fd:71:af:2b:71:06:18:77:27:2d:
d5:af:28:33:09:45:e7:5d:04:64:55:9e:8d:71:c6:06:64:9a:
ca:66:14:bd:6f:17:4e:84:40:66:0e:99:0a:c9:e2:e2:03:bd:
c3:40:46:eb:91:d5:7a:cd:d0:0d:e3:89:9c:4b:4e:fa:2c:94:
73:85:3e:4b:c3:ed:e6:57:f2:29:e6:4b:8a:f4:a9:c3:ce:03:
4e:7e:b1:f8:ac:85:12:f6:e4:4b:f3:ed:d7:e4:92:f7:c4:b1:
58:a5:9b:34:09:b4:3b:f0:2b:10:74:24:b7:68:36:9c:24:e0:
ec:da:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:35 2025 by rpki-client