Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JkfPddDxbpNQZNbUcN19If4NS7A.roa
File: JkfPddDxbpNQZNbUcN19If4NS7A.roa (raw, json)
Hash identifier: n2o98Pr9OoSJ/dGrdm/PllKa5TPM02raNwnmcyx0rOw=
Subject key identifier: 26:47:CF:75:D0:F1:6E:93:50:64:D6:D4:70:DD:7D:21:FE:0D:4B:B0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01997F6C3E4DD0EAF18597FE0F3C9AE2D966
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JkfPddDxbpNQZNbUcN19If4NS7A.roa
Signing time: Thu 25 Sep 2025 05:50:24 +0000
ROA not before: Thu 25 Sep 2025 05:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 31.57.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7f:6c:3e:4d:d0:ea:f1:85:97:fe:0f:3c:9a:e2:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 25 05:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2647cf75d0f16e935064d6d470dd7d21fe0d4bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:68:ed:56:7e:a6:8e:06:53:f9:e8:c6:c2:
8b:ae:7d:e9:21:24:a4:a4:7d:eb:99:a7:9a:3c:78:
06:83:9c:3e:b0:32:5d:0a:30:cb:af:49:be:23:e0:
5e:31:85:59:f9:60:c5:48:84:f0:67:3c:06:11:0c:
b4:d5:2e:13:b9:82:db:e4:07:9c:89:f8:da:fc:1f:
52:bb:60:51:a4:d9:3d:9d:f4:45:a1:d3:cd:07:81:
2b:8d:bf:d4:35:7e:1f:b5:96:df:33:93:0d:e0:a7:
55:ef:fc:51:f8:e1:56:9b:94:d8:84:7e:b2:3b:c2:
02:fa:2c:fb:6c:ed:22:c6:2e:c9:8f:bb:fe:97:d3:
b2:6a:d0:c4:cf:48:b2:21:cd:4f:a1:cc:1c:b0:41:
48:57:15:a0:34:29:e1:45:a6:c1:32:0b:b6:17:33:
f4:47:40:68:51:39:7a:52:ee:f8:57:91:7c:46:5c:
7b:11:5f:d9:bb:8e:bd:73:cc:e4:6f:86:cb:7c:cf:
85:a5:48:08:fd:79:bc:6c:94:5d:f0:e4:a9:c6:14:
43:df:4a:5f:0d:94:14:31:33:fc:bc:de:38:cb:aa:
ea:12:d8:3a:ba:5b:f8:e1:24:62:73:53:cf:0e:b3:
86:86:c1:d4:93:f2:46:e0:0c:5e:c9:29:e2:12:9f:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:CF:75:D0:F1:6E:93:50:64:D6:D4:70:DD:7D:21:FE:0D:4B:B0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JkfPddDxbpNQZNbUcN19If4NS7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:38:32:69:82:98:ad:d6:83:8b:b4:06:40:99:a0:30:e8:3c:
0b:36:00:cc:01:19:6f:00:4f:a4:93:ae:27:4c:4d:65:18:4e:
2c:f2:05:d6:0c:2f:da:b0:72:c3:48:7d:7a:63:8e:4a:35:20:
ad:b6:c3:53:7b:d9:86:10:31:50:ff:34:f0:b2:b5:96:01:d2:
b0:6d:77:e6:30:01:45:f6:39:7f:23:1c:c3:db:55:9a:22:a2:
34:8c:e9:ab:cc:e5:20:a3:4b:5a:c2:d9:c4:bd:47:35:0c:63:
5c:cf:bb:a3:77:d1:a3:c5:6a:5d:6f:7a:00:2a:5d:61:8f:43:
e7:f5:f6:d0:08:c1:f1:f9:8b:3d:c8:fc:c2:ad:26:2c:60:78:
16:20:63:18:25:01:d0:bd:59:85:ba:2c:df:ba:cd:42:98:10:
f5:3c:f0:c2:8a:44:48:ef:47:6c:9b:7d:06:f4:07:32:be:e1:
cf:ec:16:a5:91:d2:a8:c3:d9:83:2a:56:11:c9:b1:fa:bd:eb:
52:e4:c7:d8:c1:12:77:b7:e5:e8:11:d6:3d:76:46:3a:43:8b:
ff:fb:b2:02:26:97:f5:7c:18:9e:d1:8f:84:75:44:35:81:2b:
49:f7:d5:c1:f0:ff:ce:d6:78:c5:1e:51:28:bf:2a:c5:e9:85:
46:ea:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:13 2025 by rpki-client