Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6nd2TQVOsIb76kln4u7s_8AmfuY.roa
File: 6nd2TQVOsIb76kln4u7s_8AmfuY.roa (raw, json)
Hash identifier: nS49DLCiE0s2WcK7unWbq4tOVWPmMml/PGO/kvrsR3U=
Subject key identifier: EA:77:76:4D:05:4E:B0:86:FB:EA:49:67:E2:EE:EC:FF:C0:26:7E:E6
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019777EBE6A614CC2749C391FC7A82BFFAA0
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6nd2TQVOsIb76kln4u7s_8AmfuY.roa
Signing time: Mon 16 Jun 2025 08:47:18 +0000
ROA not before: Mon 16 Jun 2025 08:47:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 31.56.207.0/24 maxlen: 24
31.57.98.0/24 maxlen: 24
31.58.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:eb:e6:a6:14:cc:27:49:c3:91:fc:7a:82:bf:fa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 16 08:47:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea77764d054eb086fbea4967e2eeecffc0267ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:18:ce:1b:4a:be:73:80:11:9b:d9:cc:87:
76:63:f6:d0:5e:d8:dc:55:89:06:d0:82:cc:14:64:
df:36:de:a7:85:12:03:70:3d:53:26:8f:15:31:bc:
ae:72:7e:7e:d9:4a:b5:8d:88:f5:93:2a:1a:5c:23:
20:3b:28:d4:99:f8:69:0f:58:6a:ac:6d:7a:3b:01:
ff:b5:6b:9b:f5:5e:61:16:ec:44:75:e2:ac:6f:21:
fd:91:e8:d4:5b:05:0f:94:15:42:3b:7e:d5:2a:cd:
61:31:3e:8f:2a:51:f0:0b:c9:71:2a:bd:a7:21:3f:
8f:7e:7b:b5:a2:bd:4e:ad:86:3f:80:e9:b7:0a:1c:
c9:ec:c6:64:f5:98:3b:26:2c:76:3a:02:dc:72:4a:
35:6c:b9:01:1e:db:b3:c2:39:de:2e:39:bd:c7:cf:
1e:8f:1d:9e:69:ed:44:b6:60:05:cc:50:d9:49:e5:
3f:f7:24:c2:41:21:c2:50:6c:b1:2b:9a:67:6b:95:
3c:82:6a:39:30:bd:37:4e:5a:20:1c:d2:30:2e:7a:
91:67:fe:49:16:33:e5:d7:e4:8f:27:ed:6b:c8:93:
be:f1:c0:55:79:35:f4:fd:0b:3d:cd:5c:91:76:65:
d0:05:e2:60:61:15:64:f9:58:9a:d0:b1:f2:2a:84:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:77:76:4D:05:4E:B0:86:FB:EA:49:67:E2:EE:EC:FF:C0:26:7E:E6
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/6nd2TQVOsIb76kln4u7s_8AmfuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.207.0/24
31.57.98.0/24
31.58.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:49:68:68:65:2d:ee:39:b4:18:7c:f1:2c:f5:26:be:bb:df:
2b:c2:73:50:a5:21:99:b8:3b:fa:63:d2:a2:7f:92:85:ed:2e:
9c:b0:21:46:52:20:bf:cc:cc:5d:3d:90:ed:08:6b:01:12:17:
7f:93:0c:32:1c:9d:09:0e:31:f0:7f:ec:ae:22:af:2a:9d:3e:
ea:bf:cc:96:45:84:ca:fd:be:79:80:92:39:0f:d5:5c:07:8f:
b4:20:cc:21:af:e6:00:8a:c3:35:c5:dc:9f:00:62:e2:f1:77:
c2:c5:d3:44:3c:f2:a4:10:d1:b5:b2:0e:2b:ad:b0:e1:9b:1e:
df:b8:21:3e:95:07:3e:94:7e:43:08:50:a7:2e:ab:b8:ba:a5:
64:c2:02:24:6c:5a:1d:81:76:46:e4:4b:bd:92:e7:8c:dc:51:
98:95:9c:97:e8:09:7f:07:97:29:66:56:62:fa:3d:19:3e:e7:
e7:64:69:c5:5b:90:ff:bf:c1:5c:bf:6a:39:81:75:e5:79:ed:
b7:f7:34:40:eb:27:d8:ed:9a:39:c8:17:0c:c1:59:d0:c9:f5:
09:ff:fe:e4:9d:78:6f:c6:83:3e:97:da:ab:4c:3e:9f:99:b3:
56:1c:6e:d6:5c:26:6d:92:7e:4d:67:b3:2f:3b:9e:91:ab:7d:
6e:fb:8d:c5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZd36+amFMwnScOR/HqCv/qgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNjE2MDg0NzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTc3NzY0ZDA1NGViMDg2ZmJlYTQ5NjdlMmVlZWNmZmMwMjY3ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVIYzhtKvnOAEZvZzId2Y/bQXtjc
VYkG0ILMFGTfNt6nhRIDcD1TJo8VMbyucn5+2Uq1jYj1kyoaXCMgOyjUmfhpD1hq
rG16OwH/tWub9V5hFuxEdeKsbyH9kejUWwUPlBVCO37VKs1hMT6PKlHwC8lxKr2n
IT+Pfnu1or1OrYY/gOm3ChzJ7MZk9Zg7Jix2OgLccko1bLkBHtuzwjneLjm9x88e
jx2eae1EtmAFzFDZSeU/9yTCQSHCUGyxK5pna5U8gmo5ML03TlogHNIwLnqRZ/5J
FjPl1+SPJ+1ryJO+8cBVeTX0/Qs9zVyRdmXQBeJgYRVk+Via0LHyKoQ3tQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOp3dk0FTrCG++pJZ+Lu7P/AJn7mMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvNm5kMlRRVk9zSWI3NmtsbjR1N3NfOEFtZnVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHzjPAwQA
HzliAwQAHzpBMA0GCSqGSIb3DQEBCwUAA4IBAQC7SWhoZS3uObQYfPEs9Sa+u98r
wnNQpSGZuDv6Y9Kif5KF7S6csCFGUiC/zMxdPZDtCGsBEhd/kwwyHJ0JDjHwf+yu
Iq8qnT7qv8yWRYTK/b55gJI5D9VcB4+0IMwhr+YAisM1xdyfAGLi8XfCxdNEPPKk
ENG1sg4rrbDhmx7fuCE+lQc+lH5DCFCnLqu4uqVkwgIkbFodgXZG5Eu9kueM3FGY
lZyX6Al/B5cpZlZi+j0ZPufnZGnFW5D/v8Fcv2o5gXXlee239zRA6yfY7Zo5yBcM
wVnQyfUJ//7knXhvxoM+l9qrTD6fmbNWHG7WXCZtkn5NZ7MvO56Rq31u+43F
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:45:11 2025 by rpki-client