Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mqNuQIzzFjevjQh2nMVqSzpxnkU.roa
File: mqNuQIzzFjevjQh2nMVqSzpxnkU.roa (raw, json)
Hash identifier: 3gsuCvRpyYNtatPgnfwqB+iVDAjZEdE8T1mg8/aKElc=
Subject key identifier: 9A:A3:6E:40:8C:F3:16:37:AF:8D:08:76:9C:C5:6A:4B:3A:71:9E:45
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199F226E5DBC86C8EF0F9F5EECB1901262D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mqNuQIzzFjevjQh2nMVqSzpxnkU.roa
Signing time: Fri 17 Oct 2025 12:30:59 +0000
ROA not before: Fri 17 Oct 2025 12:30:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393406
IP address blocks: 31.56.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:26:e5:db:c8:6c:8e:f0:f9:f5:ee:cb:19:01:26:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 12:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aa36e408cf31637af8d08769cc56a4b3a719e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:f1:e7:62:b2:af:08:c8:68:97:6d:80:87:
80:90:f8:f5:72:11:91:b9:97:a6:da:32:ee:6e:b1:
21:7e:4c:12:a0:7e:a4:1c:7e:d6:50:bd:75:f5:17:
50:0b:21:b9:40:6c:7b:06:13:c9:c0:f3:52:e8:4a:
6e:27:50:e4:b9:1f:04:93:5e:74:ee:9d:e4:0d:9e:
62:7a:03:8f:d2:36:c8:f5:79:4d:67:aa:1f:ab:d0:
a1:9c:81:24:94:11:0f:a4:85:f8:81:bb:7f:1d:9d:
9f:ed:d8:b1:bf:bc:64:f4:00:9e:60:d0:f4:97:de:
aa:ed:d4:45:41:3b:ac:bf:3c:21:e0:41:2f:92:bc:
d4:f9:16:bf:fa:e5:f8:7f:3c:8e:11:c9:fe:a3:3a:
3a:ee:68:6d:f1:c8:de:ed:e5:b9:d0:be:cd:dd:97:
16:cc:2e:98:85:de:4b:31:a3:db:b2:0e:39:c8:0c:
9b:21:6e:6a:7d:37:eb:ff:2f:4b:5a:1d:25:8d:a4:
ae:3c:87:93:a4:92:e3:54:d7:49:5a:84:8b:1f:f8:
b8:0d:3e:73:d1:ef:84:86:08:15:ee:eb:1a:6b:d4:
a1:c2:f5:9e:18:18:1e:b5:07:77:b8:e4:ba:99:05:
6d:1a:7f:7c:f9:f8:9d:e9:8c:c8:70:ac:dd:9c:18:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A3:6E:40:8C:F3:16:37:AF:8D:08:76:9C:C5:6A:4B:3A:71:9E:45
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/mqNuQIzzFjevjQh2nMVqSzpxnkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:89:da:0f:91:f7:3b:30:97:8f:3f:fd:d2:c4:d1:f8:66:94:
90:8c:90:b4:5f:a9:25:c0:71:3f:27:5c:78:1d:28:59:b3:19:
46:f7:cf:8f:e0:37:cf:a6:db:8c:61:7d:74:e4:06:74:f2:6a:
73:37:47:10:23:d5:92:4d:db:3b:53:b5:a8:87:d9:62:82:69:
83:d0:63:7c:97:f4:2d:77:02:27:b3:ff:8d:2b:3d:96:24:8f:
4f:59:b4:86:26:4d:23:33:41:1c:ac:97:6f:0f:35:f3:97:89:
19:bc:be:af:39:ed:fc:25:0e:a1:7a:19:f7:dd:0b:41:46:dc:
9f:28:43:3c:df:79:07:4c:48:91:33:e6:6f:e3:d1:62:0f:2b:
e3:bc:36:ea:a9:46:52:75:fd:51:b4:8e:9d:ac:19:2b:9f:83:
a8:ee:d4:1d:f4:69:14:6c:f3:57:ed:db:60:09:5d:ee:bb:88:
98:6d:7f:a3:d9:c3:84:25:37:77:46:79:08:7d:15:67:8c:75:
2c:09:11:57:21:4c:65:a1:4c:bf:07:5c:75:6e:65:c2:c1:e5:
96:d4:42:16:24:9a:e0:b6:b2:8d:50:15:3e:72:9b:3d:78:36:
44:bc:e2:ea:c6:93:36:9a:12:2f:67:b2:99:7b:bb:dd:d2:d1:
ea:a1:d8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:30 2025 by rpki-client