Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa
File: LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa (raw, json)
Hash identifier: mQpu5Z0eDQkFYVXPC9Ju2CwxJctFEU3LSWItHzUvqPk=
Subject key identifier: 2E:EA:C8:33:12:1D:4B:31:70:5A:50:E1:93:82:E5:D3:43:68:4F:D6
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 0199A6A3967DEB969BF4C1C2BD56622944C4
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa
Signing time: Thu 02 Oct 2025 20:36:02 +0000
ROA not before: Thu 02 Oct 2025 20:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213241
IP address blocks: 31.216.58.0/24 maxlen: 24
84.38.249.0/24 maxlen: 24
87.236.33.0/24 maxlen: 24
87.238.226.0/24 maxlen: 24
89.42.52.0/23 maxlen: 24
89.47.38.0/23 maxlen: 24
94.139.34.0/23 maxlen: 24
94.139.38.0/24 maxlen: 24
185.39.9.0/24 maxlen: 24
185.185.230.0/24 maxlen: 24
193.109.62.0/24 maxlen: 24
2a13:1fc0::/48 maxlen: 48
2a13:1fc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a6:a3:96:7d:eb:96:9b:f4:c1:c2:bd:56:62:29:44:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Oct 2 20:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eeac833121d4b31705a50e19382e5d343684fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:9d:37:1a:30:23:73:a1:d5:a7:a6:02:b8:
98:bb:b5:42:5b:b7:d1:e4:46:ea:1b:2c:c8:cc:07:
9b:0d:59:d5:ef:ee:04:70:06:0c:d9:5e:34:1f:5b:
0c:9a:ee:a9:a9:a9:e5:20:67:4b:17:13:f3:1a:30:
1c:b9:17:77:b2:99:de:cd:72:f4:cd:bb:41:a0:91:
0b:d8:f1:c0:a5:6b:c7:34:28:0b:91:09:cd:7b:e0:
f2:99:aa:78:20:bb:90:9c:81:8c:5b:92:86:8a:5f:
f2:61:bf:bd:2f:11:ed:c6:6e:9e:b4:5c:e9:92:fd:
2e:0c:76:f3:cc:60:f4:8f:fb:48:d3:5e:1d:d9:b0:
23:3a:5d:bc:2b:ec:06:d8:8f:3d:df:53:de:96:8f:
1a:6f:81:bb:9f:dd:51:41:d3:1d:87:2a:05:fc:5f:
8b:5b:a9:7a:a4:41:5e:83:7a:1a:0b:e3:07:7e:33:
31:fb:95:90:39:75:a8:25:a1:73:f4:27:15:1a:a9:
a1:c4:b6:91:f3:92:42:9a:5b:d0:5e:ab:b9:b2:94:
2b:21:fa:63:fe:a3:06:a2:20:bd:1d:1b:ee:d5:a7:
d3:63:dc:a5:83:3f:24:18:fd:da:4b:f9:0a:b2:db:
81:e6:b7:ad:e4:8e:97:db:d2:90:95:79:ca:66:aa:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:C8:33:12:1D:4B:31:70:5A:50:E1:93:82:E5:D3:43:68:4F:D6
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/LurIMxIdSzFwWlDhk4Ll00NoT9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.58.0/24
84.38.249.0/24
87.236.33.0/24
87.238.226.0/24
89.42.52.0/23
89.47.38.0/23
94.139.34.0/23
94.139.38.0/24
185.39.9.0/24
185.185.230.0/24
193.109.62.0/24
IPv6:
2a13:1fc0::/47
Signature Algorithm: sha256WithRSAEncryption
6c:6b:2e:f7:64:2d:af:ef:5e:c9:fa:91:59:bb:5f:57:8c:08:
5f:46:6d:19:93:25:29:07:49:57:3c:bf:6f:0b:19:0f:45:d7:
48:e6:fa:df:93:ba:fc:5a:19:73:74:b4:69:82:e5:64:5c:84:
40:b9:8c:97:85:79:8e:d6:54:f2:86:12:6f:c8:bf:41:df:9a:
9d:04:1c:2d:64:22:6e:43:28:4d:ae:6e:bd:c2:5f:ba:a3:c2:
7d:38:98:e0:04:03:d5:e8:bf:1b:12:54:d4:89:66:43:f3:e8:
07:86:ff:67:3e:ee:9a:c6:b8:a1:cb:f5:cf:de:c7:8e:8d:91:
86:0b:0d:4a:49:45:53:7e:11:07:a5:86:ad:0c:3a:10:8b:bb:
6d:a7:87:1a:06:34:14:8d:5c:ac:b9:9b:72:81:bd:9d:7a:2e:
32:e6:d6:a5:5a:17:fd:dc:74:d9:c0:84:24:79:79:75:9f:eb:
55:25:f8:73:d1:45:57:84:77:41:39:1d:97:79:b0:b8:15:d8:
18:66:c9:09:86:b8:76:82:ec:52:d3:e2:2b:75:e3:5f:58:a6:
c9:36:b1:b3:87:0e:5a:fc:10:ca:7a:d8:c4:9f:82:1c:e9:79:
07:77:f9:f4:26:d5:6b:c6:74:f1:23:f0:9f:22:81:42:44:e9:
1a:35:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:19 2025 by rpki-client