Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T630tp6Yjn__4662G4HI1akYtN8.roa
File: T630tp6Yjn__4662G4HI1akYtN8.roa (raw, json)
Hash identifier: H9FrrE+6PVIzfRaFfr3a+0VsEAjZ7KJdQY9VGI/fPlw=
Subject key identifier: 4F:AD:F4:B6:9E:98:8E:7F:FF:E3:AE:B6:1B:81:C8:D5:A9:18:B4:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01998B42FF48F734B6900C47CE420CEAB53D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T630tp6Yjn__4662G4HI1akYtN8.roa
Signing time: Sat 27 Sep 2025 13:00:47 +0000
ROA not before: Sat 27 Sep 2025 13:00:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61437
IP address blocks: 31.13.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8b:42:ff:48:f7:34:b6:90:0c:47:ce:42:0c:ea:b5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 27 13:00:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fadf4b69e988e7fffe3aeb61b81c8d5a918b4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:25:08:44:95:c4:91:ec:33:4b:65:41:6f:
b1:4e:00:8e:81:fd:f3:ef:8b:fa:99:22:66:cf:72:
88:81:a5:b3:e1:29:19:5b:a3:cd:ee:65:a6:54:f4:
8f:c5:7e:77:c5:da:67:1a:dd:a5:d1:a9:9d:81:f2:
b6:5c:a3:a6:b4:ef:2b:50:8f:42:48:2e:2d:28:39:
35:c2:9b:7f:7f:93:0d:65:13:8a:38:5e:57:b4:48:
7f:65:1c:5d:c3:80:86:dc:07:25:17:36:79:78:7b:
5e:f1:79:c0:34:f1:e2:13:27:c9:6a:a3:7a:93:7f:
d7:dd:4d:32:30:af:11:5a:e5:f2:2b:85:60:5c:f0:
ff:82:6f:c2:c7:06:f6:38:41:b5:df:de:7e:72:a2:
45:9d:6b:c3:d7:47:26:56:13:22:13:aa:1e:a0:56:
70:3e:d1:47:71:b1:1a:4b:36:2b:68:ad:66:cb:f2:
db:ec:ac:57:d2:c6:ee:1d:6d:2c:d9:f8:51:b8:fa:
a8:58:1d:3b:45:16:16:7f:ee:d1:4f:4b:4d:f3:8e:
36:ee:10:cd:df:9f:54:e1:85:e8:fb:e5:b2:ae:f8:
bc:cd:10:c8:6e:75:6f:4a:f4:55:67:2f:48:93:dd:
99:f0:ce:b3:b3:eb:44:48:c6:58:3f:6c:bc:72:6c:
af:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AD:F4:B6:9E:98:8E:7F:FF:E3:AE:B6:1B:81:C8:D5:A9:18:B4:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T630tp6Yjn__4662G4HI1akYtN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.232.0/22
Signature Algorithm: sha256WithRSAEncryption
24:f6:8a:da:ba:f2:53:80:fd:4c:f2:65:09:c0:e1:79:e9:4e:
b7:b9:63:91:6d:5d:dd:bf:12:1e:f1:32:3c:1d:10:cd:1f:99:
8e:fb:d8:8f:aa:01:33:7a:1b:71:fc:3b:04:94:75:4d:87:a5:
a6:26:47:d0:fa:37:68:f3:73:01:5e:4d:3c:ba:19:e9:11:8f:
97:3d:68:42:93:e2:25:29:c0:03:15:7d:4e:5b:52:ef:5e:10:
5b:b9:3d:56:42:f3:a2:00:59:ec:01:d2:49:d8:b4:ab:69:f7:
d8:9d:de:2d:a6:9f:da:6e:79:74:21:e5:96:3b:69:6d:f7:8c:
91:36:55:20:36:31:9c:cd:2f:07:df:9b:17:94:8d:26:17:fa:
90:a4:58:3e:0a:f1:77:4b:13:82:7b:73:96:90:dc:62:9d:89:
b5:33:a9:34:35:8e:f2:3a:b8:fe:f2:1a:1b:f4:c1:09:cb:45:
cc:f9:1f:85:a9:5f:20:87:94:3d:8b:af:36:7d:76:02:01:58:
14:09:af:ad:b4:7c:bc:80:43:34:39:63:9e:71:05:0c:a4:dc:
91:77:f4:5a:58:ca:ae:19:76:4b:71:79:33:72:2d:c5:74:05:
7c:cf:39:ce:2a:23:f7:16:03:29:ff:9a:d5:c5:8a:9c:6b:65:
b5:12:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:20 2025 by rpki-client