Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cgBn26JkQVXARe--EaiVRJeO1wU.roa
File: cgBn26JkQVXARe--EaiVRJeO1wU.roa (raw, json)
Hash identifier: MPyVQviWzVEp0zM3LdL8zlimiuY/7L8ube/VnB0+uxc=
Subject key identifier: 72:00:67:DB:A2:64:41:55:C0:45:EF:BE:11:A8:95:44:97:8E:D7:05
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019876A39AC1241A384504B9704F7F9FF5FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cgBn26JkQVXARe--EaiVRJeO1wU.roa
Signing time: Mon 04 Aug 2025 19:51:30 +0000
ROA not before: Mon 04 Aug 2025 19:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154049
IP address blocks: 31.56.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:a3:9a:c1:24:1a:38:45:04:b9:70:4f:7f:9f:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 4 19:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=720067dba2644155c045efbe11a89544978ed705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:e9:1a:e6:60:77:c0:c9:72:ba:f0:66:bc:
43:fc:06:dc:59:cf:8d:d0:27:d9:01:19:43:d5:f9:
af:58:cd:71:b6:62:0b:93:3d:24:6e:bc:3b:01:7a:
75:a4:59:a5:eb:a5:82:1a:d2:f5:c1:3e:3a:e8:ab:
9a:50:37:c2:26:8f:b4:2c:78:d3:e6:23:6e:16:d2:
6d:a0:90:95:4e:60:d6:3d:04:c0:0a:e8:3a:a2:60:
6f:aa:9b:d2:ad:97:be:6b:6d:7d:1d:ac:c5:5a:bb:
66:3d:4d:40:4a:9b:ed:60:c8:f2:05:f2:6f:3c:b6:
f9:7e:e8:0c:f6:f5:b5:26:1e:cb:8a:a4:f3:8d:a9:
da:a3:19:06:88:03:d4:61:12:e3:0b:e2:d6:a0:23:
d6:ad:c4:85:cb:61:2b:39:a1:c7:7d:4b:d0:fc:93:
79:95:c8:50:15:eb:be:13:a9:85:99:7f:35:41:4e:
21:39:b6:ad:12:ea:fd:22:98:60:a1:bd:08:5c:ef:
32:a6:93:a3:91:7e:a4:64:d7:53:54:24:d1:26:a9:
95:15:8f:d5:29:dd:a6:1c:f7:b4:98:2d:48:52:1b:
8e:2f:e4:cd:e1:71:7e:77:08:56:83:d9:8a:58:ff:
33:3e:43:22:bd:70:11:4c:b5:96:5d:5b:00:cb:3a:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:67:DB:A2:64:41:55:C0:45:EF:BE:11:A8:95:44:97:8E:D7:05
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/cgBn26JkQVXARe--EaiVRJeO1wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.42.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e6:ba:89:39:8f:28:d1:67:8b:ab:7b:9c:00:a1:8e:9d:c7:
30:e5:f7:87:14:a2:af:b6:ff:26:72:30:1a:38:a2:45:fe:f0:
c4:d9:38:73:da:3f:de:fe:03:59:40:05:00:00:a8:c9:11:c2:
ae:27:9a:85:20:aa:08:6a:8f:c7:85:08:54:cf:ce:2f:f5:ab:
ed:52:72:b5:91:60:c4:82:64:fe:f1:af:97:67:2b:68:76:a4:
10:cf:af:46:47:97:c5:a0:f3:1c:26:74:20:aa:50:a0:28:e0:
74:8a:75:10:33:2f:c1:f3:e3:7f:d0:5a:dd:3d:73:2a:95:12:
aa:55:8e:4a:dc:ff:ad:c2:4a:61:b3:5a:d5:20:fe:80:46:93:
ca:b8:28:7f:0e:20:ec:c8:bc:dd:84:50:74:1a:63:f9:f3:44:
c8:9e:69:a7:9d:11:e2:5f:88:2d:ac:b0:12:07:c1:21:bd:ec:
9b:ae:86:db:12:5d:ae:a9:b3:b2:1d:d5:bc:2e:88:6e:d4:51:
47:f2:d5:bd:87:93:58:70:85:e3:a1:55:f2:76:19:8f:7f:e4:
26:96:b2:99:f2:6e:c2:71:21:11:20:40:34:d9:a4:b6:99:27:
ef:d1:bc:8e:cb:1b:ed:91:b6:8c:b4:79:44:48:13:25:5c:51:
4c:55:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:44 2025 by rpki-client