Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2MVImBktz50yu_1Zj-a8YpCCHl8.roa
File: 2MVImBktz50yu_1Zj-a8YpCCHl8.roa (raw, json)
Hash identifier: 9D7YArjQmbtcME0s2oMAMnPGkS9aDsQ6aSdFOy6kCzM=
Subject key identifier: D8:C5:48:98:19:2D:CF:9D:32:BB:FD:59:8F:E6:BC:62:90:82:1E:5F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01999E3916D3D21F3151F324C2FDBFEAA9F1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2MVImBktz50yu_1Zj-a8YpCCHl8.roa
Signing time: Wed 01 Oct 2025 05:22:45 +0000
ROA not before: Wed 01 Oct 2025 05:22:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 31.57.201.0/24 maxlen: 24
31.57.207.0/24 maxlen: 24
31.59.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9e:39:16:d3:d2:1f:31:51:f3:24:c2:fd:bf:ea:a9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 1 05:22:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8c54898192dcf9d32bbfd598fe6bc6290821e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:d2:62:bc:43:64:ee:d3:f0:d3:51:05:f5:
b0:84:e4:db:f6:c4:1b:f0:71:d9:1f:22:ff:05:6d:
4b:2f:59:45:f8:b1:6b:5a:01:87:62:96:07:b5:37:
87:db:18:54:9f:80:6b:47:f4:29:7e:f6:84:76:99:
d4:a0:f5:59:6c:2c:3c:f9:72:d2:14:42:ca:b0:42:
86:3f:d4:3d:88:9c:60:a2:6a:0d:80:d2:38:61:45:
ef:12:2c:29:5b:74:a0:60:cb:06:a2:ae:96:91:8d:
9a:27:24:a6:79:ed:fb:7e:a7:08:3d:d0:3d:61:be:
09:02:19:53:22:63:2b:6b:9d:61:64:69:66:f1:04:
c6:21:88:c3:c3:6c:46:28:c9:90:c9:9e:b2:ed:41:
e9:d2:a9:0e:5c:d6:18:ab:94:b3:35:44:08:ab:fb:
8f:78:48:62:e2:44:87:62:8f:0d:f6:d1:eb:1a:2d:
6c:a0:0d:55:35:04:3f:78:52:5a:fc:c1:04:ff:b9:
a7:15:33:a8:5b:2d:63:59:98:72:78:c4:19:e0:7f:
69:e9:79:a8:cc:af:25:d7:70:8a:52:4f:69:34:87:
51:d9:32:88:83:f8:f5:29:b4:ef:ef:17:75:85:f0:
e9:7f:67:ff:17:cc:f4:33:a5:3f:2e:88:e5:1b:21:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C5:48:98:19:2D:CF:9D:32:BB:FD:59:8F:E6:BC:62:90:82:1E:5F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2MVImBktz50yu_1Zj-a8YpCCHl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.201.0/24
31.57.207.0/24
31.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:7f:74:b3:e3:d4:b8:7b:cd:3d:7c:18:7a:05:ef:06:2f:78:
2c:ee:0d:9b:c6:48:1d:5f:c0:d0:45:8a:39:ab:38:ac:e5:03:
7b:02:a2:e7:65:ea:47:da:1c:d0:b5:f0:49:dc:79:24:7e:06:
d7:a6:1e:87:74:6c:ce:2d:96:f4:00:3d:5c:54:f4:eb:1e:bc:
af:ea:fa:3a:59:3c:ae:c7:8d:59:08:24:e5:ee:dd:35:10:b8:
bf:f5:1b:90:b1:ae:70:75:b6:19:2b:e2:89:66:2a:7e:cb:ed:
09:5f:54:92:c7:35:3c:ee:78:7f:31:25:95:1a:3f:f5:17:90:
63:e0:4c:93:7d:58:1d:89:3f:b8:9d:8e:05:ea:e4:6e:36:13:
95:0d:dc:33:a2:b2:f9:6b:10:3a:e9:31:dd:c2:e7:28:11:f7:
ba:b9:12:75:54:c5:18:eb:d7:a4:33:0b:32:b2:3c:c3:d8:45:
ef:38:c2:a5:fe:46:9a:70:39:63:7a:52:b6:70:7a:4c:cd:64:
7f:bd:c0:e8:88:12:a2:80:f9:1f:45:7f:65:34:d3:ff:3e:81:
61:ca:21:d1:1e:87:c6:f2:ab:f2:6a:d3:43:3f:4c:5a:8c:42:
d1:11:4e:17:4a:5f:cb:91:bd:76:0d:d4:ea:af:6a:4f:75:eb:
f7:36:16:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:32 2025 by rpki-client