Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_Jibg_zczq_fPQdfyzWU5zkkylw.roa
File: _Jibg_zczq_fPQdfyzWU5zkkylw.roa (raw, json)
Hash identifier: N+6SeffF1othXbKzQl3Bp+bx+KB3bEEChQKfVJZOXsM=
Subject key identifier: FC:98:9B:83:FC:DC:CE:AF:DF:3D:07:5F:CB:35:94:E7:39:24:CA:5C
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019885498A99122D09F93231A5D1D95E5A6D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_Jibg_zczq_fPQdfyzWU5zkkylw.roa
Signing time: Thu 07 Aug 2025 16:07:26 +0000
ROA not before: Thu 07 Aug 2025 16:07:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18526
IP address blocks: 31.56.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:49:8a:99:12:2d:09:f9:32:31:a5:d1:d9:5e:5a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 7 16:07:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc989b83fcdcceafdf3d075fcb3594e73924ca5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:9d:c3:81:ff:fd:65:10:87:25:f1:f8:c7:
d1:9c:b8:a8:4a:fd:5b:0e:3c:38:e8:ba:09:b1:3f:
dd:fa:eb:50:aa:63:2d:8c:47:91:f3:fe:ae:cd:cb:
3d:35:f9:7c:d7:c8:1b:a1:ae:b4:f1:f0:4e:79:96:
86:e2:44:6f:e6:a9:a2:60:7a:c4:a9:72:f5:f8:b8:
8e:52:f7:a8:ce:cf:6d:73:9b:bb:7c:68:ba:17:30:
95:ca:25:d8:0a:73:d2:15:76:ba:9f:ae:27:f7:3b:
80:f4:f2:e8:5c:d1:dd:1e:7f:d4:86:f8:01:32:2f:
f4:12:72:ac:86:94:e0:2c:c8:f1:75:97:1b:19:3b:
c2:3a:ae:38:bf:40:9c:20:c7:d4:21:2b:6a:f7:b8:
dd:a3:28:a0:e5:d5:73:40:4d:93:55:d2:a5:9d:a8:
f6:c4:75:b3:be:5a:50:38:21:35:29:f2:f8:be:4f:
e9:75:f3:ef:f6:07:4e:4d:d7:10:d7:6a:c2:8c:18:
c6:b0:6e:1c:81:36:0b:6b:9d:18:49:e1:fc:75:69:
06:4e:99:f4:27:8b:9d:75:70:e8:2d:b8:3f:06:ea:
b6:59:b5:69:4d:e0:20:82:50:f2:b9:f4:ab:a8:64:
25:4d:b1:65:9c:87:ee:ab:7d:a0:d0:3e:3c:9d:63:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:9B:83:FC:DC:CE:AF:DF:3D:07:5F:CB:35:94:E7:39:24:CA:5C
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/_Jibg_zczq_fPQdfyzWU5zkkylw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:59:d3:3f:d8:a5:2b:6b:24:ea:3d:53:72:a2:c1:4f:4b:c8:
74:91:eb:a8:a7:e3:1c:23:02:e1:9f:d4:17:cb:4c:04:d1:0d:
24:47:33:1f:59:63:36:2c:b6:d3:43:0b:2e:0f:05:d7:ef:84:
54:b1:a5:c9:02:0d:8a:5b:f6:ba:54:26:32:09:5f:dd:3e:78:
8d:dd:74:6e:ba:43:ed:3d:26:9e:77:c0:ee:43:5e:39:67:45:
28:ac:99:2c:b7:84:b8:48:67:f1:8e:d9:e0:56:2f:77:d9:42:
f2:71:e7:2c:74:ba:4c:00:5c:25:90:92:17:a4:7c:28:00:9c:
09:05:81:c3:96:22:1c:7e:cf:d3:76:e2:dd:c9:e1:03:6a:c7:
ea:de:39:50:ec:a0:1d:b5:04:ff:b8:1c:42:ba:fd:26:4e:da:
2d:9b:84:2d:21:f3:b6:40:8a:5c:3e:62:61:b6:5c:9e:3b:6d:
4d:f2:e8:43:4f:59:da:99:3b:29:fb:8e:9c:59:84:a6:f6:82:
2d:cd:50:39:6b:46:2a:8d:81:6c:73:f0:70:cf:af:63:85:ef:
b9:17:3c:c7:24:6f:26:f9:94:c8:cc:f8:80:c0:de:8c:5a:92:
9e:7d:f4:4a:85:ff:39:22:ee:29:5b:36:94:42:85:a4:8e:ce:
35:33:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:19 2025 by rpki-client