Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/0lBTbrNxcBxtFDqi-kG3s7BY5QM.roa
File: 0lBTbrNxcBxtFDqi-kG3s7BY5QM.roa (raw, json)
Hash identifier: uWKdjjAGRw+F85WNEgjagjHLY4/q0TyIPuk5/f10s90=
Subject key identifier: D2:50:53:6E:B3:71:70:1C:6D:14:3A:A2:FA:41:B7:B3:B0:58:E5:03
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 0197782592D04E7C7D195D901E89A13DBA6B
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/0lBTbrNxcBxtFDqi-kG3s7BY5QM.roa
Signing time: Mon 16 Jun 2025 09:50:17 +0000
ROA not before: Mon 16 Jun 2025 09:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:25:92:d0:4e:7c:7d:19:5d:90:1e:89:a1:3d:ba:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jun 16 09:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d250536eb371701c6d143aa2fa41b7b3b058e503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:7e:0b:a4:ea:9a:be:27:c6:a0:09:82:38:
bd:3d:5e:2d:79:ac:25:50:11:e4:63:b1:2e:02:18:
00:92:2b:92:b5:86:0c:fa:c6:fe:2b:e7:f8:a0:ff:
e9:da:35:81:e0:d4:24:53:1c:6a:05:f0:b5:c9:9d:
b4:8e:02:e5:ca:dc:8e:41:98:10:fc:1c:ed:f5:b6:
27:20:99:d0:cd:67:13:12:83:bb:8e:1f:e7:d5:d4:
2e:a3:55:69:d6:f4:ab:7e:97:df:42:7a:5b:4e:04:
2c:72:31:b1:16:8d:e8:ac:d9:10:03:a1:5d:0f:4d:
e5:9b:d9:26:1a:41:0e:65:32:0c:74:9a:78:b7:ed:
5c:9f:64:0e:6b:ea:72:5a:19:57:86:6d:dd:5b:3e:
5a:85:ea:2b:69:ac:c3:cc:82:e1:da:10:6f:1d:e5:
d2:cf:33:af:eb:d1:69:57:43:2b:68:6e:e5:52:f1:
0a:35:e9:29:a8:e3:99:69:64:99:0f:60:73:a0:e2:
4c:6f:3b:7a:60:36:ff:57:0a:39:ef:b7:fc:0b:2a:
2f:59:7a:ef:ca:12:e6:a1:17:f5:6e:a7:67:b3:6c:
e4:66:3e:c5:e9:15:3a:c3:9a:d4:e2:e7:e4:10:95:
2f:98:7c:59:0b:0f:ca:fa:dd:39:57:c0:61:53:6b:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:50:53:6E:B3:71:70:1C:6D:14:3A:A2:FA:41:B7:B3:B0:58:E5:03
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/0lBTbrNxcBxtFDqi-kG3s7BY5QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.79.255
31.169.81.0-31.169.82.255
31.169.84.0/23
31.169.87.0-31.169.88.255
31.169.90.0/24
31.169.92.0-31.169.94.255
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c1:59:62:b4:ae:14:f7:87:d1:18:b5:22:51:f0:57:1c:1b:
f5:2a:17:b2:01:c7:07:cd:81:4b:2a:d8:61:c7:85:f3:46:b5:
4a:ea:e0:c2:29:04:84:b3:7b:b3:c1:73:e9:98:10:a8:e5:67:
ea:40:a6:2c:65:51:48:c4:41:ef:bd:e2:e7:83:eb:8e:2a:78:
53:92:ee:71:0c:8a:ef:40:9f:fa:89:a9:e6:3f:86:e1:bf:32:
71:b8:8a:ca:53:39:a8:a5:1a:0e:92:42:50:6d:a0:f6:54:d1:
fa:39:1d:bf:8d:be:4b:23:58:17:25:9f:7c:64:6f:7e:b4:77:
df:54:a6:22:d3:fc:49:b5:1a:a2:69:59:87:32:06:3f:40:3b:
c5:e5:8e:ed:a4:f5:c7:cf:e6:d4:85:30:b8:b0:14:3f:3a:f2:
42:ae:2a:5d:5d:5c:11:e1:e5:6c:65:6d:7a:34:86:4c:76:c1:
0c:e0:73:e7:fc:47:a5:38:c1:a2:4d:51:14:32:59:56:58:32:
bd:5d:fc:db:80:b4:c9:77:f8:09:e0:34:df:cc:7a:c5:f5:7c:
da:e7:40:62:1b:f4:ea:27:07:8a:db:3b:9e:cc:37:c0:bd:f8:
cf:88:cb:71:bf:44:86:d8:af:6e:71:41:c0:de:cd:b1:1b:15:
8c:86:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:26:11 2025 by rpki-client