Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EvjZCagNrje85lEMG79B4q_cpkM.roa
File: EvjZCagNrje85lEMG79B4q_cpkM.roa (raw, json)
Hash identifier: SaOPGXVHJgBTes/HFZqiwexgWyrbSC65g2Vgo+DpxaE=
Subject key identifier: 12:F8:D9:09:A8:0D:AE:37:BC:E6:51:0C:1B:BF:41:E2:AF:DC:A6:43
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019960C8EB59F3894AC5D774970F5941EEF1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EvjZCagNrje85lEMG79B4q_cpkM.roa
Signing time: Fri 19 Sep 2025 07:03:24 +0000
ROA not before: Fri 19 Sep 2025 07:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 31.56.67.0/24 maxlen: 24
31.56.73.0/24 maxlen: 24
31.56.85.0/24 maxlen: 24
31.56.239.0/24 maxlen: 24
31.57.113.0/24 maxlen: 24
31.57.153.0/24 maxlen: 24
31.57.186.0/24 maxlen: 24
31.57.236.0/24 maxlen: 24
31.58.43.0/24 maxlen: 24
31.58.128.0/24 maxlen: 24
31.58.164.0/24 maxlen: 24
31.59.88.0/24 maxlen: 24
31.59.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:c8:eb:59:f3:89:4a:c5:d7:74:97:0f:59:41:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 19 07:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12f8d909a80dae37bce6510c1bbf41e2afdca643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:21:6a:7f:fc:75:21:b9:6c:b3:7a:50:0b:
a9:f5:ac:99:ea:4b:e5:02:f7:23:70:02:67:e9:cd:
32:aa:7d:e1:c0:67:ff:90:c9:29:3e:97:f5:1f:b0:
08:38:ac:ae:2a:cf:3b:a9:73:d4:9b:55:48:8a:81:
9c:35:ac:87:6a:f4:88:7b:cf:3b:a1:3e:d9:8e:8c:
f8:c6:58:9d:f7:e1:db:94:22:58:73:00:b3:09:16:
17:69:ec:51:8a:ad:cb:be:f7:f7:cd:1d:58:3e:a3:
f6:ac:6f:64:70:2c:bd:2a:db:fe:36:51:cf:58:6a:
a7:da:8e:6b:7d:df:74:0b:a6:17:86:85:86:2d:95:
2c:f7:6b:b7:fc:7e:03:2d:73:63:97:91:2c:38:20:
35:ee:39:81:55:93:08:06:3f:ef:0f:5b:4f:8c:17:
82:a9:ba:66:aa:62:80:d6:d5:5a:2b:82:dc:df:76:
d0:7c:9f:74:f3:1f:f8:ca:0f:89:9c:45:31:e6:c4:
34:34:6c:a0:59:b2:6e:7c:90:2f:a5:7a:62:7b:20:
49:a3:ef:f8:80:ad:d7:fb:04:8a:77:3d:36:20:4e:
b3:ad:da:25:5f:ee:3f:4b:f6:4b:5f:b2:45:a4:fa:
d7:5c:21:52:95:40:7a:6a:cc:54:c6:d1:9a:7b:3c:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F8:D9:09:A8:0D:AE:37:BC:E6:51:0C:1B:BF:41:E2:AF:DC:A6:43
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EvjZCagNrje85lEMG79B4q_cpkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.67.0/24
31.56.73.0/24
31.56.85.0/24
31.56.239.0/24
31.57.113.0/24
31.57.153.0/24
31.57.186.0/24
31.57.236.0/24
31.58.43.0/24
31.58.128.0/24
31.58.164.0/24
31.59.88.0/24
31.59.123.0/24
Signature Algorithm: sha256WithRSAEncryption
75:57:0f:11:3d:52:5d:c2:0a:43:28:da:ca:4e:ef:53:d1:c6:
de:09:25:a5:7a:5b:bf:f6:e3:46:bb:e1:84:0c:cd:3b:ff:57:
2c:4c:22:0b:78:b7:48:0a:d7:da:ca:04:ec:82:04:bd:fe:90:
6e:aa:2e:f3:45:79:74:77:b6:72:5b:45:cb:50:db:58:08:40:
64:7f:3f:e9:c3:a8:34:e3:ed:6e:95:88:cc:07:83:dc:a3:b9:
7e:a6:03:5d:e4:60:02:7a:50:ba:a4:15:78:d2:34:d6:38:52:
26:d9:98:4b:01:de:f3:69:21:34:dd:ab:49:c3:95:0f:c4:df:
91:7e:e9:2d:72:2d:98:af:1e:a8:24:ba:aa:37:3a:b6:a4:3e:
f9:f7:c6:d3:59:96:0b:79:60:bc:c9:25:db:87:e7:22:49:9f:
0c:9f:fd:f2:16:43:b6:3f:1f:b2:a2:3e:55:b8:fa:23:8e:f4:
24:9e:70:a0:2e:ff:30:6d:9f:c7:e6:8d:0e:29:5c:f6:0f:48:
5a:ac:72:2e:66:3d:ba:8d:18:f2:84:d6:75:d7:21:ce:01:86:
58:d7:83:c9:01:07:64:04:65:8b:4f:c2:79:96:2e:ac:87:16:
8f:f3:b7:db:60:a5:a0:6f:00:22:3c:be:c1:b2:52:23:41:ef:
f2:55:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:50 2025 by rpki-client