Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1uV5-c9qSZ04ppQruCo4rB4pvSM.roa
File: 1uV5-c9qSZ04ppQruCo4rB4pvSM.roa (raw, json)
Hash identifier: +W+jOs07MFB7g7DWa1u3KlrBM+YBRQAbs+gjTGzc8OQ=
Subject key identifier: D6:E5:79:F9:CF:6A:49:9D:38:A6:94:2B:B8:2A:38:AC:1E:29:BD:23
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0198C2E997144BCDD8E507892B5FF5C6EB9B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1uV5-c9qSZ04ppQruCo4rB4pvSM.roa
Signing time: Tue 19 Aug 2025 15:19:05 +0000
ROA not before: Tue 19 Aug 2025 15:19:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49811
IP address blocks: 31.148.16.0/22 maxlen: 24
31.148.244.0/24 maxlen: 24
92.38.44.0/23 maxlen: 24
93.170.48.0/23 maxlen: 24
93.171.236.0/23 maxlen: 24
95.47.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c2:e9:97:14:4b:cd:d8:e5:07:89:2b:5f:f5:c6:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 19 15:19:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6e579f9cf6a499d38a6942bb82a38ac1e29bd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:70:7e:2a:c9:ed:8e:de:2e:85:bc:c6:3d:
0f:2b:9a:d6:88:8a:07:6f:04:d2:11:69:93:9f:16:
a9:05:eb:42:a7:1c:6d:11:f9:5d:a9:4b:eb:e0:82:
2f:87:3a:21:a8:b1:e3:62:95:4e:38:27:c7:8e:3b:
0b:98:f7:99:74:a5:e1:81:38:7e:21:15:8d:dd:d8:
8c:16:52:92:33:b5:16:17:53:24:7b:30:aa:78:53:
c6:3b:f1:33:51:60:bb:9f:52:9b:92:27:bc:13:16:
4a:70:63:a6:5e:20:58:ea:64:c6:83:4b:39:a6:92:
57:11:84:db:82:28:34:40:a7:c1:0e:9f:02:be:fc:
93:99:87:06:d8:7f:3f:48:57:8b:39:58:cd:41:7a:
ce:48:cb:68:d9:08:c0:45:5e:49:63:e4:a8:fc:12:
af:d3:75:6f:5a:c3:ea:6c:77:40:4a:6a:b2:59:22:
b6:01:f0:60:43:ae:3e:7f:72:c1:29:07:0e:05:90:
64:41:28:51:f2:7e:16:d6:70:0a:58:c1:29:bb:66:
18:b0:b7:e6:0c:bb:27:97:ac:f9:5c:02:95:65:08:
52:db:40:6a:f6:eb:3d:fb:0f:6f:11:98:fb:c2:b1:
c5:33:3c:29:9e:ed:d8:9a:fe:6f:4d:80:cd:c1:bd:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:79:F9:CF:6A:49:9D:38:A6:94:2B:B8:2A:38:AC:1E:29:BD:23
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1uV5-c9qSZ04ppQruCo4rB4pvSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.16.0/22
31.148.244.0/24
92.38.44.0/23
93.170.48.0/23
93.171.236.0/23
95.47.254.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:af:0f:e7:7a:22:81:fe:8d:d7:07:e9:ed:ec:32:cd:87:0a:
a7:79:a8:23:63:0f:9b:6e:13:52:06:ea:da:6f:4c:a6:ca:81:
96:bf:2c:81:c0:51:7d:22:3b:23:83:a7:04:df:7f:1e:d3:ba:
60:d3:8f:1d:0a:39:a6:4f:39:84:d0:6e:fe:c1:58:a9:c9:ea:
58:0a:f2:f2:8d:f8:8b:5f:04:b7:ba:c8:b1:f3:6b:01:db:b1:
8e:64:8e:23:ad:9b:6c:fa:f5:a1:37:3c:b9:a8:1f:b6:a7:3f:
dc:55:2a:27:8f:e2:38:fa:62:4a:d9:8a:7b:73:a1:4b:e4:57:
d7:44:cd:e5:f8:b0:d6:f8:4d:d9:32:11:ea:d0:a7:06:c0:04:
15:4f:d3:04:40:c4:f0:12:20:ca:de:4c:d0:f4:c3:cc:1b:46:
65:c8:f7:71:23:87:0b:39:d3:2d:68:38:9b:75:5c:1f:0e:15:
e2:21:00:76:5c:7e:80:ab:a9:b1:0d:09:9c:8a:b7:44:f8:4f:
83:28:39:32:89:c3:69:0e:1b:99:f9:a5:28:36:95:0e:8e:44:
5e:34:99:ff:a1:85:ab:e9:2d:1e:1c:9a:3c:11:c2:85:13:e2:
8d:84:60:a1:fd:73:53:15:b5:3e:48:6c:42:b9:09:3d:8f:1e:
cd:04:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:31 2025 by rpki-client