Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u4MRT82WIsX1Yt4r3m9haQgqsmE.roa
File: u4MRT82WIsX1Yt4r3m9haQgqsmE.roa (raw, json)
Hash identifier: L31LglY0+bLbysParAxxRwZGGvYh1ww6PPtmi6x0n00=
Subject key identifier: BB:83:11:4F:CD:96:22:C5:F5:62:DE:2B:DE:6F:61:69:08:2A:B2:61
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197440EED0C2090C12A8F4D788D9FCFFAD9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u4MRT82WIsX1Yt4r3m9haQgqsmE.roa
Signing time: Fri 06 Jun 2025 07:05:18 +0000
ROA not before: Fri 06 Jun 2025 07:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 31.57.98.0/24 maxlen: 24
31.58.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0e:ed:0c:20:90:c1:2a:8f:4d:78:8d:9f:cf:fa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 6 07:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb83114fcd9622c5f562de2bde6f6169082ab261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:eb:4f:02:b6:c8:ff:b0:5c:91:e9:e1:ad:
27:71:50:8b:e3:41:ea:43:63:98:ef:94:d6:cc:4b:
91:a5:27:c3:9b:05:4f:7e:e1:58:ce:5f:13:82:8b:
9a:d7:51:a6:c1:aa:0f:06:9c:d8:55:cb:35:d3:81:
5a:0d:c2:0f:b2:f6:7a:41:14:3d:10:35:36:ad:98:
3c:78:12:f6:20:30:76:c6:e1:61:96:09:96:6f:c0:
4b:77:27:fd:d2:13:4b:44:d8:f6:4b:a5:51:fd:3b:
4c:c3:43:1b:e2:9f:39:92:8c:cf:8c:63:88:d2:83:
f2:1f:8c:ee:5c:74:a5:cf:91:00:0f:76:8d:04:2e:
90:8e:16:bf:37:40:cf:3a:a6:fa:59:41:50:61:c5:
63:a8:7a:f9:b5:a5:6a:92:aa:db:73:14:94:86:6c:
e4:b1:ed:ba:01:0d:69:e2:c1:b6:0b:57:29:a4:90:
9e:bc:1b:54:fc:be:f5:19:6a:c4:57:bf:ec:c8:0b:
82:5a:bb:91:3e:78:b5:9b:e3:9f:2a:61:34:11:5b:
d8:20:39:d9:22:ca:04:b7:cd:c6:d7:d5:6f:e0:e6:
a6:26:a3:20:b6:ce:7d:bc:5d:15:7b:66:cb:9a:22:
e7:96:d0:1e:14:90:e3:be:1a:53:c7:5c:6c:19:05:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:11:4F:CD:96:22:C5:F5:62:DE:2B:DE:6F:61:69:08:2A:B2:61
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/u4MRT82WIsX1Yt4r3m9haQgqsmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.98.0/24
31.58.65.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7a:ed:1d:84:50:05:46:82:b6:69:22:de:a6:15:e7:c4:67:
37:98:e0:47:5d:95:79:18:9f:91:2f:9d:f2:c5:1c:82:59:82:
29:c6:9d:d2:64:8e:1d:de:05:a2:ad:49:76:44:29:4e:18:2b:
9a:b3:59:94:23:d3:96:e4:ef:ba:d2:b4:c8:eb:2c:18:dd:d8:
e1:ba:19:2f:50:34:71:83:9c:3e:1a:ae:84:c5:37:9f:59:73:
73:9a:09:af:38:f8:1e:0c:0b:bb:a0:a5:f8:1a:e9:62:19:71:
c9:2d:c2:66:70:97:bd:a5:13:e4:5f:4f:f7:2c:18:f5:06:a3:
fa:01:2f:c4:5f:1f:9d:e6:49:34:f9:e9:a1:a9:7b:0a:c7:5d:
41:40:12:5d:88:8b:9e:6d:f8:b9:bf:74:5f:c0:d9:76:18:4f:
7a:ae:26:8a:a7:03:ef:8a:2d:5a:27:5f:d0:b5:92:08:1d:cd:
41:9d:3f:1c:46:01:43:6a:65:7c:01:fa:1f:2a:5e:43:32:1a:
b5:02:42:6f:50:35:3e:d9:83:e0:3a:26:3e:ff:db:a1:d6:c8:
32:ea:66:95:85:de:56:3c:5f:d3:43:cc:21:10:42:07:3d:88:
1c:5e:9f:67:b8:29:5e:9f:9c:b1:2f:d9:71:bd:e5:04:8c:fd:
c9:bf:5a:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZdEDu0MIJDBKo9NeI2fz/rZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjA2MDcwNTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjgzMTE0ZmNkOTYyMmM1ZjU2MmRlMmJkZTZmNjE2OTA4MmFiMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBDrTwK2yP+wXJHp4a0ncVCL40Hq
Q2OY75TWzEuRpSfDmwVPfuFYzl8Tgoua11GmwaoPBpzYVcs104FaDcIPsvZ6QRQ9
EDU2rZg8eBL2IDB2xuFhlgmWb8BLdyf90hNLRNj2S6VR/TtMw0Mb4p85kozPjGOI
0oPyH4zuXHSlz5EAD3aNBC6Qjha/N0DPOqb6WUFQYcVjqHr5taVqkqrbcxSUhmzk
se26AQ1p4sG2C1cppJCevBtU/L71GWrEV7/syAuCWruRPni1m+OfKmE0EVvYIDnZ
IsoEt83G19Vv4OamJqMgts59vF0Ve2bLmiLnltAeFJDjvhpTx1xsGQUYRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLuDEU/NliLF9WLeK95vYWkIKrJhMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvdTRNUlQ4MldJc1gxWXQ0cjNtOWhhUWdxc21FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHzliAwQA
HzpBMA0GCSqGSIb3DQEBCwUAA4IBAQB/eu0dhFAFRoK2aSLephXnxGc3mOBHXZV5
GJ+RL53yxRyCWYIpxp3SZI4d3gWirUl2RClOGCuas1mUI9OW5O+60rTI6ywY3djh
uhkvUDRxg5w+Gq6ExTefWXNzmgmvOPgeDAu7oKX4GuliGXHJLcJmcJe9pRPkX0/3
LBj1BqP6AS/EXx+d5kk0+emhqXsKx11BQBJdiIuebfi5v3RfwNl2GE96riaKpwPv
ii1aJ1/QtZIIHc1BnT8cRgFDamV8AfofKl5DMhq1AkJvUDU+2YPgOiY+/9uh1sgy
6maVhd5WPF/TQ8whEEIHPYgcXp9nuClen5yxL9lxveUEjP3Jv1qq
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:42:41 2025 by rpki-client