Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/scRxCz5fD4JJMvsKKpcKPftHxPQ.roa
File: scRxCz5fD4JJMvsKKpcKPftHxPQ.roa (raw, json)
Hash identifier: yEfFoA3fPmENxb6vBaLq6pC+2MQI+9s64kTKDsGy+p0=
Subject key identifier: B1:C4:71:0B:3E:5F:0F:82:49:32:FB:0A:2A:97:0A:3D:FB:47:C4:F4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019A2ACCEA343CAF22881052019807CCA141
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/scRxCz5fD4JJMvsKKpcKPftHxPQ.roa
Signing time: Tue 28 Oct 2025 12:31:03 +0000
ROA not before: Tue 28 Oct 2025 12:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215531
IP address blocks: 31.58.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:cc:ea:34:3c:af:22:88:10:52:01:98:07:cc:a1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 28 12:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1c4710b3e5f0f824932fb0a2a970a3dfb47c4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:a1:bf:fd:fb:ad:7e:cb:b8:b1:5c:92:e5:
99:b5:9b:8e:97:ce:29:97:b9:d7:35:6e:31:53:49:
9b:53:1c:4d:fd:b3:64:89:36:b7:58:a1:37:4c:07:
c0:f7:51:c2:c6:01:b8:0d:e6:be:b3:e4:81:38:f7:
9f:db:19:6d:50:a6:d5:64:f8:cb:41:92:04:57:9d:
93:d4:a2:0a:ad:bb:ad:32:66:ab:81:04:ec:b6:56:
8b:45:09:02:a2:63:af:68:a8:48:ca:e8:70:a7:01:
89:e8:2f:c5:9e:d5:31:82:e3:86:3a:4b:7b:d9:1c:
60:99:a1:18:16:31:5b:3d:02:3f:b9:2d:7b:3a:26:
3a:01:af:4a:03:3b:e7:f6:41:21:85:3a:e1:e9:7d:
c5:2f:89:aa:7e:a8:b7:e5:0d:eb:09:a2:0e:eb:d2:
bf:95:f0:f4:a3:9c:b5:0d:36:ec:a0:2d:68:69:1d:
1c:33:48:5e:49:a3:94:2b:5d:f9:c8:2c:16:54:0e:
d9:cb:2a:94:b6:dc:a6:16:7f:cb:c1:57:45:52:5a:
d6:04:58:00:2c:46:01:e7:c4:7f:b7:c6:85:99:41:
b8:66:32:27:e8:7c:f4:d1:78:25:1e:d0:7f:9a:ac:
05:3d:d5:8c:88:6c:6b:43:4e:cb:fd:fb:ff:47:2c:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:71:0B:3E:5F:0F:82:49:32:FB:0A:2A:97:0A:3D:FB:47:C4:F4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/scRxCz5fD4JJMvsKKpcKPftHxPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.245.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d4:71:ed:41:b4:40:8b:c5:64:ac:f7:2f:1d:ea:4b:79:5f:
3f:47:82:72:98:f5:91:67:82:08:cb:5c:0b:7d:90:a7:aa:7f:
21:0e:8f:04:36:e0:b6:77:10:67:6f:92:dc:ec:1d:74:ad:8e:
12:a0:83:91:93:84:73:6e:08:d5:75:8e:78:b6:b0:41:dd:12:
91:b5:8e:09:d2:c5:f3:09:6c:f7:cb:a3:a4:06:3b:e2:18:b1:
e9:39:84:fd:d1:28:c7:b2:57:d6:11:e6:7e:93:a0:5e:c9:24:
27:94:4c:98:74:96:1b:63:ae:23:df:6a:ed:6a:81:78:9c:68:
64:6d:4c:d6:a6:49:4b:24:48:ba:e3:f7:ed:7f:1e:3c:51:36:
5a:f4:40:b6:fb:d4:ac:15:3c:3a:e6:b7:e1:da:40:5e:21:55:
1d:62:4c:2d:57:93:8a:a5:3b:27:24:41:e5:94:d1:9b:8e:1c:
33:92:7f:8e:11:07:47:f4:a3:3a:ef:a7:14:6f:5a:b0:96:3d:
73:39:ee:cd:c3:fd:b0:ba:22:99:61:f9:8c:44:ec:cf:98:ed:
76:be:7d:bb:38:30:be:e2:76:14:90:2e:7a:42:aa:38:2d:21:
40:63:3c:7f:25:b0:bc:36:32:b1:0f:27:e6:a7:02:3f:3a:2f:
f9:bc:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:31:02 2025 by rpki-client