Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/twUoAYIDxxz7pVRzmoXEDn0ILmQ.roa
File: twUoAYIDxxz7pVRzmoXEDn0ILmQ.roa (raw, json)
Hash identifier: scNDvSxhDrXf+mMVLro28z2a3BViZ0313Eo0E/T7pyc=
Subject key identifier: B7:05:28:01:82:03:C7:1C:FB:A5:54:73:9A:85:C4:0E:7D:08:2E:64
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019A2AB6052EED0FBE3B1D08FC95AFD7EC8B
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/twUoAYIDxxz7pVRzmoXEDn0ILmQ.roa
Signing time: Tue 28 Oct 2025 12:06:03 +0000
ROA not before: Tue 28 Oct 2025 12:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57494
IP address blocks: 31.130.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b6:05:2e:ed:0f:be:3b:1d:08:fc:95:af:d7:ec:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Oct 28 12:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b70528018203c71cfba554739a85c40e7d082e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:bd:bb:fa:05:52:3a:8d:50:0f:fd:14:1c:
ce:5c:24:dd:98:c2:ef:f9:80:58:79:51:f0:66:72:
29:9c:4d:63:ce:b2:9a:97:62:da:81:36:f3:bb:43:
0e:da:ae:62:6f:ca:bb:ba:83:6e:06:97:e5:52:21:
5a:64:0b:97:31:6d:15:ed:77:56:d0:fd:a7:9f:8c:
27:3e:18:da:bf:74:d2:67:6d:ba:fb:ff:8b:af:0c:
61:ed:cf:18:1e:10:c9:4a:b6:f6:cd:65:0b:68:6a:
a9:cc:07:03:18:ef:b2:6f:e6:00:60:31:8d:8a:f7:
93:97:9e:c3:ff:09:70:8f:35:ab:04:7e:e5:13:6c:
58:bf:91:e7:bf:58:9b:c5:f1:5c:d1:15:d7:64:71:
86:0e:51:1b:4f:d1:0a:7c:07:f9:1e:48:c1:a4:7b:
da:0b:3b:cd:53:c7:7e:61:8d:8f:d0:24:d5:ba:7c:
5c:1b:0a:ae:3f:dc:01:7f:06:42:85:eb:11:44:70:
60:bd:c9:86:61:8e:ce:e6:cf:8a:fa:46:90:f3:79:
2d:1a:3f:01:b3:85:db:4a:3b:d3:d4:43:a4:3d:ce:
b0:04:8b:51:38:69:6a:e1:71:eb:23:27:27:de:2f:
1e:2e:80:e5:ca:7b:ab:09:8d:7f:be:b1:05:1e:6a:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:28:01:82:03:C7:1C:FB:A5:54:73:9A:85:C4:0E:7D:08:2E:64
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/twUoAYIDxxz7pVRzmoXEDn0ILmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.130.132.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ee:42:d8:d4:90:f7:3a:30:5b:f9:ec:02:18:2a:13:ec:6a:
5c:c2:4e:d9:e0:c5:3f:72:ff:35:a9:9f:7d:cd:5a:90:dd:a0:
f4:e2:37:c8:d5:26:e8:15:e5:4f:a0:c4:f2:be:3f:ef:b4:f2:
e1:38:66:98:3c:0c:c3:a5:57:f4:87:13:1b:9f:3e:39:74:28:
2c:ed:22:15:68:d9:da:f4:1d:8a:bb:d1:5f:12:0f:31:4c:54:
25:94:7b:8f:3a:68:e4:8c:a8:d0:d3:9a:95:ce:f3:ec:c9:39:
0c:37:cd:ef:2e:35:80:3a:3f:33:32:a4:bc:97:08:ec:8a:bf:
c4:45:f4:37:49:af:7f:3f:27:a3:3c:00:20:11:db:5b:36:32:
3a:57:7a:9b:ab:64:72:8b:63:4d:dc:f8:7f:de:4e:15:75:31:
68:78:e7:87:64:38:2b:8a:9d:e4:ad:7b:b5:4b:24:0a:a6:c9:
c5:05:56:6b:34:44:cc:91:09:e6:0f:0e:d8:45:0d:39:bb:a0:
de:43:66:8e:bf:12:74:f8:ab:6c:35:0a:05:4a:50:7e:d4:4a:
49:49:52:c8:b8:e9:bd:c9:18:7f:27:6f:64:06:da:7b:7b:6f:
bd:88:99:ab:66:11:68:60:bb:c0:2c:5f:bc:37:d4:8b:15:fb:
95:c4:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:24 2025 by rpki-client