Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JdFuIjcVzDgBFEm5qz3Cl4FYwCA.roa
File: JdFuIjcVzDgBFEm5qz3Cl4FYwCA.roa (raw, json)
Hash identifier: DBG67InMo2wu2BV/VmkrPaaBFCPOHGEsrjlgjtzdgWU=
Subject key identifier: 25:D1:6E:22:37:15:CC:38:01:14:49:B9:AB:3D:C2:97:81:58:C0:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197B560B6E368FD4C24C6C7872100A25F02
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JdFuIjcVzDgBFEm5qz3Cl4FYwCA.roa
Signing time: Sat 28 Jun 2025 07:11:43 +0000
ROA not before: Sat 28 Jun 2025 07:11:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.86.0/24 maxlen: 24
31.56.107.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 24
31.57.164.0/23 maxlen: 24
31.57.180.0/24 maxlen: 24
31.57.196.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:60:b6:e3:68:fd:4c:24:c6:c7:87:21:00:a2:5f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 28 07:11:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25d16e223715cc38011449b9ab3dc2978158c020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:fc:97:27:d6:0c:6e:74:fc:c6:04:84:94:
0e:0a:25:e8:47:bc:5a:5f:34:60:ba:15:b8:2d:05:
61:23:dc:d8:56:f3:8c:af:56:08:56:64:f5:29:e1:
74:3e:6a:43:36:ef:f3:f8:80:4e:33:f1:20:85:00:
76:e5:a2:20:64:04:4c:17:a8:eb:6b:10:7b:61:b1:
8d:90:83:a7:ad:2e:6c:76:e1:d2:96:fb:af:6b:8e:
d9:bf:79:19:18:dc:79:70:e0:5d:74:f4:e8:46:e5:
09:18:df:30:2c:79:df:59:01:b7:1a:97:66:8f:c7:
a4:2a:a9:f3:c1:4a:75:9c:13:38:0f:6a:13:bd:59:
2a:02:26:45:6c:b6:77:43:b8:ed:e6:35:06:9a:0c:
e5:16:68:b2:1f:60:13:b1:79:e0:04:ed:d6:c6:ed:
2b:a0:f5:9d:d2:6a:5d:36:2a:b0:8d:67:17:88:9b:
20:c3:b5:05:3d:76:91:43:63:85:c0:4f:f8:10:3f:
f7:f4:39:47:8a:e4:66:43:dc:9e:db:a0:53:f5:cb:
1b:d1:bc:1b:c6:a2:fd:48:81:55:55:75:0f:c6:fa:
5d:db:36:d0:f2:b2:77:05:df:b4:71:58:60:fe:51:
ab:54:06:69:9d:59:dd:aa:1a:46:82:de:4e:77:b5:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D1:6E:22:37:15:CC:38:01:14:49:B9:AB:3D:C2:97:81:58:C0:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/JdFuIjcVzDgBFEm5qz3Cl4FYwCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.86.0/24
31.56.107.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.196.0/24
31.57.221.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
80:4a:cc:dd:86:f5:98:47:d3:15:3c:bc:95:66:8c:61:a2:1e:
da:6f:c8:c7:93:75:a8:d1:e0:80:78:2a:43:9a:10:1c:e5:44:
f8:98:f7:d0:ed:99:bc:2c:8d:8c:da:26:ae:e7:d5:0d:b7:08:
af:88:ee:ad:84:f9:8f:c0:a2:38:50:f1:9c:3d:2f:f2:57:29:
c8:e0:67:1c:b1:e3:45:f6:5b:f3:dc:1c:63:14:88:44:71:05:
99:76:d1:b1:22:d3:e7:f1:45:51:5e:c7:81:4d:dd:2b:23:33:
a1:bf:ed:ef:94:51:2e:bf:43:52:c7:eb:03:0b:62:2f:a5:ad:
f0:63:fc:3b:ac:c5:95:4c:99:e4:a7:8b:27:5f:86:57:d5:80:
2a:0e:f3:ae:35:1b:f9:6f:0d:24:a4:a5:a7:0d:df:99:8a:38:
3c:6f:6b:0d:aa:46:4a:a1:c8:a6:4b:c8:25:31:66:11:22:08:
74:7d:54:61:6a:92:9f:28:b9:f7:77:27:67:ee:b1:4d:d6:0d:
15:2b:ca:7c:7e:0e:b4:1e:2e:1e:25:44:34:36:3b:e3:d6:b9:
2c:4d:d2:50:de:65:5a:5d:56:1d:18:10:97:11:ca:71:fa:95:
97:e5:4a:7b:7e:71:ea:2d:f6:c7:75:5b:c4:67:4b:83:ea:63:
3c:e4:c1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:24:20 2025 by rpki-client