Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/euXjBPGzTaVyNQV4U-kYDQxxnYE.roa
File: euXjBPGzTaVyNQV4U-kYDQxxnYE.roa (raw, json)
Hash identifier: weUKpDpocmj/+cVVPRokUOew+ThTIDhpntLogZGrP/c=
Subject key identifier: 7A:E5:E3:04:F1:B3:4D:A5:72:35:05:78:53:E9:18:0D:0C:71:9D:81
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D2B1D067EE2E15D71A36DF27CE99A2C2
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/euXjBPGzTaVyNQV4U-kYDQxxnYE.roa
Signing time: Fri 22 Aug 2025 16:52:05 +0000
ROA not before: Fri 22 Aug 2025 16:52:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134677
IP address blocks: 31.58.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d2:b1:d0:67:ee:2e:15:d7:1a:36:df:27:ce:99:a2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 22 16:52:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ae5e304f1b34da57235057853e9180d0c719d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:72:c6:ce:1e:73:7e:db:6b:1e:f7:7b:70:
27:15:4d:5b:94:ba:92:0a:9e:4d:7f:ff:bc:a8:d5:
5a:f7:73:de:6c:44:42:1f:e0:d6:10:08:44:d8:e6:
98:28:dc:7b:c3:52:bd:c9:dc:7e:53:e3:32:16:11:
16:13:e5:78:71:fe:ca:ba:88:28:8a:3a:64:0d:31:
5e:e0:bf:56:ea:1e:e6:97:98:47:6d:4c:68:ff:81:
3d:96:cc:b4:9a:fc:c3:82:33:54:e5:2f:08:a8:a3:
0a:67:fd:2e:03:d5:2a:c3:d5:d3:8f:4b:15:10:b5:
79:95:52:78:fc:a4:a6:a9:b5:48:f1:eb:e3:92:43:
03:01:e1:f1:f0:9d:7b:be:40:85:58:8f:2b:e2:53:
68:4c:84:75:31:bc:11:23:c2:47:53:c4:ed:ea:a9:
e0:8d:e1:70:c0:3f:f3:4f:07:63:10:92:aa:39:9f:
d4:dd:3c:eb:99:60:5e:a2:f1:74:e2:4b:8e:41:53:
74:a8:6d:04:09:c3:99:b0:0c:cd:cd:52:6c:98:00:
81:28:3c:1f:91:c8:b5:2a:5e:fe:0d:53:3d:62:bc:
f8:da:62:8d:12:3a:21:d1:57:18:2b:db:ab:24:55:
67:a5:78:e0:3a:22:5a:74:42:2a:1a:d6:ce:51:5e:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E5:E3:04:F1:B3:4D:A5:72:35:05:78:53:E9:18:0D:0C:71:9D:81
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/euXjBPGzTaVyNQV4U-kYDQxxnYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.152.0/24
Signature Algorithm: sha256WithRSAEncryption
55:46:4f:cd:ea:43:4d:c9:93:e2:b1:e2:1c:3b:8e:1b:7c:2a:
6f:c0:9c:22:38:81:c1:b7:64:e3:73:05:08:42:e7:5a:35:46:
55:ec:44:f4:26:d5:56:a3:1e:e6:d7:69:59:e3:5e:a4:61:f2:
82:02:75:29:47:bd:9e:cc:c6:f5:51:57:4b:ea:7b:5d:c0:1d:
94:81:f9:ad:71:e7:1d:ac:70:60:b4:60:1c:27:59:0e:5b:4a:
10:8f:4e:20:01:3d:68:7e:b0:eb:d3:bb:3c:39:de:f4:34:a7:
cb:37:d8:2d:0f:dc:ee:c4:cc:40:73:3d:52:d3:ca:2e:d7:10:
94:af:d1:a5:4e:01:a9:d1:d5:4c:59:28:cd:3d:4a:d5:e2:d5:
48:77:8f:5d:6a:2f:17:ef:3a:5b:49:39:30:c8:58:6c:6e:b6:
b5:2d:40:ef:44:98:91:52:12:df:83:f1:df:5c:eb:68:a4:dc:
b6:ee:ab:39:d0:7e:0a:fe:eb:4e:95:df:c6:02:b6:2e:e0:d7:
18:c6:6e:70:2f:58:48:53:58:aa:a1:26:6c:c4:bf:b8:7a:bd:
1b:a9:8a:2a:c5:5f:0b:7b:7b:6d:2e:22:33:52:81:56:b2:33:
55:5d:99:33:59:5c:d4:ca:45:1c:d6:7f:67:a3:bd:48:04:64:
61:9f:d6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:01 2025 by rpki-client