Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8rJjozjBmIICLxDLkvMDP-5ph2o.roa
File: 8rJjozjBmIICLxDLkvMDP-5ph2o.roa (raw, json)
Hash identifier: WwEtooJue3hzzC0/p+8ANDtqS+66KohQXHbgf1hdMzg=
Subject key identifier: F2:B2:63:A3:38:C1:98:82:02:2F:10:CB:92:F3:03:3F:EE:69:87:6A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D57DC2FA6CF3E7FBDB33D32FD7380793
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8rJjozjBmIICLxDLkvMDP-5ph2o.roa
Signing time: Sat 23 Aug 2025 05:54:05 +0000
ROA not before: Sat 23 Aug 2025 05:54:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142382
IP address blocks: 31.56.74.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:7d:c2:fa:6c:f3:e7:fb:db:33:d3:2f:d7:38:07:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 23 05:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2b263a338c19882022f10cb92f3033fee69876a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:e0:a2:7f:22:ce:23:4b:6f:90:16:d2:49:
31:d7:e7:7a:92:a9:82:f0:ed:20:5a:5d:6a:c5:13:
43:5b:1e:91:c7:0a:1c:f0:e6:0c:11:ce:b3:42:22:
e0:5c:e6:00:e5:46:d3:d0:6d:ea:80:c6:c3:bb:14:
b9:b7:fe:f6:a1:0f:e1:41:75:cc:28:b5:b6:6e:45:
94:6b:e0:b1:22:82:6f:34:13:63:8d:fc:d3:13:c9:
a7:55:af:d3:78:53:82:c0:34:0d:6b:d4:f1:92:7b:
c4:40:23:cd:39:43:ad:2e:3c:31:9d:96:4e:11:68:
d0:f6:02:53:dc:0a:db:fc:e2:92:64:ef:9d:2c:da:
06:dc:bf:bb:49:e1:37:7e:b3:fa:a3:62:d9:4b:fe:
e2:49:d0:a9:b3:6b:b3:5b:a5:ac:8d:27:1f:5b:1f:
64:52:9b:dc:20:46:3d:9d:fe:52:4f:3b:a9:71:bd:
56:18:03:6f:85:cb:fc:03:3c:db:01:c0:61:52:2c:
07:26:e6:2d:25:b2:37:93:8d:5f:7d:ff:d7:b9:91:
76:bf:16:16:81:af:b0:ed:1a:3e:31:d9:f8:a6:87:
35:0c:15:23:0e:14:53:9e:0b:c3:53:1d:c3:29:9e:
48:18:37:99:03:6d:ce:70:0d:75:a2:f8:6f:35:17:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B2:63:A3:38:C1:98:82:02:2F:10:CB:92:F3:03:3F:EE:69:87:6A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8rJjozjBmIICLxDLkvMDP-5ph2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.74.0/24
31.56.121.0/24
31.56.199.0/24
Signature Algorithm: sha256WithRSAEncryption
22:26:56:bc:a6:e5:24:d5:c7:05:e0:97:c6:e8:e6:f6:6a:07:
79:99:f0:e4:df:4c:55:b8:63:ff:c4:19:69:a1:de:19:fe:bd:
8b:3c:97:af:d8:c3:42:04:85:a0:1d:45:4c:03:ad:ff:ef:2b:
df:9a:6c:f7:45:e3:22:f8:70:5d:3a:bb:9a:5b:87:b7:70:3f:
49:26:22:a5:1f:ea:10:47:ea:cd:f3:33:8f:a5:1f:9f:b0:54:
94:71:5b:25:b3:78:33:36:3c:78:9c:3e:73:8e:0f:35:5d:38:
1d:8d:e7:d4:f9:bf:5e:a0:88:22:ab:a2:ca:ac:cd:22:d2:79:
99:bd:6a:44:ef:44:fd:8a:4f:60:5e:32:1c:b2:17:7d:71:fa:
47:e9:44:1b:2e:6e:83:6f:98:c6:5b:c4:c3:b8:af:f7:14:bc:
83:d8:aa:57:fd:39:cf:2d:85:a6:b5:91:14:b7:7f:12:68:b8:
5a:fa:87:0f:23:90:fb:b9:6b:18:4d:06:0e:ef:e3:1c:60:7a:
75:a8:cb:0b:a7:46:63:7d:20:62:5f:05:7d:09:ff:81:88:ac:
7b:4d:74:77:16:28:c4:ee:16:e6:21:ae:c3:ca:54:ad:4f:6e:
b7:b7:c3:b9:b8:09:23:e4:b2:08:22:e7:af:29:e0:83:6e:fe:
6e:62:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:55 2025 by rpki-client