Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/x31dt52Z2g3npIwXpqoqbTf1V5E.roa
File: x31dt52Z2g3npIwXpqoqbTf1V5E.roa (raw, json)
Hash identifier: Bh10rXSNlLkfDuHXrFhguJuFLCsObiJGqtV4BpaE0Z8=
Subject key identifier: C7:7D:5D:B7:9D:99:DA:0D:E7:A4:8C:17:A6:AA:2A:6D:37:F5:57:91
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 0198791D2E387638E25ADD589A3A90A204C0
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/x31dt52Z2g3npIwXpqoqbTf1V5E.roa
Signing time: Tue 05 Aug 2025 07:23:32 +0000
ROA not before: Tue 05 Aug 2025 07:23:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5413
IP address blocks: 185.144.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:1d:2e:38:76:38:e2:5a:dd:58:9a:3a:90:a2:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Aug 5 07:23:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c77d5db79d99da0de7a48c17a6aa2a6d37f55791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:0f:d9:3c:49:2c:43:08:6e:e8:25:67:94:
39:cc:c0:3a:d9:73:a4:ee:b4:19:77:1e:4a:f0:54:
d4:4e:10:2b:3a:db:69:8f:0c:9b:07:1c:20:2d:0f:
84:a7:4a:66:e9:a8:07:61:64:51:54:cc:fb:cd:56:
fb:79:9f:6f:59:77:7b:b2:7f:45:37:57:6a:3c:14:
d5:3a:89:09:eb:72:e5:3e:68:75:59:81:67:8e:8f:
26:a7:73:38:73:22:4e:94:dd:27:31:75:dd:c7:5c:
1b:cb:32:a7:06:e3:4f:ab:3c:1b:a9:55:c5:79:28:
be:ee:69:d0:1d:51:31:c2:f3:cf:39:82:c8:63:e1:
fe:89:9a:4f:6b:df:2c:e1:d4:aa:f4:ce:83:bb:b2:
5a:ea:a8:7b:12:f9:94:6d:cd:04:a9:a0:93:5f:5c:
72:06:bd:52:2a:3c:7e:14:9c:69:1e:99:01:56:8d:
fa:e0:8f:b6:53:64:2f:5a:12:8c:cd:94:1b:98:8b:
af:43:e3:a5:2b:22:c9:de:29:93:23:67:ae:6b:53:
6f:dc:7a:24:b1:b4:0a:43:90:03:16:6c:ad:99:5e:
9f:5f:7d:09:c1:d8:c0:34:83:2a:06:a5:53:6d:ae:
a1:df:5d:97:d4:52:68:3c:aa:64:59:1b:45:df:c9:
59:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7D:5D:B7:9D:99:DA:0D:E7:A4:8C:17:A6:AA:2A:6D:37:F5:57:91
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/x31dt52Z2g3npIwXpqoqbTf1V5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.110.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:33:4c:90:37:eb:61:d1:2c:61:55:7c:e8:6f:b0:e4:c6:e2:
ad:15:e1:5f:89:be:b0:44:25:61:7e:04:7f:16:e7:78:a7:e1:
a9:fa:ed:c3:5e:13:9f:08:99:ae:5e:37:5b:53:a1:6b:7d:c8:
a2:17:e2:52:ae:67:8a:f0:69:ee:31:d5:16:0b:88:09:35:9f:
12:df:f6:d4:5f:1c:3f:80:3b:15:58:cb:50:ef:1d:52:c0:90:
3b:a9:44:3b:6c:13:85:c8:00:19:be:2c:71:28:79:8f:cc:a8:
bd:e1:74:0a:54:e1:e8:ea:f3:3e:2e:c9:3e:05:70:2a:a0:ab:
b0:bd:11:87:90:1b:7d:e3:46:ed:ce:88:94:6c:b9:65:71:d3:
a9:ea:91:a8:75:aa:d0:51:7d:1a:63:87:7d:0e:73:7b:46:55:
44:1e:44:27:26:6a:9b:4f:ff:25:c6:83:25:af:dc:1f:d5:ea:
6e:63:e0:f8:3f:17:88:18:cf:5e:b8:dc:6e:94:e1:b6:0f:b4:
a4:54:28:73:b0:4b:2e:31:28:4d:c0:28:74:a1:cb:b7:6c:51:
fb:e1:07:bc:59:d7:e7:ec:8a:d8:d7:0b:38:0d:d3:a7:03:7a:
50:20:1f:8c:ea:7d:5e:3e:ac:c9:1b:af:e8:44:2c:3b:35:59:
25:93:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:06 2025 by rpki-client