Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tJdToX5eAjaaVEsTdpgn-Mtmq7M.roa
File: tJdToX5eAjaaVEsTdpgn-Mtmq7M.roa (raw, json)
Hash identifier: Zlzie3Asv+Xi5bdCTpe4JX/3igLqfLNEYasgpu9UmLk=
Subject key identifier: B4:97:53:A1:7E:5E:02:36:9A:54:4B:13:76:98:27:F8:CB:66:AB:B3
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199F22510D98B1CCAEAE1C93B9D2F514EF4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tJdToX5eAjaaVEsTdpgn-Mtmq7M.roa
Signing time: Fri 17 Oct 2025 12:28:59 +0000
ROA not before: Fri 17 Oct 2025 12:28:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 31.57.229.0/24 maxlen: 24
31.58.101.0/24 maxlen: 24
31.58.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:25:10:d9:8b:1c:ca:ea:e1:c9:3b:9d:2f:51:4e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 17 12:28:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b49753a17e5e02369a544b13769827f8cb66abb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:df:64:4a:07:b4:aa:be:fe:23:1c:a9:97:
a4:2a:46:0b:5f:7f:6d:7b:a2:e1:db:7b:aa:03:15:
cf:7b:ad:e1:cf:81:98:be:0e:19:5e:d9:ee:26:a4:
03:46:16:9b:6a:a8:51:cb:25:db:ad:1d:e9:b9:bc:
df:d0:30:e7:ec:81:ed:b3:fb:13:2b:ce:06:4b:be:
09:41:61:38:89:5e:d7:bc:44:ba:c4:8f:ff:01:f4:
b8:1a:d8:04:ce:b5:a0:7e:62:3a:c3:0b:69:52:a0:
ac:60:8c:ec:e7:a9:bd:3f:1e:dc:22:29:1c:42:11:
d1:65:95:70:1f:69:f1:3e:e4:61:c8:2c:92:9b:62:
65:27:df:c6:2b:d6:d4:24:00:b5:03:a1:11:1c:b3:
6c:8c:e8:3c:5e:66:0b:7f:0b:41:86:d0:bc:f5:ca:
57:70:87:5e:f4:ac:89:d8:08:9b:72:36:62:e9:6f:
87:52:70:6b:3c:98:82:46:bf:38:2f:65:9a:97:34:
de:35:54:ca:12:02:d0:7a:8b:be:20:7d:a9:1a:6b:
1d:29:3f:bd:f2:66:59:18:b5:20:7d:9e:3c:a9:4f:
b8:2e:2c:4b:2c:0a:1e:46:a2:a0:94:60:9e:43:53:
93:79:4d:03:34:22:93:cf:78:2c:44:c2:93:e5:75:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:53:A1:7E:5E:02:36:9A:54:4B:13:76:98:27:F8:CB:66:AB:B3
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tJdToX5eAjaaVEsTdpgn-Mtmq7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.229.0/24
31.58.101.0/24
31.58.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:de:0b:40:e6:c2:26:91:20:55:5b:0b:75:ed:7a:c0:db:cf:
7f:93:82:9c:fe:d5:43:d2:80:5f:2d:24:69:e8:c2:5b:c1:68:
3d:15:92:c9:2e:3f:d3:10:ab:e7:cc:e2:07:77:d4:83:0a:9f:
d2:54:47:5b:e7:77:bf:3d:90:eb:37:77:c8:76:bd:56:d9:a4:
01:bd:53:ec:e7:20:a6:92:9e:f9:01:ca:6a:0f:56:49:e9:1e:
43:1d:11:6c:af:26:71:a4:9e:54:06:58:55:a4:90:f4:93:df:
c5:80:c1:cf:e7:f1:99:ca:35:32:92:92:77:f4:17:ab:5f:0c:
58:1c:75:e4:ee:56:c7:b2:8e:96:53:eb:2e:28:60:0e:56:e4:
e5:30:1f:72:18:45:38:1c:1a:20:85:0c:21:4d:e2:26:c6:13:
5f:56:31:03:0e:d6:dd:e1:c3:39:99:fb:27:3b:26:2f:64:b1:
95:5c:c3:9b:6e:b7:51:48:43:eb:49:a3:38:9d:12:d8:97:8a:
e6:5c:db:59:a9:12:f5:d9:88:cc:4f:52:50:b3:f9:9b:ec:c8:
54:ef:85:bf:fb:cd:6c:a8:69:3b:0b:f0:a6:1a:54:48:fc:9a:
cd:37:a8:2c:b0:f7:3e:a7:3a:a3:dd:18:f2:50:0b:67:8e:fc:
b3:1d:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 05:05:39 2025 by rpki-client