Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bM3bfBnY8MDoNrDUC7dP7mO44qA.roa
File: bM3bfBnY8MDoNrDUC7dP7mO44qA.roa (raw, json)
Hash identifier: AL49JK1jtu0zqsCeupUcOGXLjAHM7GnSFgFX4mowUYc=
Subject key identifier: 6C:CD:DB:7C:19:D8:F0:C0:E8:36:B0:D4:0B:B7:4F:EE:63:B8:E2:A0
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019869C3B58676FE8A887D428804EF9F76D4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bM3bfBnY8MDoNrDUC7dP7mO44qA.roa
Signing time: Sat 02 Aug 2025 07:51:30 +0000
ROA not before: Sat 02 Aug 2025 07:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:c3:b5:86:76:fe:8a:88:7d:42:88:04:ef:9f:76:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 2 07:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ccddb7c19d8f0c0e836b0d40bb74fee63b8e2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:14:1c:0b:95:74:5d:1c:1a:07:ef:5c:e7:
ad:c0:e3:80:89:70:84:a9:d3:b2:b7:ee:dc:59:c6:
75:17:ea:c2:36:c5:57:98:c7:ec:b4:bf:78:5b:75:
3c:0d:33:07:c6:af:10:ff:7b:51:22:8a:35:89:42:
fd:8e:63:22:65:e7:5d:c5:d7:01:7b:8f:3e:72:32:
40:91:aa:ce:32:d3:bd:f6:3c:6a:67:67:ed:55:09:
4b:2a:43:6a:f1:49:31:ea:dc:e5:d8:d3:e9:f6:ab:
54:0b:9b:08:5c:3d:b1:9e:6f:f5:fd:3c:7f:06:bf:
ec:e5:a1:8c:70:b8:ec:0b:5d:3f:72:86:92:be:97:
86:91:09:e9:da:6c:f2:af:bb:41:2e:3e:f6:ce:86:
e2:0e:4a:4b:b2:70:df:df:27:25:25:1d:9e:50:af:
57:3e:ea:db:ac:c1:db:3c:fd:84:73:fa:e7:a7:3f:
b6:3d:fc:b1:35:58:ae:64:42:2d:29:6c:06:8f:15:
3c:89:ec:a0:c0:e0:83:1b:f2:7f:e2:69:1c:44:66:
46:d7:7e:08:c4:26:85:ab:63:46:a9:a3:66:6a:64:
2b:8c:fc:84:d0:a4:09:40:57:75:d6:08:ea:fb:ca:
7c:63:6d:19:2e:78:9a:4f:59:ea:c0:b7:c5:d8:ac:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CD:DB:7C:19:D8:F0:C0:E8:36:B0:D4:0B:B7:4F:EE:63:B8:E2:A0
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/bM3bfBnY8MDoNrDUC7dP7mO44qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.57.11.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.58.59.0/24
31.58.71.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
31.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cd:52:27:7c:f7:e7:4f:72:8b:b4:c2:a6:ca:7b:8d:40:d3:
9e:6f:3d:c7:dd:25:f3:0c:20:34:58:9b:52:b5:c2:06:c4:9e:
ff:f8:23:b2:a3:20:40:99:a1:30:b7:26:03:c7:6b:73:c8:be:
22:43:3e:24:ba:b1:6c:34:a8:eb:d7:35:0a:9d:46:2a:0a:f8:
5d:55:dd:7c:a5:90:b5:d7:ef:a6:f0:0e:37:cb:36:8b:1b:e8:
df:21:49:ec:67:2c:4b:e6:cc:2e:d3:63:42:c1:5c:27:60:72:
e8:3e:a5:1c:e5:13:1e:41:fb:b6:c2:fe:8f:08:23:9d:41:03:
8a:00:dc:5f:09:db:3d:97:aa:59:18:93:fa:b4:e4:8c:e3:74:
b3:97:c1:05:04:40:36:8b:da:8b:74:91:89:c8:25:82:cb:ff:
15:62:9a:6b:26:95:ef:82:d5:b7:92:79:17:84:1c:88:52:f3:
76:f9:f6:ec:1b:55:85:b0:75:15:d4:b0:07:19:f3:ec:29:fe:
7d:93:39:47:bd:44:4a:b1:de:4f:97:32:54:54:91:bf:10:d3:
61:72:90:e1:07:27:95:a7:67:45:23:04:81:c2:cf:56:75:5f:
a9:32:bb:72:4b:9c:83:7c:72:5c:65:4f:6a:73:8e:3d:0f:30:
60:8d:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:02 2025 by rpki-client