Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q33rro5tSaPEhlQYkNE8sOY9rdE.roa
File: Q33rro5tSaPEhlQYkNE8sOY9rdE.roa (raw, json)
Hash identifier: MRgnn58JyH/tnsWz2+VA3ikJNR+f37ZQccOia8j1ybU=
Subject key identifier: 43:7D:EB:AE:8E:6D:49:A3:C4:86:54:18:90:D1:3C:B0:E6:3D:AD:D1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01985F1D4458DA1825F90440BB33CEFA67EF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q33rro5tSaPEhlQYkNE8sOY9rdE.roa
Signing time: Thu 31 Jul 2025 06:13:30 +0000
ROA not before: Thu 31 Jul 2025 06:13:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 31.56.47.0/24 maxlen: 24
31.56.180.0/24 maxlen: 24
31.57.59.0/24 maxlen: 24
31.57.229.0/24 maxlen: 24
31.58.101.0/24 maxlen: 24
31.58.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:1d:44:58:da:18:25:f9:04:40:bb:33:ce:fa:67:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 31 06:13:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=437debae8e6d49a3c486541890d13cb0e63dadd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:22:b5:ca:06:77:e1:4b:58:5d:0d:59:be:
af:1d:cb:18:ed:59:c7:f9:20:8f:22:2c:ea:bd:22:
d3:e0:44:2d:6f:4e:e1:a4:03:3b:8d:24:52:41:0c:
48:4c:6b:0f:8f:8a:2f:d6:fd:d5:3e:79:70:05:59:
c8:0b:3d:4f:b1:2a:b1:d7:ef:5c:f0:47:4c:3b:18:
06:6e:3f:5b:09:b9:60:ff:14:d8:a8:39:3b:e9:5f:
36:37:0e:c7:d2:4e:96:64:8f:4e:b0:bb:6b:1e:60:
34:23:9a:55:18:f9:86:e9:88:0b:3c:43:5f:71:29:
23:3d:d7:81:e5:58:24:f8:f6:14:8f:3f:c3:b1:77:
a0:a4:0c:87:e4:f0:db:c7:80:56:ec:78:8d:1c:89:
2e:ec:af:8b:70:6a:91:0f:2c:7c:f6:14:43:41:f0:
c6:dd:d3:7d:5f:33:4d:89:b5:a0:70:0d:08:c8:1c:
f1:7e:9e:a8:35:ac:dd:5a:b9:40:a6:79:97:9b:ca:
0c:43:6c:c5:67:ad:1b:4d:30:8b:fb:30:3e:4e:03:
b5:16:d8:8b:d4:82:0b:85:92:3a:8c:17:57:02:9e:
70:e6:0d:b0:65:e0:7a:cb:95:e0:c3:ff:0b:b2:7e:
45:4c:b9:be:6a:3a:52:98:4e:7b:03:d6:cc:46:c3:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:EB:AE:8E:6D:49:A3:C4:86:54:18:90:D1:3C:B0:E6:3D:AD:D1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Q33rro5tSaPEhlQYkNE8sOY9rdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.47.0/24
31.56.180.0/24
31.57.59.0/24
31.57.229.0/24
31.58.101.0/24
31.58.221.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d1:7b:7e:e8:f8:62:86:4d:a9:c3:e1:96:cb:22:a5:8e:8c:
bc:d6:81:41:7f:88:bc:c0:75:d0:5e:e3:ab:32:6a:d6:ff:b9:
60:d1:45:94:d3:c3:a4:e5:aa:61:2c:fe:40:69:68:df:ee:e1:
23:65:1b:95:df:43:7a:1c:21:c7:d1:fd:86:7d:d6:9d:f9:51:
6e:14:df:4d:6f:65:49:53:50:de:12:77:c7:a1:71:76:c2:aa:
d5:a9:35:1c:e0:bb:19:54:10:93:21:41:6d:a0:8e:f7:51:c7:
f1:4c:73:47:81:73:1c:ca:7c:ac:53:80:8f:74:05:3c:26:b8:
77:41:86:fb:d9:1c:36:1d:cf:2b:17:10:3d:80:8b:42:8f:6f:
9c:fe:2a:0a:14:f1:f6:e9:b0:93:fe:7a:a1:77:aa:3c:3f:2e:
e5:fe:74:e0:7f:62:50:a5:28:47:c4:5e:ef:b2:0f:2a:57:6c:
db:f9:6a:94:5b:0b:4d:fd:13:9e:45:bd:c0:39:45:2e:e3:7d:
5c:74:14:30:5f:b0:fc:bb:ff:23:9b:94:fc:02:f8:8f:1b:7e:
70:1a:f3:26:67:4f:c0:6a:92:7d:97:4f:50:59:a6:66:21:13:
df:3e:c3:2c:96:dd:d1:98:b0:56:7c:de:f8:c2:f0:48:49:bb:
b7:c4:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:54:18 2025 by rpki-client