Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MBEoZGuJ2_ZgAcfu85Q7NsiJv_s.roa
File: MBEoZGuJ2_ZgAcfu85Q7NsiJv_s.roa (raw, json)
Hash identifier: rrnZUhviLZ5jmF5ACukd9+l1sPcQm1pWcMHGMLfmgUI=
Subject key identifier: 30:11:28:64:6B:89:DB:F6:60:01:C7:EE:F3:94:3B:36:C8:89:BF:FB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01979936541FB987891CF2A72112CD05D20A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MBEoZGuJ2_ZgAcfu85Q7NsiJv_s.roa
Signing time: Sun 22 Jun 2025 19:56:03 +0000
ROA not before: Sun 22 Jun 2025 19:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211484
IP address blocks: 31.56.144.0/24 maxlen: 24
31.57.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:99:36:54:1f:b9:87:89:1c:f2:a7:21:12:cd:05:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 22 19:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=301128646b89dbf66001c7eef3943b36c889bffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:2f:05:a7:44:80:3a:f7:0d:ba:c8:80:2d:
15:56:26:c3:e5:f5:6f:01:65:57:5e:46:5b:ef:65:
03:34:ef:dd:62:53:f5:b6:6c:5c:f8:e8:13:ae:4f:
7c:8f:a3:b8:a2:80:7e:0e:31:1f:81:05:65:6f:5a:
c3:fb:9f:ba:ed:65:dc:bc:41:ad:7c:d8:42:0b:50:
ee:50:36:22:b0:cb:1a:ac:1f:9b:55:0a:a1:d2:e7:
9b:63:f8:b5:4c:86:48:62:fb:9f:83:03:c0:9f:c8:
54:e0:8f:c7:fe:e1:32:2a:be:61:e3:e3:b0:bf:a9:
1a:83:ed:c8:bd:65:ee:c0:d2:64:93:8d:c9:4f:0c:
e6:79:e3:b9:ed:b2:f0:6c:53:fb:8b:3c:f5:89:0f:
32:42:a9:60:44:29:9b:42:6d:d9:41:f5:11:9a:17:
07:d7:29:0c:b5:3f:56:30:d5:27:67:1b:00:ca:4c:
0b:a5:5e:49:43:a3:24:cf:4c:4f:fe:95:c0:67:a5:
95:cc:44:a6:ab:84:c1:37:6e:7f:e7:15:22:d4:6e:
66:89:f8:ba:93:90:fa:bb:81:7c:23:5f:f6:b5:20:
ac:78:ec:ec:85:1a:8f:1a:74:28:c0:f3:bf:ae:36:
fa:2d:07:f3:cd:ce:2e:25:3d:48:bf:cc:11:4a:df:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:11:28:64:6B:89:DB:F6:60:01:C7:EE:F3:94:3B:36:C8:89:BF:FB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/MBEoZGuJ2_ZgAcfu85Q7NsiJv_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.144.0/24
31.57.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f5:e6:c5:f1:28:d8:b4:96:34:cc:81:3a:0c:c7:f1:3d:66:
44:c7:f3:11:a5:c1:ce:fb:d9:03:f7:6f:84:37:e8:e1:48:02:
33:6a:eb:e2:44:37:61:84:a2:d8:c5:fe:6b:9e:92:06:55:57:
54:d1:b6:e4:39:0c:b4:8d:c4:fe:2c:e5:7e:16:b2:a0:ae:fb:
0d:2b:6e:28:83:b8:d4:4f:42:15:f3:b1:ab:8b:7e:69:7f:d1:
07:90:eb:86:3f:70:36:8e:15:4a:ab:80:d1:24:22:73:c3:7f:
d1:39:63:15:46:86:9b:06:27:c6:81:3f:a4:89:8a:63:ec:7a:
8c:6c:4b:c9:60:c0:52:a2:e2:bc:ab:73:2c:70:98:97:18:09:
06:a8:17:c8:f7:52:86:c3:0f:d1:ea:05:d6:41:43:af:8d:6b:
3b:a2:10:c0:2e:98:95:06:4a:22:61:74:6e:f8:a7:db:00:82:
5a:09:26:db:7d:27:7a:6e:5c:16:78:f4:2d:9e:a9:f0:54:64:
6b:97:af:e3:b6:8b:49:67:8b:39:97:ed:c1:2a:b8:c2:f1:54:
3a:7b:20:97:ab:b8:7c:ff:22:8c:2e:68:7a:0f:46:e3:d4:c6:
bf:13:09:24:dc:5d:b1:e4:c0:7b:a0:f1:13:28:d6:77:0e:1c:
61:89:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:13 2025 by rpki-client