Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_DwVlBMk6fF7GgXuFedKwI1s-9M.roa
File: _DwVlBMk6fF7GgXuFedKwI1s-9M.roa (raw, json)
Hash identifier: dEOGJp3p9BMCkBgk+9FlF3Zv2DwB4Q4BdXYJkX65yF0=
Subject key identifier: FC:3C:15:94:13:24:E9:F1:7B:1A:05:EE:15:E7:4A:C0:8D:6C:FB:D3
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01979C17F836E2A07D30CB01505ED727EEB9
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_DwVlBMk6fF7GgXuFedKwI1s-9M.roa
Signing time: Mon 23 Jun 2025 09:21:45 +0000
ROA not before: Mon 23 Jun 2025 09:21:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31362
IP address blocks: 31.14.43.0/24 maxlen: 24
31.14.53.0/24 maxlen: 24
31.14.54.0/24 maxlen: 24
37.156.245.0/24 maxlen: 24
86.104.124.0/24 maxlen: 24
89.34.5.0/24 maxlen: 24
89.34.93.0/24 maxlen: 24
89.35.55.0/24 maxlen: 24
89.36.19.0/24 maxlen: 24
89.36.92.0/24 maxlen: 24
89.41.63.0/24 maxlen: 24
89.42.14.0/24 maxlen: 24
89.42.35.0/24 maxlen: 24
89.42.214.0/24 maxlen: 24
89.44.104.0/24 maxlen: 24
185.99.91.0/24 maxlen: 24
188.240.12.0/24 maxlen: 24
217.19.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:17:f8:36:e2:a0:7d:30:cb:01:50:5e:d7:27:ee:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jun 23 09:21:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc3c15941324e9f17b1a05ee15e74ac08d6cfbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:00:43:5c:cb:df:ef:55:c4:07:b4:45:64:5a:
ee:f5:c8:b5:c6:c9:fb:a4:74:54:28:e1:07:d6:92:
f2:ee:a1:07:ee:3e:f7:92:4f:63:24:a1:3a:9c:04:
5f:a4:6c:4c:a5:08:f4:06:37:7c:19:d9:c9:85:47:
06:ac:3c:c6:3a:6a:b0:c0:dd:1c:f1:7a:93:1a:e4:
93:5b:4d:3a:41:c3:b5:88:50:3c:50:7b:f7:07:2f:
6c:ae:ae:17:da:d4:51:b1:41:10:5b:e8:b1:35:39:
ae:3f:a1:40:d2:77:99:15:41:74:ce:1a:5f:3c:80:
a6:90:05:48:69:e2:fe:35:ac:c1:21:f4:a0:41:9e:
98:52:63:89:35:09:71:03:f3:2c:e5:64:0a:16:da:
1a:f5:2a:61:22:59:6f:59:a6:59:05:5e:e3:31:ee:
01:1d:a8:f4:68:cc:3a:e5:74:15:cf:48:f1:d0:38:
3d:af:fa:f8:3e:f2:33:2d:ae:0f:6f:3c:ca:a8:58:
13:55:58:8d:26:68:bf:d0:fa:b6:81:bb:ad:1e:66:
c3:b6:9c:d8:15:eb:24:2f:b5:b9:1e:f1:4d:32:f6:
ad:bd:08:0d:a3:00:82:5d:9d:d8:87:34:a3:9d:92:
84:2d:27:ea:f1:52:f2:d5:52:4d:d0:39:75:09:35:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:15:94:13:24:E9:F1:7B:1A:05:EE:15:E7:4A:C0:8D:6C:FB:D3
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/_DwVlBMk6fF7GgXuFedKwI1s-9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.43.0/24
31.14.53.0-31.14.54.255
37.156.245.0/24
86.104.124.0/24
89.34.5.0/24
89.34.93.0/24
89.35.55.0/24
89.36.19.0/24
89.36.92.0/24
89.41.63.0/24
89.42.14.0/24
89.42.35.0/24
89.42.214.0/24
89.44.104.0/24
185.99.91.0/24
188.240.12.0/24
217.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2a:f0:d6:08:21:a6:35:73:3f:0b:1d:97:ca:a2:0b:5a:ce:
1b:9c:86:e2:e0:d3:1c:5e:95:09:05:01:70:99:25:4e:79:9e:
bb:1f:47:6d:a8:1c:44:bc:f9:66:13:c3:f6:d3:4c:ab:c6:01:
73:c7:a8:36:4c:16:63:30:a5:f5:73:12:90:10:d0:c1:bb:7f:
8b:c4:7e:40:14:48:35:79:94:d3:e9:fe:48:39:58:65:a4:0d:
05:85:05:9d:d3:70:2f:8b:07:be:37:58:a3:37:2f:ff:28:ef:
24:05:5b:fe:23:5d:e0:43:28:f9:2c:8b:36:53:1e:a6:76:5f:
c4:39:e8:95:e0:a4:9f:43:79:23:da:5c:04:9e:10:2b:ff:36:
e6:f1:2f:b4:b6:d0:16:00:e1:6b:b4:f8:c5:1d:95:fd:25:cd:
02:76:51:6f:19:98:39:8d:a6:7d:af:7b:2a:05:5d:82:e8:de:
e3:a4:76:f3:b4:33:cf:43:c6:5e:a0:12:f1:fc:8e:bc:5d:ce:
76:b0:62:19:13:d1:23:16:42:fb:92:d0:ff:d2:3f:f0:ce:e6:
e2:7d:31:6e:76:c5:8f:cc:bf:1e:db:43:b0:de:f6:75:d9:b7:
55:19:4d:c3:ca:42:ce:8c:15:62:f1:36:13:58:e4:d5:86:5d:
78:cc:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:18:19 2025 by rpki-client