Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Az-NpYnnu4tc16vQwBmI8i4Gpu0.roa
File: Az-NpYnnu4tc16vQwBmI8i4Gpu0.roa (raw, json)
Hash identifier: LxdPqZIj0UUiEyPzyNn5j8C1iAqAMoDxAitlHg/gDxw=
Subject key identifier: 03:3F:8D:A5:89:E7:BB:8B:5C:D7:AB:D0:C0:19:88:F2:2E:06:A6:ED
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 019A2BFB077DD9629C539D9668975B29A5B5
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Az-NpYnnu4tc16vQwBmI8i4Gpu0.roa
Signing time: Tue 28 Oct 2025 18:01:03 +0000
ROA not before: Tue 28 Oct 2025 18:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201776
IP address blocks: 31.40.132.0/24 maxlen: 24
31.40.137.0/24 maxlen: 24
31.40.138.0/24 maxlen: 24
31.40.140.0/24 maxlen: 24
31.40.143.0/24 maxlen: 24
31.40.151.0/24 maxlen: 24
31.40.153.0/24 maxlen: 24
31.40.162.0/23 maxlen: 23
31.40.165.0/24 maxlen: 24
31.40.167.0/24 maxlen: 24
31.40.168.0/23 maxlen: 23
31.40.170.0/23 maxlen: 23
31.40.172.0/23 maxlen: 23
31.40.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:fb:07:7d:d9:62:9c:53:9d:96:68:97:5b:29:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Oct 28 18:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=033f8da589e7bb8b5cd7abd0c01988f22e06a6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:f6:a2:06:b8:9a:e1:d6:d8:b3:1f:f5:be:
93:48:03:a1:2c:b1:29:51:1a:09:7a:e3:cf:b3:06:
90:22:e8:41:11:76:f8:b2:ea:8a:09:11:95:9b:e2:
85:02:ef:05:4c:a5:c0:ba:60:46:c1:04:42:a0:2a:
c5:66:7a:bc:2a:9d:ca:c5:2f:5e:9f:52:ed:a2:e8:
65:8d:a5:af:a6:6a:94:4a:33:e1:c0:5c:fc:d7:72:
63:ec:05:49:f8:2a:d9:19:aa:da:66:07:e3:d3:47:
c7:5c:c4:0f:4b:c1:41:18:4a:69:3b:3b:cf:23:8b:
ef:ae:3c:46:4b:5c:80:60:79:b2:b6:dd:90:c8:e8:
75:ab:75:48:a1:06:a9:85:e7:15:7b:bc:a2:2d:8b:
5d:03:5d:1f:53:21:5d:a7:b5:b6:9f:7d:0b:4a:f4:
f6:cb:aa:ec:cd:0b:b0:8e:45:af:ff:59:28:e7:9a:
bb:2b:1e:5e:25:51:2a:21:ba:4d:7f:ee:28:53:54:
19:37:31:d3:4f:28:9c:90:3a:75:9b:e2:d9:92:2e:
9a:ad:b2:de:5a:10:c6:45:cb:64:a2:29:d3:60:90:
07:13:1d:bc:84:45:0f:ef:34:ec:fe:a6:b1:9c:11:
a0:f5:49:a6:37:96:86:8f:63:62:d1:46:d1:bc:b8:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3F:8D:A5:89:E7:BB:8B:5C:D7:AB:D0:C0:19:88:F2:2E:06:A6:ED
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Az-NpYnnu4tc16vQwBmI8i4Gpu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.132.0/24
31.40.137.0-31.40.138.255
31.40.140.0/24
31.40.143.0/24
31.40.151.0/24
31.40.153.0/24
31.40.162.0/23
31.40.165.0/24
31.40.167.0-31.40.173.255
31.40.178.0/23
Signature Algorithm: sha256WithRSAEncryption
90:c6:7a:03:99:e3:59:d1:e7:c1:38:7e:05:85:8e:da:10:a7:
ea:e4:49:1a:c3:d5:c6:ad:b1:83:6e:f2:cc:f8:31:2f:fa:8b:
6b:3e:8a:1e:0b:b6:a7:42:e4:e4:51:aa:a4:eb:d2:6f:b5:2f:
6d:9d:2f:23:63:8d:2a:f1:05:a0:c5:fb:7c:b1:ae:55:1c:34:
5b:fd:31:41:65:82:6a:3a:ba:38:af:9c:ad:ea:10:d0:56:f6:
c5:6b:7b:17:4e:25:58:1e:e7:a8:99:b6:00:88:d6:07:c8:8e:
6c:d7:f1:99:16:3e:29:5a:86:01:da:3f:76:62:ef:fc:c3:38:
76:fe:e2:a7:4c:31:ae:1d:52:9a:07:5d:ac:35:62:8f:3b:ea:
36:61:24:7a:49:f7:e6:62:9c:9d:8e:71:ec:16:e7:6f:e6:ae:
fe:f6:6f:10:1b:3e:4f:df:b8:b1:98:00:fa:48:aa:02:40:e7:
2e:3a:64:54:99:2a:4b:0e:6d:3e:85:39:0a:4f:ca:fe:f6:16:
fd:29:a4:25:5a:3f:2d:80:73:95:c5:25:10:ca:67:0b:60:94:
c4:2a:26:a2:34:5c:9f:50:56:a0:8f:f2:c3:a4:9d:5e:66:1b:
97:88:0e:e3:62:44:b2:5f:2d:af:32:27:e1:47:1f:06:09:63:
68:b7:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:55:20 2025 by rpki-client