Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/rF0kzZSKuRp9f5OAK1xzxjWnP_M.roa
File: rF0kzZSKuRp9f5OAK1xzxjWnP_M.roa (raw, json)
Hash identifier: W29hKmwtJPDYzUzOuqPmBq8PGVFBZCB4em8Vuyyfmuo=
Subject key identifier: AC:5D:24:CD:94:8A:B9:1A:7D:7F:93:80:2B:5C:73:C6:35:A7:3F:F3
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0198B1A47EB694FE7246BAA77BB401A3F2C4
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/rF0kzZSKuRp9f5OAK1xzxjWnP_M.roa
Signing time: Sat 16 Aug 2025 06:50:04 +0000
ROA not before: Sat 16 Aug 2025 06:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 31.14.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b1:a4:7e:b6:94:fe:72:46:ba:a7:7b:b4:01:a3:f2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Aug 16 06:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac5d24cd948ab91a7d7f93802b5c73c635a73ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:fe:00:4c:07:ea:c3:cb:13:39:d1:69:e9:
ed:c6:05:40:f9:b5:df:f6:1c:03:dd:c0:54:28:1a:
ac:20:33:bf:e7:9e:dd:5a:26:3c:84:82:03:6a:4b:
f4:9a:e6:0b:b3:85:dc:a5:a1:5d:6f:5a:3f:20:bf:
ef:5f:b9:81:fd:8c:f1:e4:fa:0e:b9:09:0d:d5:59:
52:25:ee:30:4a:2b:0e:41:5e:8b:2c:c6:0f:94:7f:
ee:68:85:1e:f1:2e:77:6b:c6:c0:4a:52:e0:da:cb:
f2:a6:70:a9:1b:a1:35:3d:ea:c5:80:32:55:c4:63:
22:1a:03:00:20:67:5e:df:98:7a:1f:12:a1:1d:0c:
9d:c5:cf:10:b9:17:d9:b0:ed:7b:a4:08:4f:3f:cd:
e8:22:69:49:a8:68:5c:dc:81:c3:a1:d4:51:33:b2:
8d:84:bb:5f:2c:68:d3:c3:d3:7d:07:12:44:57:93:
ce:42:1c:13:9f:bc:b1:5e:26:33:5f:77:d8:7e:36:
12:6c:fa:2a:0b:c1:43:ea:19:2b:70:87:4b:cb:b0:
ab:75:74:1e:ee:02:18:5f:ad:81:41:de:d8:45:4d:
89:19:40:27:5c:41:22:ec:c8:44:91:02:8c:97:37:
55:b0:50:51:fc:46:76:38:0c:1d:15:50:72:90:47:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5D:24:CD:94:8A:B9:1A:7D:7F:93:80:2B:5C:73:C6:35:A7:3F:F3
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/rF0kzZSKuRp9f5OAK1xzxjWnP_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.37.0/24
Signature Algorithm: sha256WithRSAEncryption
07:58:10:40:00:55:5e:f9:fd:d8:7b:df:52:bf:aa:c4:3a:f2:
10:0c:f1:6a:60:32:c7:5d:b0:6c:b4:2c:c4:58:1b:b0:c6:17:
72:69:f2:dd:a1:e9:6a:b8:8e:8e:2d:f6:c8:3b:f8:7a:9e:5e:
4f:4f:72:65:c7:0a:c5:33:bd:a7:f1:c3:ff:5a:e9:0f:c6:9b:
79:c7:e0:3d:d6:0e:6c:67:0b:c2:01:28:4c:c4:75:2c:62:bc:
ff:0e:23:0c:77:82:24:e2:e9:17:d7:97:bc:eb:36:4f:1b:5e:
75:b0:05:95:67:07:5b:04:75:3a:da:f1:68:8e:51:fe:1d:c3:
6b:96:54:a1:cf:96:d2:58:e1:a0:a2:ea:d6:fb:99:d4:f7:8a:
b2:b0:73:55:c9:a4:a1:76:e8:01:4c:4d:40:a4:0a:21:f1:0b:
64:93:8f:58:e8:1c:b5:e2:9f:8f:ec:05:63:91:62:7c:3e:4b:
57:13:7f:87:9d:20:31:ef:9d:27:f5:08:75:46:d8:83:1c:df:
3d:c6:8d:07:90:8e:71:d6:bf:86:c8:52:58:e8:c0:71:ce:fd:
84:8a:5f:96:95:63:41:65:a7:28:cc:21:be:1d:c9:b8:ce:cb:
74:7b:fd:b0:ed:ed:7c:3f:5f:99:06:39:2b:75:a2:e1:39:98:
b0:66:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:19:07 2025 by rpki-client