Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mP0NqBe9d5u3rHho0MU-Umz_f50.roa
File: mP0NqBe9d5u3rHho0MU-Umz_f50.roa (raw, json)
Hash identifier: mquOTNidV6vpMLCapBBu6zWnqP2XIB7x8EQOGWMGQa8=
Subject key identifier: 98:FD:0D:A8:17:BD:77:9B:B7:AC:78:68:D0:C5:3E:52:6C:FF:7F:9D
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A4AE4DB508B1489BD00B276FDDE6ACBD9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mP0NqBe9d5u3rHho0MU-Umz_f50.roa
Signing time: Mon 03 Nov 2025 18:05:03 +0000
ROA not before: Mon 03 Nov 2025 18:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34872
IP address blocks: 31.59.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:e4:db:50:8b:14:89:bd:00:b2:76:fd:de:6a:cb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 3 18:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98fd0da817bd779bb7ac7868d0c53e526cff7f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:8c:69:5d:21:51:99:cf:26:72:18:ec:5d:
3d:2b:66:50:cf:4f:d6:7e:49:cb:c8:dc:2e:42:e4:
b3:ee:27:f7:75:a5:86:00:1d:19:3a:e7:75:69:b4:
37:c2:22:f4:c2:f7:be:be:68:b1:a8:c6:c8:7b:16:
1b:9b:09:ff:1f:a0:03:7d:d7:eb:2d:cb:ab:62:de:
fe:ac:13:33:dc:c4:53:c7:45:9c:58:8e:07:a9:1a:
79:8d:1c:5a:25:d2:7e:08:00:32:a6:b7:03:5a:a6:
77:88:bc:e0:f6:2b:96:b8:de:21:da:c6:72:1e:79:
79:e7:e7:9d:ff:48:47:06:cd:bb:83:85:e8:28:85:
d3:cc:85:76:89:69:03:37:48:a7:41:00:78:ac:46:
6b:2c:ab:08:d4:92:a2:b2:d4:65:89:84:78:08:60:
ba:95:6c:b8:6b:de:13:0c:70:5d:fe:1f:d6:da:67:
77:8e:ec:8e:e6:bc:63:16:6b:c0:94:4c:fa:33:1d:
8a:9b:90:07:5a:8a:f1:6f:55:94:3b:99:ab:6a:c3:
a3:50:0d:33:19:f5:4d:da:02:bb:b6:ad:87:7c:65:
a5:1c:1c:79:d5:42:1b:64:ae:12:cb:79:f5:1e:cc:
91:c2:76:43:eb:16:ab:b0:9a:35:8b:fc:76:64:9b:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:0D:A8:17:BD:77:9B:B7:AC:78:68:D0:C5:3E:52:6C:FF:7F:9D
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mP0NqBe9d5u3rHho0MU-Umz_f50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:44:eb:25:5d:4f:e7:e6:03:d3:e9:41:31:a2:48:e2:ca:50:
ac:18:a4:aa:88:ac:ea:a2:2f:6b:5d:2f:18:c2:9e:3b:c7:3a:
6c:3c:0d:87:46:f8:47:64:d0:92:ff:fa:61:f0:da:a0:6e:0b:
bb:7c:e2:0d:18:a0:89:35:dc:d5:d7:32:90:7d:65:3b:ff:aa:
70:0b:05:91:4c:7e:d9:c3:15:f1:56:d0:d1:3b:0d:91:66:e6:
af:58:03:72:64:dc:04:6a:d8:10:af:87:da:73:08:87:ba:56:
b0:1e:3c:71:22:0f:aa:1e:f8:8a:86:3e:c0:b1:5f:49:63:8e:
ed:8b:2a:52:36:64:a8:a9:04:3b:76:50:4f:f5:0a:f7:75:2f:
99:7d:52:37:00:70:0a:13:42:ae:44:99:2e:5f:30:4d:4a:01:
a6:a3:fd:05:7c:54:57:af:2b:f2:81:2a:df:97:4b:b5:81:5e:
61:bf:ea:d2:85:6a:68:23:cb:f0:a5:dd:e3:97:48:cb:49:87:
9f:9f:2b:09:a0:ca:1c:64:74:cb:9b:f6:26:4d:8d:55:ad:61:
76:be:b3:42:69:c7:00:1b:cf:2d:e0:89:3c:ce:35:55:37:c9:
0b:41:7c:2b:ed:c0:22:1b:d9:b3:d8:dd:4c:60:fb:7f:2a:ab:
d7:88:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:19:32 2025 by rpki-client