Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2CUUGwP7jQIRaHwX76FCqZH0Ens.roa
File: 2CUUGwP7jQIRaHwX76FCqZH0Ens.roa (raw, json)
Hash identifier: o+hF15AvxjIYzfElglu7Hq7ev1CIfrqWxQ6aPjFUAAo=
Subject key identifier: D8:25:14:1B:03:FB:8D:02:11:68:7C:17:EF:A1:42:A9:91:F4:12:7B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D57CD83399E3081413A64D398A9667F8
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2CUUGwP7jQIRaHwX76FCqZH0Ens.roa
Signing time: Sat 23 Aug 2025 05:53:05 +0000
ROA not before: Sat 23 Aug 2025 05:53:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135040
IP address blocks: 31.56.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:7c:d8:33:99:e3:08:14:13:a6:4d:39:8a:96:67:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 23 05:53:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d825141b03fb8d0211687c17efa142a991f4127b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:f9:79:ba:c1:fd:a7:0a:d6:c6:a8:cf:2d:
22:3a:10:78:06:e7:ba:21:91:20:0a:07:c9:2c:f8:
b4:14:0f:cc:9a:08:9f:f5:9a:9f:b5:18:37:b9:cf:
4e:78:7d:bc:66:17:a8:59:74:68:b9:65:a0:8e:31:
e5:c0:e9:a0:f2:ae:08:e6:fb:df:62:c0:bc:22:56:
d3:1e:01:a2:10:09:cc:8f:d6:c8:76:8e:0a:aa:e8:
77:c1:93:96:c9:91:f9:53:ee:1c:47:20:e3:6a:3d:
ec:f1:6e:42:78:52:10:d8:6c:27:4e:cd:14:67:08:
03:54:98:27:76:48:54:fd:e3:9b:fc:79:d3:03:0d:
c7:e9:ed:f2:7a:bb:5c:9c:11:52:80:e9:f4:0d:ca:
62:c2:d3:8c:ef:04:f7:8a:65:21:ae:d9:0a:a6:f2:
02:8c:35:34:88:7c:89:f1:56:2b:49:27:78:cb:62:
29:03:ae:98:6d:6a:70:ab:2b:77:f6:f5:45:ba:35:
35:86:e1:9e:32:71:49:92:36:38:dc:8e:2f:12:58:
47:72:04:7a:7c:db:0d:08:8b:db:26:44:a3:41:ac:
aa:f1:10:65:78:6e:1f:16:78:23:cc:08:53:d9:76:
10:b5:b1:f5:10:df:2b:92:7e:a6:07:87:a5:f9:a3:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:14:1B:03:FB:8D:02:11:68:7C:17:EF:A1:42:A9:91:F4:12:7B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2CUUGwP7jQIRaHwX76FCqZH0Ens.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.66.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b2:ce:53:f3:45:79:19:68:67:c8:12:90:0d:fb:03:0b:4e:
63:fa:da:80:ec:fe:6c:b5:0f:cf:6e:82:ac:3e:a7:3e:73:45:
54:b2:94:eb:1b:f6:08:51:86:a2:39:d6:e0:36:bc:b7:94:e9:
3e:97:ec:52:34:24:67:89:e9:41:19:cd:f4:f0:57:5e:e9:c5:
e9:05:68:1a:25:84:37:d1:43:ca:9f:2e:c2:46:4d:11:54:17:
aa:ec:b3:84:82:fd:90:1a:95:8e:66:7b:fc:65:02:d2:df:62:
ce:19:ca:8e:0e:02:29:69:e4:c3:63:7e:43:bf:e5:79:e5:27:
91:15:8d:09:95:f9:73:1b:cd:d9:c3:fb:ad:d1:8f:81:29:f7:
27:7e:8f:a5:c2:8c:b9:a9:70:83:da:08:41:19:aa:5a:84:88:
be:1a:6a:80:95:50:6f:e7:fa:4c:a8:d5:4e:62:93:5f:21:eb:
37:6e:f1:d4:1d:bc:29:65:32:98:95:9a:12:03:d3:87:20:70:
37:f2:1e:6d:81:39:9b:fc:9a:d3:2c:47:99:e7:60:f9:ec:4d:
5b:09:36:0c:9b:b6:c5:cf:22:89:d8:30:ed:86:12:73:28:5a:
69:07:ef:7d:f1:4c:2b:82:2a:c6:20:44:ad:b5:e3:0e:5a:f0:
1f:e9:0c:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjVfNgzmeMIFBOmTTmKlmf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwODIzMDU1MzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODI1MTQxYjAzZmI4ZDAyMTE2ODdjMTdlZmExNDJhOTkxZjQxMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPv5ebrB/acK1saozy0iOhB4Bue6
IZEgCgfJLPi0FA/Mmgif9ZqftRg3uc9OeH28ZheoWXRouWWgjjHlwOmg8q4I5vvf
YsC8IlbTHgGiEAnMj9bIdo4Kquh3wZOWyZH5U+4cRyDjaj3s8W5CeFIQ2GwnTs0U
ZwgDVJgndkhU/eOb/HnTAw3H6e3yertcnBFSgOn0DcpiwtOM7wT3imUhrtkKpvIC
jDU0iHyJ8VYrSSd4y2IpA66YbWpwqyt39vVFujU1huGeMnFJkjY43I4vElhHcgR6
fNsNCIvbJkSjQayq8RBleG4fFngjzAhT2XYQtbH1EN8rkn6mB4el+aNvewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNglFBsD+40CEWh8F++hQqmR9BJ7MB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMkNVVUd3UDdqUUlSYUh3WDc2RkNxWkgwRW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzhCMA0G
CSqGSIb3DQEBCwUAA4IBAQCBss5T80V5GWhnyBKQDfsDC05j+tqA7P5stQ/PboKs
Pqc+c0VUspTrG/YIUYaiOdbgNry3lOk+l+xSNCRnielBGc308Fde6cXpBWgaJYQ3
0UPKny7CRk0RVBeq7LOEgv2QGpWOZnv8ZQLS32LOGcqODgIpaeTDY35Dv+V55SeR
FY0JlflzG83Zw/ut0Y+BKfcnfo+lwoy5qXCD2ghBGapahIi+GmqAlVBv5/pMqNVO
YpNfIes3bvHUHbwpZTKYlZoSA9OHIHA38h5tgTmb/JrTLEeZ52D57E1bCTYMm7bF
zyKJ2DDthhJzKFppB+998UwrgirGIEStteMOWvAf6Qzr
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:36 2025 by rpki-client