Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JQQduM2r3bDHyFkRrXEpQdKcMl4.roa
File: JQQduM2r3bDHyFkRrXEpQdKcMl4.roa (raw, json)
Hash identifier: PwV0pKADvxjoZAfxqkN2BSTNvaxoOmG/s/pfy2iMxOM=
Subject key identifier: 25:04:1D:B8:CD:AB:DD:B0:C7:C8:59:11:AD:71:29:41:D2:9C:32:5E
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01979936546A034EC33964345C2A246A1354
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JQQduM2r3bDHyFkRrXEpQdKcMl4.roa
Signing time: Sun 22 Jun 2025 19:56:04 +0000
ROA not before: Sun 22 Jun 2025 19:56:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 31.57.226.0/24 maxlen: 24
31.57.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:36:54:6a:03:4e:c3:39:64:34:5c:2a:24:6a:13:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 22 19:56:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25041db8cdabddb0c7c85911ad712941d29c325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:9b:96:9f:a4:4b:b1:6e:39:e5:26:4a:7d:
54:25:34:da:7b:12:db:c8:c1:41:9d:63:11:58:ed:
e1:4f:db:2b:3d:2f:b3:f7:41:a4:46:59:64:85:59:
3b:09:85:e8:df:15:8a:fd:5d:7a:7d:5b:dd:69:0f:
25:13:3c:73:9b:43:2d:3a:e8:37:67:c6:61:19:18:
ac:b2:04:ce:ed:0b:05:a9:1b:76:c2:7f:94:d1:b1:
5a:60:d1:02:d8:1c:df:9b:84:a9:3e:16:70:46:3e:
05:d0:33:d2:64:ca:75:09:61:7e:a9:c9:60:d4:70:
d4:76:71:16:2a:19:35:0a:27:39:5b:d9:72:b6:9e:
26:50:50:5a:e4:22:a4:fb:72:cb:b3:f5:71:f1:ae:
e4:b5:22:7a:5d:74:cd:7e:c8:fb:42:9d:e9:cc:a0:
53:0e:a8:ec:d3:64:8e:11:ae:f3:5f:49:6f:c6:5f:
70:62:09:54:cb:2f:20:7b:36:35:07:2c:cd:19:54:
24:b1:b4:88:04:ac:3b:70:99:07:e4:1d:4d:90:99:
91:ec:02:b9:44:3c:76:26:6f:a8:b1:98:7f:61:b3:
e3:31:a9:96:0e:14:5e:bb:5c:47:8b:b4:5d:bd:8c:
d6:2a:f8:7f:96:85:84:c2:cf:ca:fc:65:16:82:30:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:04:1D:B8:CD:AB:DD:B0:C7:C8:59:11:AD:71:29:41:D2:9C:32:5E
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JQQduM2r3bDHyFkRrXEpQdKcMl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.226.0/24
31.57.246.0/23
Signature Algorithm: sha256WithRSAEncryption
25:dc:87:e1:fd:c8:5e:71:de:79:7e:18:bd:a2:5c:92:a7:b1:
4f:66:45:7c:f8:0e:84:d6:43:be:9b:9f:57:dc:a6:7d:af:32:
25:1e:c3:c3:3d:cb:60:2b:b2:8d:9f:a5:22:d2:b5:4a:cb:36:
1d:e4:8b:19:24:10:9f:78:9f:9d:1b:be:3d:d0:95:34:ca:30:
fd:5c:83:7d:29:7b:ae:ec:3e:90:17:ca:6b:94:21:bf:51:6d:
c3:90:1e:9e:98:f8:86:14:90:bf:ad:e5:11:b5:15:18:e3:e3:
e2:b9:35:a1:ee:54:d2:a1:c4:c6:e4:a4:2b:13:6f:1d:80:e3:
58:e3:2f:ee:ad:90:06:71:75:52:98:d7:26:98:5b:8c:19:21:
50:53:61:c9:3f:2e:65:8b:82:e6:fc:85:d4:0c:27:5a:e2:5a:
bc:39:a9:7c:9c:6e:a6:7e:51:80:17:04:4a:c7:93:78:68:49:
78:d7:0a:2e:a3:84:09:98:d0:cb:ac:9b:14:1d:d0:e4:28:84:
f1:76:0c:9a:dc:34:70:ae:b4:18:54:af:62:ef:38:dc:83:0b:
38:77:0d:eb:4e:c1:fc:1c:7a:ae:16:0e:9a:a5:5b:34:f4:bc:
35:7d:ef:bb:7b:a8:85:a7:a8:47:28:0e:16:ac:f8:70:70:5d:
c1:f6:fa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:47:49 2025 by rpki-client