Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vexxyCRF08Tp5tqm9edXUCR51Eo.roa
File: vexxyCRF08Tp5tqm9edXUCR51Eo.roa (raw, json)
Hash identifier: FVTrBZMBkdNNelg+mAIQW8U2mfyn53+A3LFpAOJNRek=
Subject key identifier: BD:EC:71:C8:24:45:D3:C4:E9:E6:DA:A6:F5:E7:57:50:24:79:D4:4A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0199F896D8BE08C9EE7B74A73EB5691ABC98
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vexxyCRF08Tp5tqm9edXUCR51Eo.roa
Signing time: Sat 18 Oct 2025 18:30:59 +0000
ROA not before: Sat 18 Oct 2025 18:30:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:96:d8:be:08:c9:ee:7b:74:a7:3e:b5:69:1a:bc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 18 18:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdec71c82445d3c4e9e6daa6f5e757502479d44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:3b:98:8c:01:f9:f2:57:c1:45:f4:25:db:
61:76:f5:1b:57:5b:35:e9:8e:81:53:df:2b:72:ca:
45:af:ad:91:d5:89:58:92:f1:3a:02:91:36:26:91:
d1:e7:bb:38:f1:e4:3b:1b:2f:6e:f3:b1:5d:c1:fc:
56:02:60:79:63:6a:8d:e5:24:b2:c0:be:20:11:4a:
64:11:e7:5b:f9:a7:10:a6:7b:93:9e:54:3b:31:68:
e0:4f:64:78:0f:c6:12:88:80:cf:ff:91:63:39:03:
a9:71:99:2d:35:a2:82:89:6d:ae:4d:0b:ff:94:8f:
74:9c:1f:18:b6:58:53:16:ff:5b:47:75:5a:52:01:
da:e9:a2:bf:72:ba:6a:6e:40:36:9b:27:81:b7:98:
9f:f9:b1:c4:ae:f8:82:7a:0b:1f:52:b3:ee:23:54:
b8:51:9c:84:73:fc:24:cb:89:65:89:1c:fd:02:0b:
86:19:3c:0c:c9:63:03:34:fb:af:d5:f1:fd:72:ae:
ca:09:c5:f5:51:56:66:28:23:b0:2a:37:0f:8c:f1:
26:ae:43:26:3e:cf:44:84:b3:d6:8e:1e:bc:a2:d3:
e5:87:50:aa:35:ea:d0:09:b3:c4:5d:24:22:09:da:
75:96:0e:97:03:01:f7:24:f9:a9:4a:b1:3b:98:9e:
83:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EC:71:C8:24:45:D3:C4:E9:E6:DA:A6:F5:E7:57:50:24:79:D4:4A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vexxyCRF08Tp5tqm9edXUCR51Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.58.71.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
Signature Algorithm: sha256WithRSAEncryption
71:45:5e:a8:3c:3b:2e:49:9a:5e:ed:74:12:1c:bc:cd:b3:b4:
4c:55:f2:3c:50:c5:eb:74:83:f4:b6:c6:01:51:13:8e:31:cd:
9f:5d:cd:65:2f:fe:37:a2:b7:ce:29:23:65:97:9a:31:a3:64:
5e:6f:53:c3:45:d5:ef:b3:dc:c5:4d:d7:c9:16:fb:a5:90:6e:
c5:de:e2:b0:99:1d:46:0b:95:d3:21:eb:cf:c3:d8:e9:7f:0c:
72:3d:7f:45:e3:9f:e2:59:a5:a3:35:1a:ae:7e:7c:47:50:2a:
84:5f:40:8b:0c:30:da:34:71:e5:33:74:b0:8c:b3:0b:b1:3c:
97:83:0b:c0:7f:7d:14:22:d4:69:c5:5d:d9:a0:d5:ce:d6:ef:
5c:80:1e:18:5b:d5:82:50:52:fe:51:69:33:00:e0:48:27:11:
3b:86:68:40:94:a7:00:f4:9e:fb:49:0e:b0:37:24:9d:f4:ad:
20:d4:fc:1f:ca:4f:e4:0a:a1:9b:33:a9:d0:c3:53:21:98:0d:
3a:e8:ec:cb:97:58:03:e2:d1:9c:bf:6a:a4:c1:46:ab:88:61:
c1:85:77:4e:3b:e2:a1:c1:9e:85:e6:d6:8b:3d:1d:19:8e:78:
ff:6f:ea:87:6d:74:9a:b8:34:85:7c:52:b8:bc:22:bc:18:ba:
b1:54:87:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:34 2025 by rpki-client