
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LcOvnUy8rJmuqX5QyuaKsfXWqls.roa
File: LcOvnUy8rJmuqX5QyuaKsfXWqls.roa (raw, json)
Hash identifier: BelrW2u5B2kmR9gVcw+AGg5p8gxh8CJjxBoxIzfFoT8=
Subject key identifier: 2D:C3:AF:9D:4C:BC:AC:99:AE:A9:7E:50:CA:E6:8A:B1:F5:D6:AA:5B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199B2EA92D3A38ABF5B37DEA974195E5824
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LcOvnUy8rJmuqX5QyuaKsfXWqls.roa
Signing time: Sun 05 Oct 2025 05:49:01 +0000
ROA not before: Sun 05 Oct 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 31.58.229.0/24 maxlen: 24
31.59.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b2:ea:92:d3:a3:8a:bf:5b:37:de:a9:74:19:5e:58:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 5 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2dc3af9d4cbcac99aea97e50cae68ab1f5d6aa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:f5:5f:08:d2:5e:db:7d:c6:fe:a6:a6:a9:
2f:0a:ab:91:b3:57:a0:64:db:af:b3:b3:9e:fe:cb:
c0:94:f9:c5:b4:1e:da:af:63:38:65:88:8c:d5:ec:
63:fc:74:23:88:4b:59:12:f7:18:f0:03:da:4b:96:
fd:8c:43:35:64:37:a4:20:fb:e1:75:05:57:c9:6d:
ad:fa:e4:3a:f4:39:3a:8f:27:c7:a6:1a:fc:d2:77:
58:53:ad:48:9a:8b:f0:89:ec:3b:24:a7:5a:53:0d:
e1:e1:c7:2a:30:24:b5:7c:5c:57:b4:8a:9e:48:c4:
f6:bd:00:69:a3:a9:da:40:37:1b:21:c5:48:28:ae:
19:e3:8d:05:aa:3c:86:f7:8a:fc:00:e2:0f:c1:16:
cd:7b:50:42:ba:77:3a:ea:1c:7e:a9:cd:cc:6e:cf:
c8:f2:91:12:29:db:49:c1:0c:c0:eb:4b:f6:64:8e:
4a:97:b1:1f:7a:a3:72:03:82:0f:04:41:c0:44:a7:
f3:36:8a:56:c1:1c:0d:16:7e:6f:4f:af:e2:2d:7d:
e1:c0:b0:a4:e0:a6:66:10:d2:db:c4:59:9d:3d:55:
0b:d8:35:4b:3f:ff:f7:e3:c8:fd:bb:44:b3:29:cd:
fb:4e:ea:1a:c3:90:80:b6:5e:28:1e:12:ab:d9:53:
3f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:AF:9D:4C:BC:AC:99:AE:A9:7E:50:CA:E6:8A:B1:F5:D6:AA:5B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LcOvnUy8rJmuqX5QyuaKsfXWqls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.229.0/24
31.59.35.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2b:91:ca:63:9e:83:0e:a5:e2:a1:60:d4:f0:1f:86:f1:59:
fb:fe:0b:d4:31:4e:4f:45:4a:54:b5:00:09:3f:51:b7:ae:e3:
81:6a:a1:3d:01:3f:86:cd:8d:c3:64:38:6d:e9:bc:11:55:3c:
6d:19:d2:33:d7:ed:2a:18:72:bb:ef:b7:60:13:05:4c:1d:1a:
e4:89:fd:0e:ba:56:6e:94:b7:fe:96:d9:0b:af:c1:e6:b7:e3:
55:d9:dd:b4:36:16:e2:24:7e:36:20:d6:0e:6b:c3:07:5d:5f:
1f:33:c0:6a:4d:24:42:50:3b:cb:97:79:58:f7:5d:24:c5:d9:
f2:a9:bf:53:1f:af:08:5b:66:26:f2:e3:ef:67:50:74:d1:56:
85:3a:6c:97:86:46:fb:e7:3a:3a:bc:c2:05:16:4a:d6:5f:3d:
12:e5:eb:9b:9b:67:42:a7:62:69:59:79:26:ce:53:3c:6f:43:
79:7a:e7:ca:1f:96:26:ca:44:77:40:ee:4f:f2:36:b9:49:e5:
22:a8:1f:95:d8:6e:8f:53:0c:35:6d:6a:db:59:cb:fe:b2:b0:
40:dd:76:9c:ff:a1:ca:e2:1e:98:b0:c5:c5:2e:12:77:34:79:
bd:90:cf:00:34:ce:d2:f1:35:5b:84:47:a0:be:b8:a3:c6:3b:
fa:0c:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:16 2025 by rpki-client