Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/1RsOc1yR94fLSIN7RSYKbs-UV5E.roa
File: 1RsOc1yR94fLSIN7RSYKbs-UV5E.roa (raw, json)
Hash identifier: JvuB+fj7uwNhBJutx6Epbo+jH2P6sNnioKWN+1JAw2E=
Subject key identifier: D5:1B:0E:73:5C:91:F7:87:CB:48:83:7B:45:26:0A:6E:CF:94:57:91
Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial: 01993859D53F285455B0A4A119ADF4BEB231
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/1RsOc1yR94fLSIN7RSYKbs-UV5E.roa
Signing time: Thu 11 Sep 2025 10:37:15 +0000
ROA not before: Thu 11 Sep 2025 10:37:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42007
IP address blocks: 31.222.241.0/24 maxlen: 24
62.3.63.0/24 maxlen: 24
146.19.124.0/24 maxlen: 24
193.3.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:59:d5:3f:28:54:55:b0:a4:a1:19:ad:f4:be:b2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Validity
Not Before: Sep 11 10:37:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d51b0e735c91f787cb48837b45260a6ecf945791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:95:15:b9:1a:b9:18:25:ec:0d:3a:6a:de:
4b:7f:1c:46:50:00:6a:f6:94:0d:e9:ef:73:14:eb:
70:75:20:09:12:8a:ea:77:30:5c:6b:36:9e:1b:e4:
19:2f:da:e0:71:cd:2d:99:26:42:ec:36:08:9e:66:
98:f0:4c:54:54:2d:8b:94:01:f2:c0:69:f9:16:36:
55:fd:b3:69:60:43:bc:5b:d9:bd:1e:0a:60:13:25:
8f:e2:ce:94:18:a8:93:2e:a6:b1:19:12:e6:1a:f4:
72:56:34:a4:2b:87:bb:c8:70:3d:c6:ae:83:1c:8c:
13:e4:5b:39:53:00:3b:63:4e:3f:65:c2:5f:37:6e:
54:f2:de:c1:3e:2e:28:c3:a7:45:16:50:7f:09:3c:
1a:c7:c8:f4:6b:c2:0b:cd:e3:3c:b0:e0:d9:3d:ad:
3f:23:97:11:6e:32:d2:67:e6:18:05:44:2a:83:73:
0b:c4:0f:8f:74:cf:22:96:be:1e:8f:ba:72:4c:2d:
d8:82:76:7f:5e:52:e5:bc:06:5c:f0:67:27:c1:07:
c2:cf:b8:07:35:2d:09:15:bd:99:c5:90:f4:e5:d9:
bf:a9:cf:7e:3f:6a:8a:ae:a4:2b:62:20:8f:85:9b:
a9:32:ef:67:6b:61:46:48:e5:a0:de:dc:8b:a6:c6:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1B:0E:73:5C:91:F7:87:CB:48:83:7B:45:26:0A:6E:CF:94:57:91
X509v3 Authority Key Identifier:
keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/1RsOc1yR94fLSIN7RSYKbs-UV5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.241.0/24
62.3.63.0/24
146.19.124.0/24
193.3.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:eb:8c:48:25:4b:8a:79:81:60:d2:14:ea:7c:63:19:be:24:
f8:69:8b:e6:f4:a9:d2:30:da:81:c9:ab:67:c0:b0:1b:ba:0f:
06:4c:52:49:0f:d0:f0:6f:58:ca:4e:05:6f:13:0b:4c:a5:27:
58:db:c3:c9:21:c2:8e:dc:29:2d:db:83:82:79:c5:0d:f0:e3:
2a:c4:db:28:93:e8:c7:e1:5f:c4:fc:08:7d:ff:54:bc:3a:bf:
d8:59:c4:4b:cd:5f:d2:11:9e:b4:41:04:53:03:d9:d9:8f:29:
59:c1:bf:45:88:f6:10:49:f9:35:10:2a:59:df:d8:6f:6c:fb:
29:cb:9c:0e:f1:e8:91:e1:10:e1:54:c7:02:97:96:f7:93:a4:
f9:7a:95:bf:8f:87:b3:dd:69:e2:d9:d6:f7:61:64:ae:b0:8c:
86:ce:95:b5:76:60:df:ba:e8:b3:1e:79:20:4d:fa:b7:1e:4e:
27:ed:4e:7d:43:4f:53:f6:5e:36:43:6c:b5:78:e7:58:c7:3b:
cc:6b:ce:fe:53:01:32:23:47:80:b8:db:b1:b2:0e:c8:2c:87:
e8:be:cf:5a:d0:5a:07:00:88:71:80:90:12:72:45:b8:cf:4d:
87:1e:a3:9e:6e:d8:0e:9a:1e:9f:1e:e0:db:11:c4:0f:43:86:
f9:79:15:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:27 2025 by rpki-client