Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wru0fo4rc8U-MTbzkj_ZfA3HBUQ.roa
File: wru0fo4rc8U-MTbzkj_ZfA3HBUQ.roa (raw, json)
Hash identifier: CBfpWn5OamV5sPhS06Wh9YQJD8qQawfuoyvwVsS5/38=
Subject key identifier: C2:BB:B4:7E:8E:2B:73:C5:3E:31:36:F3:92:3F:D9:7C:0D:C7:05:44
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198D5D779A54C738B6D29F7E56549E45CC9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wru0fo4rc8U-MTbzkj_ZfA3HBUQ.roa
Signing time: Sat 23 Aug 2025 07:32:05 +0000
ROA not before: Sat 23 Aug 2025 07:32:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 31.59.212.0/24 maxlen: 24
94.183.160.0/24 maxlen: 24
94.183.181.0/24 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.239.0/24 maxlen: 24
217.60.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:d7:79:a5:4c:73:8b:6d:29:f7:e5:65:49:e4:5c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 23 07:32:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2bbb47e8e2b73c53e3136f3923fd97c0dc70544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:9a:5c:9d:10:42:83:55:27:20:53:33:11:
72:0a:eb:4c:94:c9:1e:28:82:e5:14:88:c5:5c:76:
ae:05:ea:1d:fc:bf:6b:86:8d:8e:87:42:63:54:41:
75:fd:a2:8b:d6:0a:38:a2:ff:ef:77:76:36:d2:29:
f7:af:e5:e4:34:6c:d2:1d:2c:67:51:33:f0:72:a0:
46:11:eb:b3:20:36:cc:ec:38:a7:db:91:5d:b3:49:
fb:f0:c2:8c:e4:44:02:ac:37:10:b8:cf:62:52:16:
5f:d0:6f:b1:6a:8c:5f:49:97:ea:8b:64:7e:78:de:
fb:b7:57:9e:18:5c:25:0e:56:72:62:13:fb:79:97:
05:4c:db:38:76:48:fb:ff:11:81:65:4d:dc:bb:68:
81:50:b0:fd:69:f3:c4:8a:9c:5f:0a:e2:ac:2b:26:
2b:f6:29:48:40:e1:e6:21:71:45:72:20:f4:35:22:
e7:43:bc:b5:38:b5:9a:59:0d:0a:2d:0d:f7:cd:87:
4b:92:be:24:4e:05:69:79:c5:0c:2c:6b:63:8b:da:
68:ee:e0:74:22:ff:7b:55:2c:92:3e:c7:35:22:f0:
48:f9:33:9c:db:dd:e4:46:ab:02:ad:31:40:03:57:
d6:82:72:1b:58:49:df:b6:27:c6:52:77:6c:3d:d3:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BB:B4:7E:8E:2B:73:C5:3E:31:36:F3:92:3F:D9:7C:0D:C7:05:44
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/wru0fo4rc8U-MTbzkj_ZfA3HBUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.212.0/24
94.183.160.0/24
94.183.181.0/24
217.60.12.0/22
217.60.24.0/22
217.60.60.0/22
217.60.239.0/24
217.60.246.0/23
Signature Algorithm: sha256WithRSAEncryption
07:16:9f:10:1f:5c:69:0e:f2:6c:af:15:dc:6a:ba:36:f0:b4:
32:96:54:45:57:9f:f4:40:b5:b1:24:b6:e9:ac:36:e6:6c:6c:
e4:5e:55:17:dd:c5:b8:e6:31:31:c0:d9:55:a1:ea:f9:e5:a9:
12:cf:4c:d6:78:b0:de:d1:d3:eb:78:99:7d:ce:fe:b5:cc:29:
e5:9e:32:4e:64:69:d6:96:9e:fa:77:e9:4c:64:4f:3b:21:32:
f9:54:43:b8:98:95:20:8c:6c:16:c5:5b:50:b8:60:36:21:36:
20:8a:4b:c6:47:f0:74:be:7b:0b:b3:e4:d1:7b:28:20:1b:3f:
65:51:0f:b2:5e:5c:c2:6e:1c:73:14:87:e4:de:0e:39:89:03:
62:9f:a3:88:84:a6:74:1a:69:41:8f:2b:c2:5a:c0:e4:37:7c:
c1:c6:59:a2:3c:e2:73:05:1c:86:4b:7f:e4:c2:2b:b3:6f:3c:
de:f1:30:f9:bf:ad:5c:df:2a:f1:fa:95:aa:88:45:63:a4:94:
c1:45:7f:af:e5:96:b5:21:84:30:cc:a2:53:04:f3:32:d3:e9:
5f:c6:cd:76:0f:71:53:57:b7:c0:10:3c:81:e6:67:a1:14:34:
88:7d:7a:f3:fc:0c:b1:25:f7:65:b1:fd:1b:09:68:71:29:47:
cf:fa:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:56 2025 by rpki-client