Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/fYh0q4RbsUeD03dj0rwHGm4y498.roa
File: fYh0q4RbsUeD03dj0rwHGm4y498.roa (raw, json)
Hash identifier: jid4JrHLpAnwUEs/6cvvjiWubSMoSPBicHqzkJH71lY=
Subject key identifier: 7D:88:74:AB:84:5B:B1:47:83:D3:77:63:D2:BC:07:1A:6E:32:E3:DF
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019952E974909BC519B27FF00610D7A6E4C9
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/fYh0q4RbsUeD03dj0rwHGm4y498.roa
Signing time: Tue 16 Sep 2025 14:24:15 +0000
ROA not before: Tue 16 Sep 2025 14:24:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204287
IP address blocks: 31.98.32.0/19 maxlen: 19
31.98.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:e9:74:90:9b:c5:19:b2:7f:f0:06:10:d7:a6:e4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Sep 16 14:24:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d8874ab845bb14783d37763d2bc071a6e32e3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:d7:fe:59:2b:ba:d0:dc:07:56:15:64:08:
42:08:6f:96:05:cf:fb:db:04:27:3d:c8:ca:a8:c3:
6a:ed:17:b2:bd:9b:fc:25:25:25:e3:65:6a:c9:68:
1e:24:da:1b:00:ad:07:33:99:97:f4:2d:50:8c:c6:
57:23:82:66:6d:a5:88:a4:01:49:da:f8:44:af:77:
15:11:a1:e5:7c:fd:5c:a2:00:fd:60:9b:03:f3:fd:
82:92:80:df:90:32:f9:6b:56:21:2f:94:0d:e5:7e:
0e:28:22:78:f5:36:9b:83:a4:39:96:29:5d:16:e9:
6c:bf:22:c9:8c:db:e6:04:30:90:e1:fb:bd:47:ca:
91:46:61:47:06:3b:65:ab:04:ba:c9:9a:0a:f1:ea:
36:ee:58:70:f2:0d:8c:ab:a3:b7:1b:c3:3a:25:0a:
e8:78:ea:c5:f0:7e:a8:ed:3f:4e:47:86:cb:dd:a1:
e8:44:95:05:22:bb:d0:3b:a6:e2:1e:4e:d5:3a:46:
94:7f:c6:c6:5e:2a:df:78:72:f0:88:16:1c:52:97:
55:c4:34:35:4b:15:87:52:af:fe:bf:9e:17:4b:c1:
73:22:11:73:2d:99:59:55:d7:49:7c:e6:64:9b:83:
26:8d:61:e0:2e:f3:a6:6d:d7:a8:20:85:7f:8a:cf:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:88:74:AB:84:5B:B1:47:83:D3:77:63:D2:BC:07:1A:6E:32:E3:DF
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/fYh0q4RbsUeD03dj0rwHGm4y498.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.98.32.0-31.98.71.255
Signature Algorithm: sha256WithRSAEncryption
6d:2f:a5:79:49:5b:1f:ef:08:2e:5a:35:68:85:ae:b2:18:30:
21:57:5d:b3:54:dc:3c:8a:38:b2:f4:42:b2:d5:b6:e7:fc:e3:
1a:fe:40:96:34:81:02:ee:84:1f:11:ae:5b:09:06:bf:b9:94:
80:17:6a:30:26:19:6b:5c:87:54:d2:73:25:71:13:95:40:eb:
a0:4f:bc:43:58:26:ba:91:80:ec:ab:2a:20:3f:e6:7a:eb:8f:
92:02:77:ea:31:81:b6:17:42:51:c0:42:a0:bc:1f:83:1b:ff:
ca:e2:cc:6c:2f:ea:8f:0d:af:d3:d8:ee:e4:2e:d6:b4:c8:71:
9e:bc:ae:c5:71:67:b3:c6:21:ca:4f:87:7c:bc:55:9c:09:14:
01:0c:1a:c5:c7:8c:6c:91:91:24:1d:9e:88:cd:6b:3b:de:65:
55:26:a9:a4:17:9f:dc:15:78:71:43:22:86:f4:22:fc:30:57:
8b:ee:7b:5f:b2:38:76:3d:e5:8b:0e:ad:37:f7:ca:e0:5a:4f:
53:4d:6d:0c:1b:3a:de:c4:7c:1a:38:22:bb:fc:a3:1c:be:3f:
cc:31:1a:14:1c:57:50:f6:a1:d9:0d:82:b3:ca:23:43:6f:62:
f3:6d:2d:43:c0:08:c9:49:b7:35:e7:48:7c:ae:93:70:3e:86:
12:4b:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:12 2025 by rpki-client