Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dXf3S8HV12p0Kc_aVisGk-Mphlw.roa
File: dXf3S8HV12p0Kc_aVisGk-Mphlw.roa (raw, json)
Hash identifier: K974Wx4E7XAVu09AbqsNZgBIPYS1Yj3FYgZMembv6xU=
Subject key identifier: 75:77:F7:4B:C1:D5:D7:6A:74:29:CF:DA:56:2B:06:93:E3:29:86:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01986E914265AD77B4AB527109E9593AE19D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dXf3S8HV12p0Kc_aVisGk-Mphlw.roa
Signing time: Sun 03 Aug 2025 06:14:30 +0000
ROA not before: Sun 03 Aug 2025 06:14:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.29.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.57.24.0/24 maxlen: 24
31.57.31.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 24
31.57.164.0/23 maxlen: 24
31.57.180.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6e:91:42:65:ad:77:b4:ab:52:71:09:e9:59:3a:e1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 3 06:14:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7577f74bc1d5d76a7429cfda562b0693e329865c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:45:0b:30:15:cf:14:f8:e6:57:a8:89:57:
46:e5:8b:cc:15:08:56:43:c0:d3:42:a2:b3:8f:6a:
9e:33:b4:95:c7:79:ff:02:0b:a9:30:5c:ea:0d:bd:
e7:94:09:be:66:36:85:31:7f:b7:e3:a1:c1:68:b8:
1c:32:2d:6c:52:d7:80:da:5d:48:15:57:81:67:d0:
49:0d:43:55:62:cb:77:a1:01:77:53:cd:d9:fd:37:
fc:05:69:fc:c1:b0:19:0e:6f:40:cb:98:c1:a9:cb:
3a:8c:83:5a:ca:63:63:18:bf:b2:bc:55:3c:a6:c1:
ff:84:ff:6d:ca:10:6f:d0:fb:f9:3d:08:3e:a2:44:
ba:1b:2a:d2:ff:25:a6:dd:e5:f1:13:03:b3:b2:24:
0d:48:3f:5e:ec:79:cc:cd:79:8f:bf:52:5c:68:15:
68:d4:91:47:37:27:77:6f:1b:e1:3d:89:93:73:db:
e0:0b:35:ad:b4:87:15:5f:e3:9a:6d:c2:96:c2:b6:
56:73:3b:94:cd:e2:e3:0c:e1:d4:48:bb:21:04:6f:
36:18:29:31:a1:8b:b2:5c:6a:30:78:cc:24:1f:dd:
02:be:c2:02:33:a6:b9:59:7f:5a:53:b8:d2:89:c6:
d0:6a:76:a1:aa:0c:bd:46:ed:fa:a3:1f:d5:56:a8:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:F7:4B:C1:D5:D7:6A:74:29:CF:DA:56:2B:06:93:E3:29:86:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/dXf3S8HV12p0Kc_aVisGk-Mphlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.29.0/24
31.56.86.0/24
31.57.24.0/24
31.57.31.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.221.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
09:db:30:25:4c:59:14:9b:b7:d0:11:15:29:bf:4c:24:a5:79:
a2:4e:78:6d:94:ff:5d:97:c6:85:c5:61:69:6a:82:d5:08:3a:
d8:9b:ec:42:48:98:42:d2:4b:18:b3:90:14:7f:6d:bf:e3:e2:
49:7c:0d:86:35:c1:3d:bb:d3:50:a1:2c:88:a1:7b:4c:bc:9d:
b6:42:fa:6a:dc:e5:b6:0c:a9:85:83:4f:d6:ef:e7:ae:e9:70:
88:bd:bf:5c:90:cc:e0:3d:f5:98:c3:83:ee:4a:92:8e:1c:30:
42:63:4f:ca:e5:5e:c4:13:cb:80:ea:3d:28:dc:85:56:5e:bf:
8b:f3:95:4c:98:ea:bf:6f:67:ba:6a:e6:04:12:f4:94:8c:19:
31:43:34:f1:d9:1b:0c:64:53:c3:18:1b:19:f2:80:da:28:62:
03:ea:9c:60:42:e1:b6:19:59:da:86:fd:d6:bd:84:d9:2a:11:
60:f7:47:ae:ed:c1:72:2b:56:7c:de:a8:6d:a4:ab:ec:ff:89:
bf:f1:82:1f:51:9e:1c:27:18:3f:05:a8:02:74:e7:03:a5:05:
a4:de:f4:40:b4:b5:bd:e0:33:5c:b7:2e:df:a4:d8:28:f7:73:
e2:8b:0e:f9:1e:3a:75:11:5e:d7:31:10:66:9b:5e:77:dd:d2:
ab:ff:47:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:26 2025 by rpki-client