Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RDzymZpCcV0bpni3siQGqq1farc.roa
File: RDzymZpCcV0bpni3siQGqq1farc.roa (raw, json)
Hash identifier: NbY5Sdgr9o+O/ZEjGJenKUtZltIspdl+18YYsBTTJSE=
Subject key identifier: 44:3C:F2:99:9A:42:71:5D:1B:A6:78:B7:B2:24:06:AA:AD:5F:6A:B7
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0198B833929CB16AF003D36AD47851068D3F
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RDzymZpCcV0bpni3siQGqq1farc.roa
Signing time: Sun 17 Aug 2025 13:24:04 +0000
ROA not before: Sun 17 Aug 2025 13:24:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.76.0/24 maxlen: 24
31.22.77.0/24 maxlen: 24
86.54.5.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b8:33:92:9c:b1:6a:f0:03:d3:6a:d4:78:51:06:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Aug 17 13:24:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=443cf2999a42715d1ba678b7b22406aaad5f6ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:80:61:89:39:84:b3:08:18:d8:92:3e:83:
36:43:be:7c:ce:04:3d:1f:15:26:e0:df:f9:65:4d:
9a:40:b5:e4:ce:68:91:94:a0:ab:dd:17:17:c6:70:
ef:f3:ff:fc:a5:dd:a6:83:f8:7b:19:19:76:a8:74:
6c:2f:30:da:16:5e:e1:5d:47:c6:85:f8:31:18:62:
8a:0b:39:12:14:fc:88:f7:84:8e:bc:19:3f:28:06:
07:39:6e:07:14:2e:e1:d0:71:83:91:b8:7f:a2:d4:
0e:cb:8e:f8:45:f9:e1:da:10:f5:e5:4c:b9:96:38:
94:68:e5:86:4c:fd:b2:2b:79:b8:d5:e2:e0:7c:82:
9b:a2:74:cb:70:e3:b9:ab:83:73:48:1b:bd:4f:b1:
84:ad:24:0b:28:be:9a:21:9e:7a:b9:7d:11:5a:d4:
97:a8:95:9f:71:85:d6:75:26:2c:bc:ff:ad:91:10:
d2:98:b1:8a:9c:5e:6a:42:4c:35:7d:33:90:19:f1:
c1:0c:23:83:f1:49:3f:bc:37:ff:a7:ea:fb:3d:1a:
47:ba:00:a4:1f:e3:95:8f:fc:75:a2:1f:ee:2f:7b:
c5:12:35:f4:c6:4b:75:7f:85:4f:9f:60:97:c5:65:
28:d3:b8:c5:3a:00:90:51:ea:46:7d:4f:1f:1d:6f:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3C:F2:99:9A:42:71:5D:1B:A6:78:B7:B2:24:06:AA:AD:5F:6A:B7
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RDzymZpCcV0bpni3siQGqq1farc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.76.0/23
86.54.5.0/24
194.46.60.0/24
Signature Algorithm: sha256WithRSAEncryption
56:61:89:92:cc:46:a1:4c:03:73:78:13:2a:1d:8f:03:8b:1a:
37:8c:a5:fd:52:fe:4c:ae:2d:e5:f2:15:f0:a8:63:63:3a:2b:
12:60:b2:99:85:c3:3b:a3:9e:dc:a3:7d:b5:7d:42:15:ea:76:
5e:96:67:37:b9:81:50:b5:b1:11:60:37:95:fc:ef:65:a6:3b:
43:b9:e9:d9:f6:ff:07:08:9c:3c:8f:bb:93:b5:41:43:a8:df:
6c:c8:1e:03:13:04:7b:02:9f:1c:26:4b:99:69:f7:08:82:3b:
30:f3:5b:90:9d:cc:8b:e9:e6:d0:cc:b4:0f:7e:5d:ff:69:c3:
38:a6:8b:d7:31:c3:b6:67:74:0f:00:96:c4:57:1b:3b:15:5c:
5f:0b:22:3f:0b:e6:10:ad:9d:4d:43:ec:9d:cb:87:48:27:86:
50:31:14:cc:c6:b1:79:66:11:cb:7c:8f:dd:54:4d:b1:e3:11:
b6:fc:86:ac:6e:a1:9a:b0:9c:75:95:c4:7d:bf:b7:8f:1b:4d:
95:05:55:6b:47:16:0d:84:d0:d0:9a:93:b2:f7:43:46:c0:88:
87:f4:07:eb:22:be:81:41:ec:81:c2:08:61:68:5e:68:83:9b:
ed:4f:f0:06:c2:84:87:b3:08:10:76:f1:09:1a:52:02:27:5a:
cb:a3:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:25 2025 by rpki-client