Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/38peca17AkwczzdtRyw1gsh1O28.roa
File: 38peca17AkwczzdtRyw1gsh1O28.roa (raw, json)
Hash identifier: J1sRFhtduT0DxzOgZCWz3yh7MLunrry6IFve9qNsJeY=
Subject key identifier: DF:CA:5E:71:AD:7B:02:4C:1C:CF:37:6D:47:2C:35:82:C8:75:3B:6F
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197B55FC959133470B556E72DDCFE666821
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/38peca17AkwczzdtRyw1gsh1O28.roa
Signing time: Sat 28 Jun 2025 07:10:42 +0000
ROA not before: Sat 28 Jun 2025 07:10:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.57.95.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:5f:c9:59:13:34:70:b5:56:e7:2d:dc:fe:66:68:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 28 07:10:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfca5e71ad7b024c1ccf376d472c3582c8753b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:c6:bd:3c:f5:de:43:14:f4:f6:3b:7a:8f:
d7:a1:45:78:2f:73:f7:11:34:7d:45:d0:ad:e1:03:
3b:b4:d0:69:22:e2:ca:94:ae:6c:69:06:88:3f:d4:
c7:91:4f:da:d5:30:25:ac:9a:44:4b:84:57:10:4c:
22:2a:ea:1e:09:51:a3:aa:15:33:75:50:6b:f6:02:
63:2a:9e:c7:af:0f:5c:d1:d3:3f:92:61:4a:22:5f:
03:10:90:0c:e2:38:f6:ee:77:7e:f0:ff:85:e1:e4:
8b:f3:04:a5:36:5f:a4:73:6c:b7:5a:a4:8e:5c:69:
c9:fd:4a:e8:ce:dc:27:20:4d:38:19:0d:58:d0:4c:
e3:64:ce:56:f0:f4:04:b0:1f:2d:e7:36:42:b8:51:
c7:a2:a4:8e:b4:84:53:bb:ac:b1:d9:2c:38:98:b0:
38:a7:2c:08:8c:cf:57:15:6f:f7:32:4d:06:15:b8:
67:f6:5a:8e:da:67:01:8b:0a:b0:8e:37:bd:80:6a:
97:f3:bb:98:97:80:c6:3f:96:ec:38:66:b5:69:d2:
79:68:01:45:9a:df:d7:60:37:26:a5:8c:db:ef:38:
b8:db:70:05:fa:0b:4f:b6:75:09:53:0e:3d:63:e6:
8d:91:c5:6f:66:4c:4a:e0:fb:49:c7:46:cf:e0:89:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CA:5E:71:AD:7B:02:4C:1C:CF:37:6D:47:2C:35:82:C8:75:3B:6F
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/38peca17AkwczzdtRyw1gsh1O28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.95.0/24
31.57.171.0/24
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:09:f6:02:7c:d6:24:a4:aa:83:68:9a:5d:d9:f3:28:3c:99:
bc:92:e6:ff:28:c4:93:ce:22:e3:58:15:64:5d:b7:53:03:2e:
b5:7c:e4:1d:b0:31:27:9c:1a:44:17:1c:63:e7:01:08:76:4b:
62:5f:57:68:67:ed:3d:16:3b:9e:73:34:94:c6:f5:f0:a7:44:
fa:f5:3c:c8:44:8d:c5:d0:68:a6:39:e2:a8:d4:56:0e:fa:72:
c9:03:ee:3a:07:d4:05:27:38:0b:75:ce:db:57:77:a2:b4:45:
14:18:46:86:c7:3f:d0:d4:41:70:16:fc:bd:ba:4a:57:02:23:
8b:16:16:a8:3f:22:ff:1e:f1:58:04:03:a8:0d:79:a7:1c:a6:
55:ae:b6:da:61:04:99:d0:e6:72:19:fd:10:67:2f:eb:df:f9:
16:38:a3:fc:75:ce:00:92:39:f2:f8:9f:b3:4e:b9:d7:5e:92:
30:c1:3c:18:bc:be:74:2b:4f:67:33:f1:32:76:dc:59:fa:34:
6f:3e:0e:e8:02:c2:9c:cd:ab:01:fb:a1:f3:b5:4a:40:90:f3:
cb:20:16:7b:85:fb:f1:aa:af:70:e8:c6:a4:a9:95:08:4a:c8:
0d:df:e8:77:34:44:4c:8d:f5:7a:02:53:b5:f8:09:55:7a:68:
99:5f:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:01:36 2025 by rpki-client