Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EQa8dquixb3wiJGZ1jhTf2iwpIs.roa
File: EQa8dquixb3wiJGZ1jhTf2iwpIs.roa (raw, json)
Hash identifier: 62HytYVSslelH2/uKYnKJbSnlb7X8Txl1QptpeBx6lQ=
Subject key identifier: 11:06:BC:76:AB:A2:C5:BD:F0:88:91:99:D6:38:53:7F:68:B0:A4:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019749473DBD862090AC1A1EF78D86A8D306
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EQa8dquixb3wiJGZ1jhTf2iwpIs.roa
Signing time: Sat 07 Jun 2025 07:24:54 +0000
ROA not before: Sat 07 Jun 2025 07:24:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.200.0/24 maxlen: 24
31.58.147.0/24 maxlen: 24
31.59.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:47:3d:bd:86:20:90:ac:1a:1e:f7:8d:86:a8:d3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 7 07:24:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1106bc76aba2c5bdf0889199d638537f68b0a48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:26:9d:6a:08:74:d8:61:eb:bd:83:04:fc:
85:09:d4:a5:2c:67:14:2c:c8:81:15:8a:70:4f:f9:
36:16:49:21:d1:46:56:15:db:d4:ab:e0:d4:ec:c3:
ff:1d:ba:07:e8:82:8f:c2:1a:85:28:31:f8:c7:07:
ad:3c:38:a8:d2:5c:47:1a:ad:b1:54:e3:91:93:0f:
d1:4d:04:e4:f4:6f:ab:66:fe:c1:04:51:3d:5d:f9:
c0:ad:e1:98:d1:e7:3b:a0:2d:ea:81:3b:42:30:c6:
f2:ed:cf:9e:3a:b8:19:01:17:6d:3b:5d:40:9d:a9:
b9:ed:72:8e:42:0d:46:af:a5:e4:02:7a:39:1a:de:
4c:ed:80:a5:95:f5:f7:5b:31:2d:65:0d:27:32:8f:
e3:a9:c4:d3:3d:34:bd:56:4a:ac:8a:1b:8f:6c:a5:
8b:f4:45:58:2c:ed:5f:8c:5b:45:a7:c7:c9:7d:17:
6d:c3:77:54:fa:5d:9e:4a:9f:9b:f5:0e:44:84:3f:
29:50:c8:00:fa:08:92:be:88:1b:1a:01:86:64:11:
dd:fc:d5:4e:f1:47:27:42:ce:26:1b:89:a6:e6:35:
52:46:fe:7b:1e:d5:90:07:75:71:7e:5b:62:40:0e:
34:cc:7e:f4:99:1a:33:31:16:7a:85:28:b0:85:fc:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:06:BC:76:AB:A2:C5:BD:F0:88:91:99:D6:38:53:7F:68:B0:A4:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EQa8dquixb3wiJGZ1jhTf2iwpIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.57.131.0/24
31.57.150.0/24
31.57.200.0/24
31.58.147.0/24
31.59.136.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b5:ff:eb:c9:02:aa:7d:db:4d:33:00:d6:32:4f:4b:d7:6a:
47:c6:78:9d:89:ec:80:23:a1:3b:bd:f5:7c:e6:df:cd:ae:f0:
87:48:73:03:af:a8:fa:f2:df:c6:67:49:08:db:ef:3c:db:73:
90:ac:e7:fa:39:24:f0:ae:31:e7:ee:b2:b5:6f:20:0f:d8:66:
5b:58:9d:b9:8b:ee:3d:55:cb:3c:21:86:4b:67:d9:b1:b0:60:
68:99:2e:74:b8:e7:6a:f7:2e:24:48:e8:12:5a:01:44:f7:37:
40:74:a6:15:a7:19:83:4a:dd:29:0c:8a:00:5f:43:22:a8:dc:
25:5d:57:ff:8c:2c:d8:bf:ec:dc:2d:d8:0e:9d:c9:d4:dd:9d:
cc:ee:78:13:23:f0:8c:90:6e:57:ac:ae:04:58:fb:85:cb:f9:
43:96:a6:84:71:81:2d:3f:2b:75:b0:e3:e3:a8:87:c8:87:57:
fb:3a:b0:50:1c:07:88:35:27:dd:a0:84:b6:d3:c0:a8:5b:42:
5f:64:57:f8:51:ef:7f:4e:a1:58:62:d4:8d:43:68:be:94:34:
92:f4:b2:9d:25:cd:b7:9a:f1:86:20:3e:e5:a0:9e:d2:71:b7:
ac:1d:5d:ad:de:ec:0c:4f:ae:4c:ad:f5:9f:67:cf:b4:ff:3f:
dc:c7:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:31 2025 by rpki-client