Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8E87zO6JNoSoQt3JVjB8Xeuvfzo.roa
File: 8E87zO6JNoSoQt3JVjB8Xeuvfzo.roa (raw, json)
Hash identifier: QoXeGeRh9ObZIn8JagFm2CrwkKhj1TGfKGy9UmtDdVw=
Subject key identifier: F0:4F:3B:CC:EE:89:36:84:A8:42:DD:C9:56:30:7C:5D:EB:AF:7F:3A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198CB55A9DAC7514AC7F32ECDA6FA018FB0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8E87zO6JNoSoQt3JVjB8Xeuvfzo.roa
Signing time: Thu 21 Aug 2025 06:34:05 +0000
ROA not before: Thu 21 Aug 2025 06:34:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 31.57.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:55:a9:da:c7:51:4a:c7:f3:2e:cd:a6:fa:01:8f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 21 06:34:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f04f3bccee893684a842ddc956307c5debaf7f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:3b:7f:0d:7a:67:ef:75:86:b7:9e:85:95:
bb:c0:b2:84:f9:b6:c4:82:2f:e8:f9:dc:b5:92:7b:
16:5b:b6:9e:32:d9:85:10:aa:9c:6f:a8:40:6f:4a:
e5:9b:07:4b:95:a8:b0:c7:ef:6f:fc:69:2a:52:01:
95:cf:ac:5c:df:40:5a:16:c4:69:b3:fb:b0:20:8b:
c1:bc:df:b8:69:ca:23:23:45:95:c0:d2:d6:43:24:
c0:70:cc:0d:83:5c:a6:eb:9f:ce:bb:6a:74:e5:da:
27:73:80:24:d2:65:76:12:54:94:0a:06:f2:f2:69:
a5:b1:4f:6a:11:1d:4b:0d:f7:aa:42:5a:95:48:e0:
2a:30:f5:c4:60:af:71:9c:6f:8d:82:e0:2e:09:24:
78:37:28:c8:8b:89:81:59:db:df:a1:4e:7e:d8:fa:
7e:ee:07:9e:72:10:de:94:4a:66:e8:7c:90:29:47:
58:42:a0:6e:c7:f0:9e:d1:ff:08:85:c5:0e:62:28:
66:f7:03:d9:dc:c1:34:f6:45:58:fb:34:59:5e:da:
31:1c:75:87:f5:6a:c7:c4:c9:92:00:09:d0:0e:48:
bb:63:db:7f:3d:7f:46:84:b7:74:2b:aa:77:75:a3:
bc:61:4d:76:68:1d:7e:38:04:f2:e7:16:b6:23:52:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:3B:CC:EE:89:36:84:A8:42:DD:C9:56:30:7C:5D:EB:AF:7F:3A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8E87zO6JNoSoQt3JVjB8Xeuvfzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:22:da:ef:3c:02:bb:f8:b6:86:7b:b2:2e:24:a6:cf:87:aa:
51:8e:4a:e3:42:73:31:01:83:fd:f8:75:93:e2:63:e3:74:5a:
ae:e5:e5:65:1e:95:8d:c8:8a:87:27:14:a2:0e:d6:40:23:be:
d9:ed:27:34:9a:00:4b:9b:c1:ae:93:07:e2:de:e1:bc:b7:13:
07:d7:96:53:5c:e3:81:5c:dd:21:a3:c1:0d:06:a9:1c:e9:61:
9b:0e:ed:82:ae:c8:d5:cf:5c:ce:45:4b:79:48:b3:fb:80:1f:
00:da:e6:13:7f:48:1c:2b:00:ad:1f:de:c1:d6:b8:30:ac:29:
07:db:5e:14:f8:f6:4a:6f:26:6f:84:bd:5d:c0:67:a9:83:69:
16:7e:50:fd:f6:3a:a4:24:70:03:ba:5a:0f:82:ba:da:a3:ce:
47:df:11:c9:06:13:84:af:7a:73:7d:3c:ce:ed:ab:e1:69:a4:
fa:a7:f6:62:89:19:cc:7b:0d:42:8c:ca:20:06:f0:cd:16:06:
7a:e2:be:0f:6f:16:29:47:c3:04:5e:9a:d5:ab:fa:a8:05:6f:
1d:e1:d1:0b:ef:22:2f:ef:18:96:67:5a:a8:f1:63:43:4a:da:
89:b7:8d:9e:23:54:bd:67:33:6d:56:23:ad:a4:23:dc:8d:b4:
80:59:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:45:26 2025 by rpki-client