Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NqR_7Pn4dmvmhia5qCHdmO5qdgc.roa
File: NqR_7Pn4dmvmhia5qCHdmO5qdgc.roa (raw, json)
Hash identifier: Rn/SNLr2HSijbh28G9dA7in2Wc2CXO/JMH/FCytA0G4=
Subject key identifier: 36:A4:7F:EC:F9:F8:76:6B:E6:86:26:B9:A8:21:DD:98:EE:6A:76:07
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A2AEFB4D80E43BFA8057501C3C3923D3A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NqR_7Pn4dmvmhia5qCHdmO5qdgc.roa
Signing time: Tue 28 Oct 2025 13:09:03 +0000
ROA not before: Tue 28 Oct 2025 13:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 31.57.229.0/24 maxlen: 24
31.58.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:ef:b4:d8:0e:43:bf:a8:05:75:01:c3:c3:92:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 28 13:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36a47fecf9f8766be68626b9a821dd98ee6a7607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:7a:37:04:fd:3a:a8:95:88:3d:cb:dd:18:
2d:b5:4e:d0:f1:e8:03:7a:14:9d:a1:55:32:d8:eb:
b7:08:fe:03:df:ef:2c:d6:8d:90:f4:63:a1:4a:f5:
1b:da:71:5a:c0:f1:1c:fb:c6:cf:1e:19:d9:54:09:
63:78:82:e2:eb:ef:3b:26:ce:f8:09:05:69:f7:84:
21:5c:f1:a3:ce:69:8d:49:15:18:b3:df:bb:c3:43:
2c:c4:a2:85:26:b1:dd:30:15:94:fe:b7:e6:6e:8a:
74:ab:47:43:37:7c:b5:ee:29:d9:d4:3b:a5:2b:6c:
ad:9c:c0:eb:43:12:80:7f:e6:c7:12:d1:d4:82:9b:
83:8c:cb:2b:eb:fc:0d:78:44:63:55:8d:e1:87:b2:
fa:f7:14:a8:99:90:98:07:a2:e4:37:0d:fc:55:3f:
0b:87:39:ef:c0:e9:2b:8b:45:96:ff:94:c5:13:3a:
34:5a:a3:fe:9d:55:2a:c3:d2:b5:1b:c9:22:0d:05:
4c:06:10:fb:63:77:86:9d:a2:32:4b:e3:9d:0d:35:
79:6f:4d:e5:a5:eb:71:37:d2:d8:81:e2:8f:1b:15:
ad:7c:8b:ae:79:86:7f:0a:0c:03:ab:23:96:54:68:
8c:a4:0c:6f:10:3a:b6:84:53:80:36:6b:96:7b:be:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:7F:EC:F9:F8:76:6B:E6:86:26:B9:A8:21:DD:98:EE:6A:76:07
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/NqR_7Pn4dmvmhia5qCHdmO5qdgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.229.0/24
31.58.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0a:e9:31:07:10:44:b4:a9:46:5b:a2:5e:3d:a6:d9:86:23:
22:38:04:e7:fc:3f:79:69:2b:9a:37:75:2c:27:0a:a5:18:cd:
8f:5e:31:0e:da:71:26:c5:c8:51:e7:0b:d1:16:ee:6e:64:d5:
db:dd:28:f1:11:24:cc:6d:4e:73:96:0d:c9:23:07:0d:a3:c1:
c4:76:a6:5f:52:e0:fe:6e:92:31:6f:24:ac:44:f9:cf:7c:73:
ee:ff:bf:91:64:6b:05:e6:4e:cb:58:62:80:57:21:dd:b5:55:
64:35:a1:20:f4:0f:12:3d:0c:7b:6b:31:ce:1b:76:36:aa:be:
d7:a3:0c:70:e9:c7:09:b4:71:5f:45:e4:e6:03:6d:1f:63:70:
f6:17:10:80:a7:a4:70:34:ab:bc:8f:72:66:18:aa:d1:aa:8d:
fa:62:f9:9e:55:a5:61:0c:80:d4:a2:58:dc:ad:26:a1:46:db:
47:45:e4:16:1c:9b:03:4c:d5:64:79:66:80:2d:8c:43:74:f2:
e4:3b:4f:c8:b2:80:03:25:6c:b8:2f:ca:84:3f:c1:39:7d:c9:
79:27:0c:d9:20:2a:67:81:6e:b4:06:69:be:6f:78:75:65:65:
db:ae:2e:a1:77:f4:63:7b:4d:25:62:70:79:71:23:0f:68:1a:
45:14:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:31 2025 by rpki-client