Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/muHfVcFJc-ZFqvH1a-iHcUFiZGo.roa
File: muHfVcFJc-ZFqvH1a-iHcUFiZGo.roa (raw, json)
Hash identifier: T7fbJsEqVLdpqZG27WpVjOJ51ID1zkfW10l8ADVHOBI=
Subject key identifier: 9A:E1:DF:55:C1:49:73:E6:45:AA:F1:F5:6B:E8:87:71:41:62:64:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01985138FB29A73259A9E8217C91AB67B8DF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/muHfVcFJc-ZFqvH1a-iHcUFiZGo.roa
Signing time: Mon 28 Jul 2025 13:29:05 +0000
ROA not before: Mon 28 Jul 2025 13:29:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 31.56.59.0/24 maxlen: 24
31.56.125.0/24 maxlen: 24
31.57.44.0/23 maxlen: 23
31.57.95.0/24 maxlen: 24
31.57.148.0/23 maxlen: 23
31.58.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:38:fb:29:a7:32:59:a9:e8:21:7c:91:ab:67:b8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 28 13:29:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae1df55c14973e645aaf1f56be887714162646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:4a:64:a4:f3:a6:00:fd:75:61:e4:78:f2:
4f:96:53:ad:40:0c:60:c8:ab:d5:a0:80:e8:32:6e:
a1:f4:02:3f:f3:25:b1:6f:80:37:1a:84:e7:d0:ca:
11:93:d1:e9:aa:7a:16:80:9f:bc:b9:c5:25:fc:f7:
10:1b:2a:1e:91:2e:fb:be:d0:2e:26:dd:3a:7c:51:
53:e8:8b:96:fd:97:24:ed:04:41:57:4a:37:2d:d6:
13:0f:15:96:2a:70:e6:00:1f:64:7c:51:d8:e9:3c:
20:45:c2:91:5a:4c:88:61:da:7b:0e:88:70:ab:d6:
0a:1a:c5:2e:46:bc:84:4c:d1:22:7f:98:18:8b:8c:
d5:75:29:fe:3a:fe:2e:43:94:c1:3c:0a:58:a8:22:
d4:92:b3:27:d7:c7:62:78:8c:e2:58:a8:fd:09:e4:
9e:94:c4:4d:a3:80:a1:e9:c5:e5:92:b1:6c:ec:aa:
03:11:df:c9:87:6f:35:c3:ea:b1:11:3d:00:6b:68:
42:b4:38:66:42:ca:7c:0a:e7:61:bd:47:d2:b4:65:
de:fc:8f:44:de:6d:a4:90:ad:ad:5a:0f:2d:c8:a7:
0a:ac:73:56:43:2f:11:a4:e7:eb:cf:49:43:d4:a9:
43:2e:d7:47:3f:16:e0:a6:4d:c6:8c:e6:d0:42:a0:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E1:DF:55:C1:49:73:E6:45:AA:F1:F5:6B:E8:87:71:41:62:64:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/muHfVcFJc-ZFqvH1a-iHcUFiZGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.59.0/24
31.56.125.0/24
31.57.44.0/23
31.57.95.0/24
31.57.148.0/23
31.58.131.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e8:41:e0:9e:db:45:2c:bc:99:ed:95:c9:c2:31:90:d3:a5:
e3:58:db:99:aa:ab:c0:16:31:98:12:d7:a3:f2:a0:50:12:8b:
ce:67:f3:33:92:26:e4:7b:a1:96:95:94:59:5f:69:eb:25:9e:
a1:54:fd:15:d9:71:8d:52:89:e7:cd:1a:8c:8a:a6:0f:70:a6:
a4:e2:8d:fa:5a:8c:97:11:df:65:39:17:60:05:11:4f:89:e9:
ab:ac:c8:9a:d5:9f:33:5c:fb:b3:9c:10:49:a3:52:96:64:41:
a3:36:d2:f8:2e:6c:59:5e:84:8b:5d:15:70:f4:a0:af:8c:a0:
a9:40:29:25:fb:94:34:7e:67:b9:de:5c:90:07:33:4e:5e:e3:
5d:3a:ad:e4:1d:0f:dc:be:49:8a:80:c3:ee:12:4b:78:16:c4:
5a:e6:c5:a6:7e:7f:17:75:93:26:5b:2d:5b:17:9e:d4:2a:f6:
c8:2b:87:d0:be:bc:ef:bd:f3:6e:6f:35:9e:71:9d:ab:30:1e:
12:04:9e:4e:92:d9:6f:52:d5:59:71:0a:28:59:cf:66:d9:ba:
09:0e:ff:50:2b:da:bb:ad:ac:3c:fe:00:32:ee:80:8d:0e:15:
c2:38:7f:f0:c1:5d:85:ec:e2:b6:0c:9f:db:15:ed:5b:4b:78:
9d:15:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:41 2025 by rpki-client