Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VCaWUwptQpS9sqAA9is9Gy8GKYw.roa
File: VCaWUwptQpS9sqAA9is9Gy8GKYw.roa (raw, json)
Hash identifier: h0VUyZcGPjt6zqTb0Tlr5k+hP7WdSmcdaSKR8scO2vI=
Subject key identifier: 54:26:96:53:0A:6D:42:94:BD:B2:A0:00:F6:2B:3D:1B:2F:06:29:8C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199E1E3AD6D06921EB49055E19E560F38BA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VCaWUwptQpS9sqAA9is9Gy8GKYw.roa
Signing time: Tue 14 Oct 2025 08:43:38 +0000
ROA not before: Tue 14 Oct 2025 08:43:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 31.59.168.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:e3:ad:6d:06:92:1e:b4:90:55:e1:9e:56:0f:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 14 08:43:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=542696530a6d4294bdb2a000f62b3d1b2f06298c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:20:4e:2c:65:2d:bf:62:df:59:d1:70:8d:
e4:03:b9:5e:67:97:3d:4c:89:9f:27:5f:03:dd:e9:
a2:38:f2:c3:40:8c:1e:1d:21:f9:54:4e:73:e5:6a:
ca:86:77:bc:bf:7d:2f:8b:d8:56:f9:ef:17:16:e3:
f5:88:1b:93:fe:c0:7b:1f:0e:29:94:ed:63:a4:77:
67:5b:bb:19:fd:9e:77:a8:3f:ff:c7:2c:c6:f2:a3:
a8:12:97:cc:12:63:56:cf:ad:b5:fb:45:3a:38:29:
b9:70:fc:03:36:57:98:42:0b:c0:ff:59:d3:6b:61:
f3:8e:28:f9:5c:23:2c:ba:ad:e1:ea:b3:67:db:e7:
d2:80:05:75:3d:16:29:54:f5:31:44:50:78:1d:bf:
18:ec:71:1b:eb:6a:e3:0f:38:4d:6c:4c:7a:29:24:
f5:41:46:47:da:62:65:07:eb:45:db:60:c0:39:c8:
02:d0:32:36:84:68:30:a4:81:eb:e8:38:17:48:f6:
90:5c:46:70:2f:d9:98:3b:3d:e7:4f:3c:d1:fa:6f:
ae:c2:2f:4b:0b:aa:9d:6a:a7:0e:ac:8c:e8:ef:98:
c2:c6:f6:fe:07:a4:a2:c7:c4:3e:13:5c:7a:2f:93:
60:c6:5f:67:56:18:19:50:eb:75:6a:4c:a8:e8:90:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:96:53:0A:6D:42:94:BD:B2:A0:00:F6:2B:3D:1B:2F:06:29:8C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VCaWUwptQpS9sqAA9is9Gy8GKYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.168.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
43:59:fb:f7:8c:62:fd:87:d4:db:29:26:67:04:8b:79:cc:b5:
d5:81:2f:2a:11:f5:41:ce:46:05:29:8d:ac:3f:9e:1c:2e:dd:
2d:38:2b:35:e6:4e:e3:53:b4:c1:6a:0c:9c:64:86:0b:74:ac:
4a:03:56:1f:0c:2f:cd:81:52:db:f0:f3:14:33:95:3a:bb:0e:
fe:d1:4d:b3:b7:1b:0c:be:ee:7b:aa:66:88:3c:e0:ab:3e:6c:
61:49:da:1f:65:e0:64:df:40:5c:47:d8:c2:e9:f2:35:f0:b9:
a7:16:e1:e9:f7:2b:a2:05:f9:2c:44:6f:46:a4:6b:e3:62:f7:
da:87:3c:89:d4:f0:0d:14:65:ff:2f:77:e4:99:54:34:7d:a4:
d8:f5:b8:19:3b:49:be:ff:da:8e:dc:f1:71:f9:da:27:f0:8d:
e1:b8:0f:50:a0:47:19:9c:dd:a3:7f:9f:7e:1b:2c:07:9a:04:
35:e4:2f:0d:0c:d4:77:97:31:e7:df:b1:13:a2:ca:fd:9f:01:
fc:a3:de:2c:76:86:3b:e8:d3:52:38:9d:da:51:f8:fb:7f:81:
0b:6f:f9:72:8e:f2:82:2a:30:14:44:de:2d:64:bc:d5:3b:48:
58:bd:d2:e8:2d:ee:78:e9:92:b2:1c:fc:b7:c6:b0:88:a9:4b:
6b:24:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:53 2025 by rpki-client