Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SB9mwt5WrWzfpJGAMYtr-x_z2qk.roa
File: SB9mwt5WrWzfpJGAMYtr-x_z2qk.roa (raw, json)
Hash identifier: ROh8H2HU/W7NUH5sLkgHsvk+YymLdHETYDvVVu+7ol4=
Subject key identifier: 48:1F:66:C2:DE:56:AD:6C:DF:A4:91:80:31:8B:6B:FB:1F:F3:DA:A9
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0197BB41D3877895EFA224C9F8C92C1B6B91
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SB9mwt5WrWzfpJGAMYtr-x_z2qk.roa
Signing time: Sun 29 Jun 2025 10:35:42 +0000
ROA not before: Sun 29 Jun 2025 10:35:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.73.0/24 maxlen: 24
31.22.76.0/24 maxlen: 24
31.22.77.0/24 maxlen: 24
46.247.108.0/24 maxlen: 24
46.247.109.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
86.54.5.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
2a14:6780:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:41:d3:87:78:95:ef:a2:24:c9:f8:c9:2c:1b:6b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 29 10:35:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=481f66c2de56ad6cdfa49180318b6bfb1ff3daa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:d4:af:ad:c6:a3:bd:02:28:a0:39:8f:61:
6b:24:be:34:ea:44:89:98:db:70:08:71:5f:e5:d9:
ad:45:11:eb:e0:7b:e6:11:3f:db:65:5d:56:30:e6:
f3:fd:9d:44:0c:71:ec:be:9a:56:77:27:97:4e:92:
dd:e0:80:8a:35:9c:1c:70:97:03:8d:2c:61:12:17:
7e:95:6e:a2:6b:c9:4b:77:73:86:12:95:08:2d:3c:
55:40:9c:61:9b:9d:af:81:03:23:a8:39:1d:d6:60:
66:19:90:60:30:fb:e2:99:db:1b:42:4b:fa:1b:1e:
d9:de:76:57:fd:a7:c5:0b:29:44:1b:a6:98:37:7a:
16:90:b7:fd:f4:4d:9f:54:ed:98:d0:e7:3b:7a:9a:
00:ce:a5:24:9b:cf:1a:62:6c:91:84:4a:49:87:1d:
11:af:d2:e7:87:2f:4a:a2:05:70:12:32:f5:f6:7b:
2e:76:e6:ac:a8:a7:0f:03:66:be:e0:f5:1f:bf:68:
47:a0:51:f0:d9:5f:b8:0a:63:38:3f:68:b7:59:f8:
61:3c:0b:7d:b5:48:13:26:10:f6:8a:33:0c:2b:80:
7d:1e:b6:e9:76:31:5a:40:e1:0e:c9:2e:da:7e:00:
3e:96:db:6b:66:ae:a7:2d:59:24:cd:2c:cf:5a:19:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1F:66:C2:DE:56:AD:6C:DF:A4:91:80:31:8B:6B:FB:1F:F3:DA:A9
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/SB9mwt5WrWzfpJGAMYtr-x_z2qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.73.0/24
31.22.76.0/23
46.247.108.0/23
62.169.152.0/24
86.54.5.0/24
194.46.60.0/24
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
86:c5:06:01:3c:2b:92:6e:63:42:0a:ec:73:94:73:64:c6:27:
05:a4:85:eb:15:39:72:f0:dd:01:84:21:15:bd:4a:5d:d3:cf:
91:1a:08:1b:e1:6b:21:12:aa:66:d4:f3:12:25:ac:e0:0c:f1:
fc:e6:f1:0d:00:d8:e9:52:68:19:a6:cb:89:92:a3:6d:bc:a2:
93:56:f8:12:78:de:cb:d8:6e:38:7c:86:9c:76:ff:c8:b4:e9:
c8:84:d8:22:20:52:9a:47:23:86:d5:95:77:34:47:e1:0c:72:
02:72:1e:d1:ca:11:ad:7d:dd:1b:6a:c2:99:75:f3:5a:14:7d:
4b:81:9d:d7:a8:11:5b:43:64:8b:33:cc:ef:cf:fe:3d:7b:8d:
d3:6a:44:1f:41:a8:25:6c:f8:63:ed:b3:5a:c8:a4:98:1d:78:
3b:a2:57:7f:11:62:b8:62:5e:54:57:fc:e8:9b:07:66:4b:6c:
55:de:d9:02:91:44:27:39:70:61:69:6e:bb:5a:e0:10:94:e5:
b0:74:23:13:be:5c:33:2d:f9:5c:86:ca:39:83:40:be:e2:a3:
5b:b2:66:51:33:37:a6:08:33:da:ce:91:14:2b:fd:de:68:ee:
51:26:27:65:0b:a5:bf:8b:33:89:f6:94:76:95:c2:97:e4:d4:
3a:25:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 04:00:36 2025 by rpki-client