Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/fXMABFUF2X21dKy70vKkQqFJeWQ.roa
File: fXMABFUF2X21dKy70vKkQqFJeWQ.roa (raw, json)
Hash identifier: TpIDFA98Zce4D0u1SU0nxNoecAYuPBPWdzFjSUxxyhE=
Subject key identifier: 7D:73:00:04:55:05:D9:7D:B5:74:AC:BB:D2:F2:A4:42:A1:49:79:64
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 01989A7E998E2970ADC3B24600ED44557BD8
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/fXMABFUF2X21dKy70vKkQqFJeWQ.roa
Signing time: Mon 11 Aug 2025 18:57:24 +0000
ROA not before: Mon 11 Aug 2025 18:57:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 5.56.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9a:7e:99:8e:29:70:ad:c3:b2:46:00:ed:44:55:7b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Aug 11 18:57:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d7300045505d97db574acbbd2f2a442a1497964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:54:6a:0d:bc:d1:c1:cd:a4:37:dc:ed:64:
44:53:49:31:b2:0a:60:6a:6e:04:09:be:b1:42:68:
a6:03:5a:a4:a9:11:1a:03:01:90:1e:62:41:7a:36:
a4:1a:70:16:5b:ee:7a:0f:a9:9b:27:d0:10:d4:e3:
a8:d3:01:7b:5f:d9:f2:2b:03:8a:ea:84:35:1f:1f:
ae:3e:5e:b1:47:cf:5a:c3:1a:f1:e3:c3:8a:01:08:
30:05:fd:3f:ef:b7:9d:53:57:a0:ab:0f:1c:6e:a2:
d9:2b:a4:49:99:3e:75:47:95:82:3d:c2:6c:75:60:
fb:8a:87:f8:d5:f8:36:a5:af:a6:f6:9d:da:16:64:
92:89:ff:05:5d:35:c9:46:d4:0a:3c:40:15:f5:3b:
af:b3:99:5c:88:68:79:16:4e:13:97:07:a8:b7:72:
40:09:d1:89:c6:3e:d3:4a:08:9f:31:ea:cb:ff:f5:
b0:4b:34:e6:06:5c:0b:f0:fe:1e:78:10:38:f3:4c:
a3:6a:cb:6b:8b:08:1e:d6:42:3a:5a:99:05:16:61:
e5:9b:6a:cf:7d:9f:75:3a:a8:99:6e:75:73:50:29:
ca:56:f0:9d:fd:87:3f:a6:ae:30:34:bc:1c:05:ae:
77:07:b8:55:60:48:fa:99:9c:c3:1b:82:40:21:86:
ad:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:00:04:55:05:D9:7D:B5:74:AC:BB:D2:F2:A4:42:A1:49:79:64
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/fXMABFUF2X21dKy70vKkQqFJeWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.31.0/24
Signature Algorithm: sha256WithRSAEncryption
32:78:a4:9a:17:fa:07:7f:7b:8c:3e:bd:c8:f7:cf:00:31:0e:
de:0f:c3:15:19:e2:39:d0:bc:1b:6b:d4:2b:54:ad:90:8a:a5:
c4:63:c2:51:16:bb:06:4d:2a:9c:ab:a1:da:3c:0b:07:61:9c:
38:92:c2:13:33:45:dc:19:a7:13:da:ff:fd:3c:df:42:c8:36:
f8:e4:55:a4:ae:a0:fd:98:04:b7:79:80:dc:1e:ad:7e:62:64:
a9:58:51:15:67:9b:7d:05:b2:0a:24:54:bd:cf:78:68:49:7c:
7d:8d:b0:dd:e5:11:91:a6:64:da:63:86:3e:57:6b:13:bb:29:
e3:7f:e8:ff:9d:f9:4b:5f:49:ae:89:26:9b:b8:fb:12:26:d6:
6b:19:a4:ba:da:5b:5b:e8:b7:59:32:5a:b8:60:b4:70:e5:48:
09:3d:64:a4:f9:2e:3c:9a:93:91:4b:8f:75:1e:21:6c:a8:39:
cf:08:52:23:88:79:00:c1:ce:69:22:7e:73:bd:c6:31:84:74:
01:d4:33:34:8f:72:1f:77:17:05:b0:5c:2f:52:80:af:3b:ad:
dd:80:3a:62:6e:e8:e7:63:de:fd:67:98:3d:92:90:4c:b3:c3:
10:9e:45:43:2e:87:90:5f:46:3c:1b:fb:ee:21:95:bf:6d:74:
d2:75:14:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:09:42 2025 by rpki-client