Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7MHbbI8GNkZB6oo35J2Gne13Dps.roa
File: 7MHbbI8GNkZB6oo35J2Gne13Dps.roa (raw, json)
Hash identifier: /FX28Jkk2dGJ4OfaR2gUF8c9todWESlxSYwRli55ru8=
Subject key identifier: EC:C1:DB:6C:8F:06:36:46:41:EA:8A:37:E4:9D:86:9D:ED:77:0E:9B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01988916BF46255DF358CFB0735B8FFC9DC9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7MHbbI8GNkZB6oo35J2Gne13Dps.roa
Signing time: Fri 08 Aug 2025 09:50:26 +0000
ROA not before: Fri 08 Aug 2025 09:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50867
IP address blocks: 31.56.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:16:bf:46:25:5d:f3:58:cf:b0:73:5b:8f:fc:9d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 8 09:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc1db6c8f06364641ea8a37e49d869ded770e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:13:5b:28:c2:1e:2f:a5:65:18:df:19:d9:
46:c3:42:75:3a:31:2b:0c:af:12:ac:97:9e:eb:ee:
9a:20:04:5b:43:93:a1:05:d1:a9:51:79:a9:0f:3b:
61:a8:27:19:32:a4:2f:63:00:dd:d3:62:ac:5b:81:
d3:cd:e0:bc:5f:c9:44:ca:16:1e:93:e8:39:d7:67:
47:89:6d:46:ce:a9:32:bf:c5:ed:ec:09:b1:07:e3:
c4:7d:bc:90:25:ad:d1:57:ac:93:4e:a3:aa:08:01:
b1:70:15:7f:ea:4d:cc:fd:2b:b9:23:81:d8:cb:c0:
8c:f9:30:79:1b:84:4a:10:dd:5d:14:43:71:19:e6:
12:ea:5d:38:18:41:dd:25:fe:0b:c8:4e:b4:a6:01:
29:7e:36:ba:65:bb:ea:72:eb:08:77:6a:a6:21:e4:
77:d2:aa:68:18:66:e0:54:7f:44:b2:b9:b6:f0:70:
63:68:a5:5b:5b:57:62:ad:c0:15:a2:c3:a1:b5:8b:
c3:f1:a9:18:b4:57:41:72:e4:71:93:a5:2c:68:45:
29:e3:34:d9:1f:d6:4a:f3:20:6f:c5:e0:fc:00:fe:
f3:cd:82:1b:b8:32:0f:a5:c9:cc:db:d4:c7:ff:e2:
40:6b:91:c3:2a:ca:02:04:41:87:fc:66:61:62:c6:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C1:DB:6C:8F:06:36:46:41:EA:8A:37:E4:9D:86:9D:ED:77:0E:9B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/7MHbbI8GNkZB6oo35J2Gne13Dps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:38:87:54:c2:3e:3f:fa:81:1d:e2:52:b5:e3:19:36:87:44:
8f:eb:0a:cd:d9:f9:d3:47:63:1e:1b:1d:24:d6:e9:26:5f:e5:
8a:a4:f3:6e:2d:7c:d1:ec:94:42:da:60:8a:74:ae:0b:ff:15:
d1:4e:98:45:da:10:ec:55:ad:4e:ea:56:ee:0a:a7:5d:e1:aa:
21:a2:99:3f:58:28:f6:26:4c:c8:a5:7e:5f:60:81:35:18:f1:
57:0f:bd:a7:88:3c:18:d7:31:dd:8a:31:59:ec:be:d3:b9:d7:
fe:2e:ef:93:a3:94:c8:e0:68:38:56:a4:48:2f:11:e2:61:c0:
9a:1c:b9:5f:a2:a5:4c:1a:99:05:18:bb:1b:f6:50:98:1c:19:
94:cd:83:3c:b4:42:41:0d:d9:36:16:c3:8a:2e:a6:84:0a:6e:
f9:eb:54:a3:fe:59:d7:a2:76:97:f4:dd:d6:21:d2:2d:d9:b3:
e0:46:2a:d3:b3:14:64:88:41:e0:62:0e:fb:18:1e:b4:a4:84:
99:bd:b3:9e:3e:81:dd:64:03:17:9f:46:5c:9b:11:36:6a:6e:
76:80:a4:a9:20:bd:e1:e8:d5:f4:36:33:9c:2c:8a:0a:6e:38:
1a:67:75:5e:8c:51:e4:d5:2c:dc:de:e3:ac:f9:55:3d:83:3f:
97:a9:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:41:51 2025 by rpki-client