Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VD6o5LDdXaolSL6Ud4-ZCkxizq8.roa
File: VD6o5LDdXaolSL6Ud4-ZCkxizq8.roa (raw, json)
Hash identifier: S1bEs59AivWeHo0GRkA5P/Acuso5MgeZBcrJIpQuDIo=
Subject key identifier: 54:3E:A8:E4:B0:DD:5D:AA:25:48:BE:94:77:8F:99:0A:4C:62:CE:AF
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199BF97C5F4F1B10DBAB3D51438351607A3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VD6o5LDdXaolSL6Ud4-ZCkxizq8.roa
Signing time: Tue 07 Oct 2025 16:53:38 +0000
ROA not before: Tue 07 Oct 2025 16:53:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48529
IP address blocks: 31.58.53.0/24 maxlen: 24
31.58.227.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bf:97:c5:f4:f1:b1:0d:ba:b3:d5:14:38:35:16:07:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 7 16:53:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=543ea8e4b0dd5daa2548be94778f990a4c62ceaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:05:d8:14:18:45:d3:72:41:ac:09:f2:bc:
06:e9:a4:91:db:3a:2e:3c:52:d3:cb:83:43:f5:3d:
0a:f5:27:d2:fc:9e:59:3c:d5:33:4a:80:e4:9c:e3:
59:e2:07:c6:25:1d:25:3e:b7:b4:63:11:6d:50:04:
ce:1f:16:b1:83:8e:0a:96:d5:6f:a5:a6:e7:d0:49:
6d:22:68:a0:e5:1a:51:53:22:e4:86:8f:ca:af:6e:
78:dc:63:35:a3:8a:a6:77:76:cc:57:c6:e2:93:f3:
5a:a1:91:2d:c4:b6:e4:59:4e:65:29:bc:7e:7d:d2:
4b:bf:fe:f0:3e:1e:ba:28:28:da:36:5b:91:28:a1:
f4:d7:f0:f2:e0:42:ef:da:fe:f0:ef:47:bb:ad:c0:
fd:33:8c:89:96:5f:3a:45:15:18:97:5a:db:56:85:
85:84:7a:49:09:bf:79:ef:a5:3c:75:34:8c:06:ae:
25:82:9f:64:89:19:7b:fa:a3:bb:f0:7c:a7:81:71:
8c:c8:f0:30:08:93:3d:56:ac:47:36:68:77:f5:f0:
bc:8f:42:d5:7e:ac:f5:2d:91:75:dd:1f:08:44:31:
9f:af:fb:49:f9:c2:92:09:63:d5:da:f5:97:57:c0:
14:47:95:cc:19:c9:1b:d4:00:ba:97:1d:2c:7d:7a:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3E:A8:E4:B0:DD:5D:AA:25:48:BE:94:77:8F:99:0A:4C:62:CE:AF
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/VD6o5LDdXaolSL6Ud4-ZCkxizq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.53.0/24
31.58.227.0/24
217.60.24.0/22
217.60.60.0/22
217.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:c7:85:81:81:8d:2b:18:80:8f:83:ae:a5:cc:52:38:11:9d:
17:fe:69:f1:61:cf:fc:1c:bf:7c:90:9f:8e:ca:69:b5:73:a8:
b4:c4:95:67:41:ae:3e:81:62:2a:8f:78:cc:7b:52:a9:a3:7d:
4b:5f:6c:63:be:96:ca:e3:ab:5b:ee:99:6e:62:3d:b1:2a:94:
87:23:c4:db:fc:a2:48:7c:2a:5d:07:ee:ba:42:64:bd:69:3e:
ac:1b:9b:5e:fe:4e:33:b6:ad:46:e6:47:b6:2f:93:7c:57:61:
f4:85:9a:99:67:ea:c9:7f:56:6f:c7:72:13:d9:91:f2:8c:cd:
da:6c:52:63:4c:93:46:68:d7:88:f5:44:00:3f:37:f4:0e:f6:
31:ca:66:11:8e:29:df:e1:6f:30:4e:95:2b:05:64:4e:32:3b:
25:ab:2f:c6:cd:3c:04:73:ba:8d:e5:06:a0:ef:38:45:28:b9:
28:ed:47:b0:32:ec:a4:f1:81:04:71:82:2f:93:15:2a:c9:71:
11:ad:92:ca:15:c2:89:4c:fa:0a:d1:42:52:81:4b:c4:0e:b4:
66:9d:b4:b1:20:ec:b8:5a:83:55:17:02:3e:04:16:db:04:24:
81:1a:76:52:45:a7:91:44:93:b5:d6:8d:ba:82:1f:ce:ce:38:
9e:18:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:13 2025 by rpki-client