Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OPM8OlKzcFR7IvkMk8pHRlspslg.roa
File: OPM8OlKzcFR7IvkMk8pHRlspslg.roa (raw, json)
Hash identifier: YAlx09FYMHmfusJd2oIfYQxURLtqiSoJhEEHwwLRzBw=
Subject key identifier: 38:F3:3C:3A:52:B3:70:54:7B:22:F9:0C:93:CA:47:46:5B:29:B2:58
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198B387EA4FBB58C3000989BB075419913A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OPM8OlKzcFR7IvkMk8pHRlspslg.roa
Signing time: Sat 16 Aug 2025 15:38:05 +0000
ROA not before: Sat 16 Aug 2025 15:38:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 31.56.72.0/24 maxlen: 24
31.56.84.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.104.0/24 maxlen: 24
31.58.88.0/24 maxlen: 24
31.58.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b3:87:ea:4f:bb:58:c3:00:09:89:bb:07:54:19:91:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 16 15:38:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38f33c3a52b370547b22f90c93ca47465b29b258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:25:38:33:2d:e6:28:a6:21:20:48:4e:dc:
ec:d1:d5:6d:3f:74:8e:66:e0:4a:55:e3:89:e2:0e:
32:b0:77:69:23:86:78:fe:97:19:13:52:8b:5b:f4:
e8:4d:bf:7c:a7:63:b2:d4:a7:51:87:dd:fd:3d:e3:
2a:f9:92:f1:65:b5:67:b0:44:cb:fc:1a:76:47:22:
f5:25:a7:df:43:f5:d5:14:49:91:07:8f:fd:05:5b:
4d:da:c1:57:20:65:fe:d0:ed:60:b4:a9:5a:80:26:
4d:15:52:04:f9:3a:4c:4a:3d:06:96:84:43:18:5c:
14:a3:67:71:c6:c6:ef:0a:9c:36:80:99:91:aa:ef:
4f:57:b3:40:30:82:25:7b:46:f0:07:fd:27:8f:4c:
cb:ee:67:97:c4:75:04:4b:f0:0d:1e:a0:d5:2c:b9:
72:45:1c:4f:92:9a:f4:39:8d:23:bb:be:9a:df:e8:
5e:3b:b5:f8:d0:39:9e:96:f3:1e:8e:50:f7:7a:f6:
8b:49:91:d8:b7:5d:e4:4d:c0:19:e2:ed:88:8d:9b:
2a:be:7f:f7:1a:22:dc:d9:eb:dd:4a:d1:7f:6b:b6:
86:3a:20:d3:b5:96:d2:e1:c0:ad:8d:ae:e1:b5:cf:
bf:73:18:20:70:ae:bb:e5:cc:8b:c8:42:54:86:8a:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:3C:3A:52:B3:70:54:7B:22:F9:0C:93:CA:47:46:5B:29:B2:58
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/OPM8OlKzcFR7IvkMk8pHRlspslg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.72.0/24
31.56.84.0/24
31.57.11.0/24
31.57.104.0/24
31.58.88.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:96:89:7e:e1:fb:9e:48:95:20:6d:52:f3:5f:89:38:de:71:
72:7c:f9:d9:8d:28:c4:93:c4:58:d0:9f:9a:83:0e:4c:9b:e2:
8c:b6:81:4b:b1:7f:c8:14:8e:59:d8:2f:8d:a1:57:01:72:5a:
9e:a7:95:c3:be:2c:aa:29:f4:05:9f:9b:7c:65:71:df:b9:a7:
76:d8:14:5a:79:ef:23:f5:ed:0a:93:b9:2a:13:53:6e:f7:59:
4e:16:4c:74:5d:10:63:16:20:ce:7a:7e:27:4f:6d:0b:98:36:
07:aa:2a:af:c8:85:da:6a:2f:ad:78:b4:2b:3d:66:9d:8b:cd:
9d:e5:e5:82:a9:7e:0e:97:8a:e5:70:40:49:01:e3:43:24:f3:
a3:0b:1b:a3:d8:9f:0c:0a:02:66:eb:62:d9:57:37:c8:d4:67:
18:95:65:55:7e:f0:5f:c4:2d:20:e6:94:3c:e3:a4:68:22:23:
bf:5d:c3:0b:a9:5b:9a:8d:ca:d9:4d:71:4f:8f:c2:c8:13:19:
e5:3b:de:72:b9:60:19:aa:f0:57:38:8f:0f:82:9d:28:35:93:
4f:bf:00:1b:67:cb:7d:a8:0d:87:4c:44:ea:66:e7:b6:6a:9e:
de:b9:f2:2e:cd:b3:71:91:11:3a:06:44:d1:9f:0c:d2:8f:91:
61:4e:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:11 2025 by rpki-client