Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mRbs9vKkX8K4e-xRRd8KB7TA6ZU.roa
File: mRbs9vKkX8K4e-xRRd8KB7TA6ZU.roa (raw, json)
Hash identifier: ksp4i0IiJo+EHhKgJhC4Y6nc3zqe2HUGcBYStFmfNNk=
Subject key identifier: 99:16:EC:F6:F2:A4:5F:C2:B8:7B:EC:51:45:DF:0A:07:B4:C0:E9:95
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019960C456E193448F3F55A9ED53630CB134
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mRbs9vKkX8K4e-xRRd8KB7TA6ZU.roa
Signing time: Fri 19 Sep 2025 06:58:23 +0000
ROA not before: Fri 19 Sep 2025 06:58:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215607
IP address blocks: 31.58.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:c4:56:e1:93:44:8f:3f:55:a9:ed:53:63:0c:b1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 19 06:58:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9916ecf6f2a45fc2b87bec5145df0a07b4c0e995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:65:dc:0f:df:f3:44:c3:79:a0:22:2f:1d:
f8:61:fa:9c:29:c7:db:55:07:e5:9a:cd:79:c0:9e:
fa:fc:58:34:40:d6:ca:45:0f:d2:c6:3e:ac:bb:76:
4d:19:12:2b:ef:5d:6f:d0:a3:6a:5d:e8:31:1e:95:
82:55:d7:ca:48:33:ea:aa:99:3d:b6:ae:ca:c5:69:
48:40:25:fa:7a:95:b7:b0:47:8e:bc:1e:85:e7:75:
37:cd:ea:c2:c9:3d:fb:d8:52:e9:b8:e6:78:04:22:
f3:a3:45:aa:c9:4a:27:bd:fe:eb:35:be:30:d3:ad:
aa:a6:1f:9e:cf:ad:8c:a2:b1:a4:98:22:90:36:cd:
1c:f3:a6:d5:53:66:ae:b7:96:3c:aa:cf:0f:15:be:
55:9b:3f:00:be:3e:94:f4:b6:92:f6:3b:67:86:35:
68:e5:18:27:f8:97:0b:74:58:86:df:67:6b:28:b9:
77:81:ad:28:4e:1e:03:51:2c:61:c7:20:ac:3e:dc:
8b:5b:9f:46:76:10:8b:7c:a4:8b:1b:51:56:ec:24:
ef:9e:2e:a9:d5:d1:49:c6:0b:27:1c:3b:52:24:de:
e0:5f:17:d5:64:e4:f0:47:75:8c:77:26:58:d4:fa:
5b:06:bf:55:9b:d1:bf:cd:2f:e6:de:ad:dd:9b:1e:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:EC:F6:F2:A4:5F:C2:B8:7B:EC:51:45:DF:0A:07:B4:C0:E9:95
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mRbs9vKkX8K4e-xRRd8KB7TA6ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a3:71:30:78:65:be:97:ab:1a:4f:03:47:25:c8:7a:f3:45:
86:02:3f:ea:e1:7a:0f:cc:fc:4f:4b:02:17:e8:cd:e5:e2:f0:
d1:8e:79:cf:eb:d4:96:9c:98:36:e8:80:b8:79:37:5f:c8:2b:
7e:d8:1d:7a:33:8a:f8:d4:21:95:28:89:51:3b:bd:23:65:50:
5b:04:a9:03:4c:e6:11:2e:51:1d:56:81:f9:65:60:26:73:1c:
99:24:1e:4c:ee:e7:97:c0:f3:32:77:c5:8b:d3:7e:5c:d6:2d:
dd:30:15:21:38:01:f5:66:b3:94:b9:bf:04:2a:29:7e:1c:e6:
08:dc:18:74:16:f0:83:ef:c9:a0:17:0a:3d:83:78:61:7b:a2:
3f:24:21:4e:1d:f9:55:fd:11:20:14:d8:b8:94:5a:18:28:ba:
87:b0:c3:ff:6f:cb:86:21:f2:07:20:e1:be:3d:7f:85:11:47:
08:64:2b:f0:09:53:28:b0:2b:68:38:b4:3e:b4:0f:80:d8:c3:
34:dd:fd:34:3b:a8:b5:33:e6:4c:db:81:f1:8b:db:1a:2a:68:
c1:dc:1f:e1:55:bf:71:c2:34:56:8d:10:3e:d8:92:4f:b3:e8:
79:53:74:ed:12:1a:1a:fa:9f:89:7f:65:8a:06:ed:f5:fa:ec:
b7:29:3b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:01 2025 by rpki-client