Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/IbLrtVu7pWMSQlpOiD1Ev7CaqPs.roa
File: IbLrtVu7pWMSQlpOiD1Ev7CaqPs.roa (raw, json)
Hash identifier: JYnvQMjjTKbiZ0EmN4/Su8z6wVek7QvE9FV6m+QtvoI=
Subject key identifier: 21:B2:EB:B5:5B:BB:A5:63:12:42:5A:4E:88:3D:44:BF:B0:9A:A8:FB
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 01979C375D070DCAC364D69AB145E5BE2EBD
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/IbLrtVu7pWMSQlpOiD1Ev7CaqPs.roa
Signing time: Mon 23 Jun 2025 09:56:03 +0000
ROA not before: Mon 23 Jun 2025 09:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39318
IP address blocks: 31.210.174.0/23 maxlen: 24
82.115.48.0/23 maxlen: 24
82.115.48.0/24 maxlen: 24
82.115.49.0/24 maxlen: 24
85.202.192.0/23 maxlen: 24
2a00:5da0:2000::/36 maxlen: 48
2a00:5da0:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:37:5d:07:0d:ca:c3:64:d6:9a:b1:45:e5:be:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Jun 23 09:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21b2ebb55bbba56312425a4e883d44bfb09aa8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:6e:87:c3:d3:96:fc:73:6f:96:20:62:81:
35:ff:3b:3c:02:d5:a0:94:c1:74:91:2a:6e:eb:78:
d6:af:99:96:68:73:00:1d:f2:42:04:28:9a:9f:7f:
77:a3:5e:42:86:18:79:94:25:9a:e1:34:82:c7:32:
08:1e:6f:76:72:14:d1:5c:f0:0a:7c:9f:68:57:00:
c1:0e:db:30:e2:b5:24:54:59:8f:1a:39:df:ab:0e:
e6:12:8d:65:e7:11:f4:fb:e5:4e:47:8f:2a:a7:64:
76:ed:ed:52:d2:03:96:3a:77:c6:df:38:b3:97:6c:
78:6c:24:d2:30:8e:15:9b:7c:9d:71:42:b9:19:72:
40:eb:87:01:be:87:66:e4:29:56:ad:c6:a2:0e:ca:
42:df:7b:f1:56:d9:56:7c:91:bb:7b:ab:e8:03:93:
02:4d:bb:c4:db:3b:6e:21:df:20:1e:18:f3:29:1c:
01:4f:9e:58:db:c6:88:87:4e:0f:ce:b3:7a:5c:00:
4e:e9:76:06:06:70:06:e0:06:e8:2c:7e:dc:2f:07:
00:eb:3a:46:2a:02:bb:5b:76:f7:21:60:84:7b:df:
4a:6f:d9:89:83:98:fc:9f:19:88:62:a3:a8:03:ee:
6f:c0:2c:7f:12:11:38:b9:52:5c:89:62:80:00:60:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:EB:B5:5B:BB:A5:63:12:42:5A:4E:88:3D:44:BF:B0:9A:A8:FB
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/IbLrtVu7pWMSQlpOiD1Ev7CaqPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.174.0/23
82.115.48.0/23
85.202.192.0/23
IPv6:
2a00:5da0:2000::/35
Signature Algorithm: sha256WithRSAEncryption
5b:df:7d:ad:ef:8a:c5:e8:d0:88:a8:ab:19:a3:28:5a:16:10:
b5:95:17:8f:4a:5d:ba:43:23:30:20:5a:89:2c:99:60:f2:47:
db:87:e1:4e:11:4d:ad:ae:c6:5a:2f:f7:ab:90:e7:c0:7e:8b:
7e:2a:7d:09:11:30:17:aa:86:47:d2:90:a3:38:58:80:59:5b:
84:db:c2:b5:58:87:a5:9f:d5:c3:58:49:3e:64:0b:67:72:19:
7e:2b:33:a1:20:8c:f1:50:bd:f5:a6:49:bf:65:76:01:9d:34:
10:aa:62:67:20:61:8f:5b:0b:c7:36:15:70:41:cb:1c:67:b8:
7f:e1:de:69:0e:1c:31:e5:a2:96:97:8f:ab:b2:b7:94:5f:bb:
bc:59:95:57:41:bb:10:c9:1d:d0:55:d5:fb:c2:16:3d:d5:de:
10:f7:89:70:cd:fd:52:95:9e:ef:83:38:5a:f8:dc:5e:2a:45:
78:86:ce:56:82:d1:6c:ad:6a:c7:b1:b2:b0:cd:90:6e:53:ae:
fc:5f:67:ef:d1:b6:d9:c9:02:17:53:d8:19:e9:3a:bd:c5:71:
22:b5:2b:59:cc:67:55:ac:56:69:9f:86:b6:d1:8d:a5:b0:6a:
61:4e:81:69:dc:61:07:89:7e:a7:92:29:43:e2:35:6d:16:39:
eb:74:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:12 2025 by rpki-client