Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa
File: 4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa (raw, json)
Hash identifier: ZgQab93TqT8XuUNyna7Zjv75Gd8+1Mfr5tNmb6ereyU=
Subject key identifier: E1:97:55:04:D6:7F:4B:83:0F:94:40:B2:A7:8B:9A:A0:93:43:9E:83
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01993CF5F412605F6981CF5ECA7CCE9C8475
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa
Signing time: Fri 12 Sep 2025 08:06:15 +0000
ROA not before: Fri 12 Sep 2025 08:06:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56582
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.74.0/24 maxlen: 24
31.169.76.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.79.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.84.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
31.169.95.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
2a00:5740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3c:f5:f4:12:60:5f:69:81:cf:5e:ca:7c:ce:9c:84:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Sep 12 08:06:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1975504d67f4b830f9440b2a78b9aa093439e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d7:c0:c6:5b:ba:2f:4d:b5:0a:f3:33:a1:ed:
2f:63:26:e7:54:8e:da:a0:96:b4:cc:c2:76:1b:04:
56:3f:c8:36:f1:09:bb:97:53:7c:23:bc:1a:65:65:
1a:d7:1b:4d:cd:ff:5c:31:ca:88:44:13:39:ef:3c:
c1:67:05:23:87:fb:62:2d:8c:88:ee:d5:1d:42:a8:
14:16:47:48:23:43:81:38:91:dd:e3:d6:52:93:77:
7a:b8:18:1d:a3:3e:c4:48:f3:d0:e6:71:44:d6:97:
d9:c1:e5:31:78:c0:64:39:99:3d:a9:75:75:17:7e:
b0:fc:5a:5b:fa:e8:22:84:ef:9b:29:76:76:fb:55:
40:7f:38:28:86:8c:bd:dd:83:f2:ab:33:ae:77:94:
16:16:0b:61:c1:01:3c:38:e2:29:60:aa:e0:17:58:
19:f9:91:f2:1e:5f:be:4e:8a:b3:09:12:6e:51:b7:
8f:f2:83:e6:7f:94:1d:86:de:68:bf:14:0f:31:c2:
bb:7b:09:6f:ef:7c:01:94:66:b3:45:80:a6:f8:4a:
64:2e:4c:fc:a8:d5:94:6c:c6:f3:91:f4:2b:35:a5:
4b:b6:30:68:58:d4:1f:c6:2c:27:7d:13:66:9e:0d:
72:d3:ac:e2:03:26:7b:d2:93:aa:de:a0:c9:f9:8b:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:55:04:D6:7F:4B:83:0F:94:40:B2:A7:8B:9A:A0:93:43:9E:83
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.74.0/24
31.169.76.0/22
31.169.81.0-31.169.82.255
31.169.84.0/23
31.169.87.0-31.169.88.255
31.169.90.0/24
31.169.92.0/22
185.33.63.0/24
IPv6:
2a00:5740::/29
Signature Algorithm: sha256WithRSAEncryption
20:19:1d:7c:61:5b:aa:cd:14:3a:7f:e7:54:bd:3c:ba:c7:86:
8e:23:ea:f2:92:de:4c:3c:40:c5:85:93:7b:a6:d4:26:cd:66:
c5:ab:27:6c:c7:a6:7d:76:bf:77:a2:03:b3:83:b4:24:94:e2:
65:b0:2b:fe:d2:69:94:4b:de:14:2c:ea:ec:96:7d:9d:07:01:
3f:86:48:82:41:bb:bb:8d:41:31:8e:26:8b:eb:64:e7:21:40:
4e:25:af:b9:50:bd:8f:14:56:b6:25:29:65:7a:67:83:9a:80:
72:81:fc:67:86:c3:c9:7a:bb:d4:2e:2e:16:9c:cd:8b:4e:ea:
8d:cd:8b:6f:44:7d:d3:db:4c:ba:fa:12:1b:ba:84:9c:52:d3:
9d:b8:3d:1c:dc:3f:17:15:d7:48:bf:c8:a2:7c:3a:60:e3:ae:
83:a8:a8:ea:18:6d:a2:36:51:34:bc:1f:21:39:0a:87:5c:61:
41:f8:05:15:15:2e:0a:b9:7c:94:68:ac:4b:fb:36:cf:08:00:
87:0e:2f:7b:cc:f4:3b:f9:bc:8d:94:dc:f0:7e:00:e2:ed:8b:
42:ee:28:2d:27:a1:ed:ea:b5:da:10:25:d4:63:eb:2b:74:45:
66:f7:e1:2e:18:28:f2:11:2b:22:79:67:38:05:ce:48:f9:67:
ea:c6:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:04 2025 by rpki-client