Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lCtdTgLEgfyUcyDCcJzzqx5mxfU.roa
File: lCtdTgLEgfyUcyDCcJzzqx5mxfU.roa (raw, json)
Hash identifier: a7GFYMOGt4Q0sJ0bCyxYcoKnU2Zbx5zQeBtjUiiCqgY=
Subject key identifier: 94:2B:5D:4E:02:C4:81:FC:94:73:20:C2:70:9C:F3:AB:1E:66:C5:F5
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199710CBD1AD6FCB948C86CE4AFC7C2C719
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lCtdTgLEgfyUcyDCcJzzqx5mxfU.roa
Signing time: Mon 22 Sep 2025 10:51:23 +0000
ROA not before: Mon 22 Sep 2025 10:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 31.57.33.0/24 maxlen: 24
31.57.77.0/24 maxlen: 24
31.57.154.0/24 maxlen: 24
31.57.156.0/24 maxlen: 24
31.57.187.0/24 maxlen: 24
31.58.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:71:0c:bd:1a:d6:fc:b9:48:c8:6c:e4:af:c7:c2:c7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 22 10:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=942b5d4e02c481fc947320c2709cf3ab1e66c5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:57:a9:3b:2f:6a:66:28:d9:f3:95:03:18:
5d:ff:77:e3:bc:c5:91:d8:7c:52:56:1b:c4:28:59:
13:60:df:1c:48:78:cb:5f:45:18:29:97:70:28:a7:
aa:1c:14:69:38:39:b7:23:13:ec:e5:3f:f6:6e:e9:
be:e6:da:cf:42:6f:d1:7e:af:7b:35:71:5b:d3:0c:
f9:af:a1:19:8f:cc:bc:0d:38:e7:8f:a4:96:ae:2f:
f0:ca:57:14:92:54:fa:3e:e5:66:bc:0f:af:63:0e:
6a:78:b8:11:d9:2e:ab:a2:80:58:bf:eb:bc:1a:4f:
3e:f3:91:a2:34:87:64:7b:11:56:f0:5c:57:e6:8a:
6a:05:77:f6:a8:3c:63:53:67:c8:17:22:60:28:d4:
f7:6a:1a:51:f4:63:92:31:b5:7d:11:3e:6e:ca:6a:
55:0b:b6:ef:e5:c8:a0:b4:b7:bd:e8:2d:cc:a9:16:
58:35:bc:99:56:2f:8a:80:de:40:e4:8a:f0:47:17:
5a:b2:77:a9:97:23:83:7f:5c:99:c1:a8:d4:10:df:
46:9c:12:06:6e:96:aa:a0:43:38:bb:f6:29:c0:03:
bd:a6:b3:7e:4d:eb:f2:b3:e7:53:3d:ad:f2:e0:08:
bc:67:7f:95:be:1e:61:3d:ca:3a:2a:a2:33:9c:03:
b6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2B:5D:4E:02:C4:81:FC:94:73:20:C2:70:9C:F3:AB:1E:66:C5:F5
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lCtdTgLEgfyUcyDCcJzzqx5mxfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.33.0/24
31.57.77.0/24
31.57.154.0/24
31.57.156.0/24
31.57.187.0/24
31.58.91.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:89:fd:81:f8:bd:70:86:45:8a:2c:95:aa:b8:ac:1f:40:3d:
4f:06:a2:2c:64:68:af:3f:c9:12:0e:e2:ef:20:33:85:4c:cd:
5a:86:ca:5b:d1:bf:58:49:cb:63:fe:52:13:bd:41:43:fb:2f:
ba:02:14:93:e9:68:c1:b4:16:57:f0:37:1a:92:a3:3d:d2:eb:
8f:a4:a5:4d:0d:4c:e6:76:b9:37:9e:63:2f:1e:77:4e:ba:49:
83:bb:99:77:cb:97:14:a3:eb:37:94:62:39:31:df:78:57:1b:
40:f4:dc:70:b9:38:f1:9b:bf:46:73:01:66:15:9f:65:5b:70:
dd:40:58:4a:b0:f8:dd:81:d5:bc:22:82:62:7e:b2:c6:45:28:
0d:f2:f0:35:a7:61:0c:de:41:55:c5:2e:cc:a1:05:84:3b:2d:
69:44:0b:d9:31:09:ae:98:5d:21:af:03:45:c6:33:c6:3b:ca:
32:f9:b7:38:b6:05:92:6c:c6:04:1e:e7:65:d4:6f:46:9f:60:
f0:2a:c5:6b:85:67:fd:67:9f:7b:e6:ce:d9:90:5e:70:4d:74:
2b:af:e5:75:3d:89:12:8c:1b:19:cd:99:d6:2e:85:63:2f:72:
db:5a:52:97:f9:fd:60:24:99:1e:95:18:51:60:d9:21:33:a5:
ad:fd:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:52 2025 by rpki-client