Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1R3evtbwNXcNK67HMOKE6F91hQQ.roa
File: 1R3evtbwNXcNK67HMOKE6F91hQQ.roa (raw, json)
Hash identifier: Iu4m0S0RfDFS5ek5g7v7Bb6llVPfjHzhqLUfpPtqNBk=
Subject key identifier: D5:1D:DE:BE:D6:F0:35:77:0D:2B:AE:C7:30:E2:84:E8:5F:75:85:04
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199A874AE647803BDC3EFFCAA30DD718E2B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1R3evtbwNXcNK67HMOKE6F91hQQ.roa
Signing time: Fri 03 Oct 2025 05:04:03 +0000
ROA not before: Fri 03 Oct 2025 05:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211539
IP address blocks: 31.58.246.0/24 maxlen: 24
217.60.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a8:74:ae:64:78:03:bd:c3:ef:fc:aa:30:dd:71:8e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 3 05:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d51ddebed6f035770d2baec730e284e85f758504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:e9:8e:bc:cb:fb:47:63:7f:25:ec:e2:60:
16:4b:27:21:72:ba:0f:64:91:4e:ab:2b:1c:57:63:
77:39:ca:c6:3e:66:e6:52:a9:da:1f:45:2f:96:4f:
64:7f:2b:d0:35:28:81:6c:99:b2:25:33:07:73:23:
9a:d1:2d:90:1b:df:63:eb:88:9c:b0:52:99:62:d3:
47:06:ec:5d:26:04:6b:42:9f:88:92:02:0a:13:ea:
3d:81:3b:e3:96:f9:64:54:45:3f:e4:79:f1:57:ac:
70:c8:82:06:87:a5:75:40:61:d4:5a:c5:61:9c:95:
3a:ab:bd:bf:db:c4:80:45:bf:ec:49:be:3a:07:24:
68:0e:7a:94:63:5f:19:b7:a1:a8:ec:88:bf:19:93:
0d:a3:cc:4c:70:6b:22:b0:40:17:6e:38:48:45:f1:
6a:a6:da:87:22:4f:e9:9c:40:4c:f2:33:9c:5c:7f:
07:85:48:17:2e:a4:f7:2f:0f:e7:f2:e2:d9:0d:d4:
e7:0b:0e:f6:e8:ba:70:4b:db:43:c0:09:1c:f2:a8:
2e:2a:78:9e:8b:dc:60:11:db:68:f2:61:ab:8e:eb:
c5:5e:78:0b:b8:7d:31:07:14:c0:1e:8d:8a:06:0c:
29:a3:84:14:6d:b9:ff:c3:22:81:18:cf:3c:26:5a:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:DE:BE:D6:F0:35:77:0D:2B:AE:C7:30:E2:84:E8:5F:75:85:04
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/1R3evtbwNXcNK67HMOKE6F91hQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.246.0/24
217.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d0:b4:68:eb:c8:24:e3:ad:c8:20:93:f2:64:9a:2c:ce:e6:
60:95:68:a6:8e:84:3c:ad:68:8a:c7:2b:73:1f:a4:84:d7:b1:
74:c6:60:6e:1b:29:a6:6e:14:df:69:c9:71:0b:8b:e7:59:1d:
e3:6a:c3:9b:45:22:e2:48:af:da:e9:f2:e0:2c:fb:fe:3a:ef:
22:c7:31:51:a1:3b:77:8a:ef:6a:f1:0b:bd:68:bf:ed:5a:58:
90:ec:b3:03:a8:09:ca:97:fd:35:53:f7:7b:37:63:73:45:18:
21:17:59:da:45:eb:e6:b9:8e:64:d0:fc:38:1a:89:fc:da:71:
11:c8:04:a8:df:85:a9:7f:a2:28:77:54:b8:20:2c:52:d6:2a:
52:32:ed:a3:63:19:f7:4f:b5:40:be:4e:99:33:3c:c7:f2:1b:
db:df:d5:a9:3a:99:ad:ad:0c:7f:9c:d8:9e:f9:fc:e9:2c:a3:
f4:48:f5:30:62:11:7b:e3:1b:22:97:f5:1f:63:82:b3:81:a5:
69:68:64:61:8c:a4:ac:78:99:ea:e3:de:12:98:ab:c4:e9:d9:
52:c2:a6:f9:6c:6d:81:04:cd:7f:4e:41:e7:6e:36:2c:c7:93:
e0:53:6b:ed:be:88:8d:12:95:96:73:09:59:b1:17:13:72:2a:
93:4e:eb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:04 2025 by rpki-client