Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vux-dcaWs6hn6yW487smQS2GkiU.roa
File: Vux-dcaWs6hn6yW487smQS2GkiU.roa (raw, json)
Hash identifier: JN7akevL8l9S2lBWg/QBUS3EQWPKnT+pMdV5/PJ5VlA=
Subject key identifier: 56:EC:7E:75:C6:96:B3:A8:67:EB:25:B8:F3:BB:26:41:2D:86:92:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198578C02BF53BC13C3CB2D7BCD17150E1A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vux-dcaWs6hn6yW487smQS2GkiU.roa
Signing time: Tue 29 Jul 2025 18:57:30 +0000
ROA not before: Tue 29 Jul 2025 18:57:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 31.56.211.0/24 maxlen: 24
94.183.151.0/24 maxlen: 24
94.183.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8c:02:bf:53:bc:13:c3:cb:2d:7b:cd:17:15:0e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 29 18:57:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56ec7e75c696b3a867eb25b8f3bb26412d869225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:6f:87:cf:47:86:b8:d8:88:58:a0:ed:a3:
2b:83:01:c0:02:0f:75:f1:86:87:7a:0d:83:7b:d8:
88:f5:ad:1c:48:58:c5:fb:3a:01:36:5b:ca:5a:ba:
f5:de:40:31:76:70:93:0c:79:e4:37:7c:68:3c:7c:
4d:92:bb:41:ce:42:f4:25:a3:05:41:ee:27:86:11:
ca:c1:c9:06:32:c2:83:85:a4:76:8e:60:a7:6b:94:
73:97:de:8f:7c:f2:55:1a:1b:44:06:ed:1e:c0:01:
5c:40:d2:de:1b:35:f6:d3:9b:1e:43:f0:25:5d:98:
cf:74:9f:71:8e:08:37:f4:80:62:16:0f:13:c8:9c:
df:f0:49:80:b1:8b:36:d2:a5:7a:b0:26:99:f7:b7:
90:a4:77:1f:fe:67:85:cf:d7:91:19:b2:72:4b:80:
88:5f:c3:14:d3:81:e3:b9:dc:8e:c5:0f:67:8b:78:
ad:a7:7e:fb:37:ac:9a:53:ab:8b:b3:a8:8d:7e:ff:
23:34:11:c9:5f:d4:fb:67:22:37:8b:fb:41:8b:66:
2c:f2:c7:e1:e4:2d:b0:f5:95:d4:50:db:ed:22:02:
45:5c:43:ca:6f:1f:11:18:8d:42:da:1c:9f:57:d7:
d5:cc:84:94:d8:2d:48:56:fe:4f:8b:12:ca:53:91:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:7E:75:C6:96:B3:A8:67:EB:25:B8:F3:BB:26:41:2D:86:92:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Vux-dcaWs6hn6yW487smQS2GkiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.211.0/24
94.183.151.0/24
94.183.158.0/24
Signature Algorithm: sha256WithRSAEncryption
62:54:78:22:f3:d0:1b:ae:5a:13:18:01:f6:43:0e:98:be:1f:
54:bb:11:29:20:44:ab:13:a0:78:2b:e5:94:ce:4f:27:f3:1f:
de:c5:41:29:a3:ca:79:9c:9c:0e:08:64:c9:4f:26:19:3b:4c:
14:28:c2:73:fe:e7:b3:29:41:0e:33:17:dd:88:14:fc:40:c1:
4c:7d:db:5d:92:57:23:05:54:59:8f:b2:4c:5d:25:f6:b4:2c:
a7:a1:65:7f:7c:73:a4:d6:f1:42:aa:56:fe:fb:0f:09:8f:64:
7d:ba:45:90:57:5c:ae:b4:bc:96:37:b8:ed:9d:70:b5:d2:09:
de:29:f3:af:d4:12:d3:47:6d:51:c8:7b:18:8a:b5:b2:91:01:
79:5a:b7:49:3c:f2:64:26:0e:4c:44:e2:68:1d:ff:c6:33:c6:
9c:aa:8a:c4:79:ef:e7:e8:05:6c:a2:5d:a1:3b:d6:89:0f:2f:
2e:31:5c:3b:cf:7b:00:98:52:92:e7:fc:4c:46:8c:01:47:12:
b5:58:61:6d:e6:75:d1:6b:7e:65:39:e2:c2:d0:28:e8:e7:4c:
6b:a9:6b:57:2e:90:1a:76:c2:1c:4f:a6:43:49:13:fd:0f:e5:
af:d1:2d:40:cf:42:fd:2c:c7:15:2a:f4:42:2b:b9:48:3b:49:
bb:a3:aa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:49 2025 by rpki-client