Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ch0659yU2pfPnXOlYvmFuYzrybM.roa
File: ch0659yU2pfPnXOlYvmFuYzrybM.roa (raw, json)
Hash identifier: m8UevGTI7/j4xe0m75XH73++xdmbXEEr5EKWaGr0GT4=
Subject key identifier: 72:1D:3A:E7:DC:94:DA:97:CF:9D:73:A5:62:F9:85:B9:8C:EB:C9:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198B19A70775A077FDCA3ED8A748B90391E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ch0659yU2pfPnXOlYvmFuYzrybM.roa
Signing time: Sat 16 Aug 2025 06:39:05 +0000
ROA not before: Sat 16 Aug 2025 06:39:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211539
IP address blocks: 31.58.235.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
217.60.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b1:9a:70:77:5a:07:7f:dc:a3:ed:8a:74:8b:90:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 16 06:39:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=721d3ae7dc94da97cf9d73a562f985b98cebc9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:e3:fa:b8:b1:16:de:70:5c:a3:44:c1:ab:
03:70:6f:90:b3:e3:8b:38:7d:95:9c:f9:97:be:12:
aa:37:02:79:13:b2:2d:8c:87:41:ec:f1:61:c0:17:
d7:ce:7f:31:b7:a2:03:78:4b:98:a9:7e:d0:95:f4:
b4:14:21:2a:ca:5c:9c:c8:14:be:d8:a4:b0:91:06:
66:27:22:84:89:b2:04:47:97:c9:61:51:6c:c8:58:
5d:0a:42:7a:96:40:52:8c:5d:ce:67:1f:77:8a:1d:
7b:4a:d1:1b:61:6f:ee:82:07:d3:ec:69:b9:72:ba:
be:40:3d:a8:b1:35:02:ca:f2:15:a1:ef:52:d7:7f:
0c:73:eb:98:f8:c1:1e:b5:df:8f:01:e3:d9:19:40:
1a:98:12:bf:8e:27:cf:b8:7b:b2:19:78:68:4d:1d:
ef:bb:1c:f3:83:9f:eb:3d:fd:75:40:2a:1e:7c:dd:
c0:d6:90:36:3f:bc:a7:a0:83:8e:8f:b1:fb:f2:34:
7d:a0:c6:62:48:da:d2:d1:2c:93:5b:29:49:9a:7f:
98:7a:2a:e4:93:57:5e:d7:22:da:7b:50:93:85:18:
c6:e7:6d:7f:10:f9:76:b8:7d:92:f7:1e:41:a8:3f:
b6:f6:19:8d:f0:4d:19:ac:08:d5:04:ee:93:fd:ff:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1D:3A:E7:DC:94:DA:97:CF:9D:73:A5:62:F9:85:B9:8C:EB:C9:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/ch0659yU2pfPnXOlYvmFuYzrybM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.235.0/24
31.58.246.0/24
217.60.187.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d7:cc:db:a8:cf:8f:72:c0:71:3d:8a:06:43:d8:ae:e2:f5:
a3:5c:84:80:c4:41:0f:2d:79:f6:79:6a:8f:4b:9f:45:b2:f9:
d6:ef:fe:c2:cd:fc:c3:e3:64:27:c9:a4:b3:cb:aa:48:7a:28:
61:9a:fc:42:d0:3f:06:67:1d:88:86:b5:54:24:dd:21:59:bc:
b0:8c:99:ea:98:65:db:0b:ef:ef:7a:3a:81:13:2a:df:e5:16:
65:90:0b:6c:8b:ce:45:33:f7:21:9a:ee:86:a4:73:ca:3d:83:
73:6f:4a:75:be:b5:4e:e5:f1:19:b9:91:64:b4:77:f1:35:ee:
30:2b:97:35:e1:aa:bc:90:d8:09:15:9b:cc:f4:77:ff:dd:ee:
a6:8d:22:29:a8:b6:1b:cb:62:22:3a:36:9a:68:1e:20:0c:bb:
4c:9c:cf:8c:a2:47:00:c5:10:9e:e1:00:b0:c1:47:c6:10:33:
4b:c3:f3:71:aa:c0:54:c9:1c:25:a9:4b:85:e0:79:f1:c7:e8:
60:0d:e9:c9:8d:3f:b2:2c:40:80:51:29:a8:d7:9d:39:14:51:
db:08:93:1b:d6:50:f3:6d:59:12:b6:4b:da:01:2c:4c:50:bc:
3e:12:1a:54:bd:c2:ae:8d:39:50:02:5d:9e:dc:35:38:36:b1:
0e:a5:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:36 2025 by rpki-client