Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fMvYKQKpraXw9DMRcYxiKM3OcTM.roa
File: fMvYKQKpraXw9DMRcYxiKM3OcTM.roa (raw, json)
Hash identifier: iaGQeSqSteiAFBDwFo9rCc1hts1aHon+ufGp8t3HZnM=
Subject key identifier: 7C:CB:D8:29:02:A9:AD:A5:F0:F4:33:11:71:8C:62:28:CD:CE:71:33
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01984F9A40D7613D128F70CDD00EEBF5D9DE
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fMvYKQKpraXw9DMRcYxiKM3OcTM.roa
Signing time: Mon 28 Jul 2025 05:56:05 +0000
ROA not before: Mon 28 Jul 2025 05:56:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 31.56.107.0/24 maxlen: 24
31.57.14.0/24 maxlen: 24
31.57.99.0/24 maxlen: 24
31.58.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:9a:40:d7:61:3d:12:8f:70:cd:d0:0e:eb:f5:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 28 05:56:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ccbd82902a9ada5f0f43311718c6228cdce7133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:f3:a0:a6:fa:88:71:b1:9a:5e:ea:fc:4a:
3c:55:dc:20:58:9b:81:5e:b7:85:62:a1:e5:8d:53:
28:1b:27:7b:6d:b6:33:20:19:76:7d:19:61:ca:92:
4d:99:34:68:21:6b:bd:24:86:0c:d6:3a:19:86:3e:
9b:d9:80:09:21:5a:f7:6a:7c:ff:bd:0d:47:9a:a6:
94:8f:1a:65:d8:cd:95:80:e1:08:e7:00:53:d5:78:
f1:b6:f8:15:3a:e5:94:9f:28:10:fe:f0:15:5a:05:
42:6b:f9:3b:8e:19:69:f5:ca:1c:ba:82:ea:01:52:
d2:db:5d:14:5e:43:21:52:20:4c:f2:b8:64:57:f8:
b2:8b:4b:3b:ab:d0:d1:ce:00:e4:f7:d0:2e:57:6c:
60:0a:cd:8d:72:68:98:26:31:d4:1f:63:36:65:b6:
5b:d9:04:48:fd:e2:9d:c1:0f:dd:71:46:38:42:3c:
80:96:94:8d:ff:51:cb:12:50:6b:d8:bd:f7:f5:b7:
59:65:7d:e3:a6:63:df:c7:ca:a1:d0:a5:00:a9:a0:
29:66:c7:9a:1c:fa:6e:10:71:3f:fb:b0:7c:28:69:
88:5f:d4:77:6b:49:4c:ba:fb:b7:7f:0a:a3:a3:33:
76:e1:c3:ad:60:4a:5b:bc:7d:74:70:c6:5d:47:ef:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:D8:29:02:A9:AD:A5:F0:F4:33:11:71:8C:62:28:CD:CE:71:33
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/fMvYKQKpraXw9DMRcYxiKM3OcTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.107.0/24
31.57.14.0/24
31.57.99.0/24
31.58.84.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2b:3c:15:da:cf:60:28:93:e9:e1:81:81:8a:10:7e:51:6e:
a0:2d:f5:61:77:1b:42:e8:04:bc:3e:63:0e:ff:0c:c9:d7:a3:
08:9b:8d:65:2a:4c:f2:4a:a1:60:0c:a9:25:20:cd:ec:64:65:
bf:bd:1a:00:4b:ab:54:72:00:96:bc:b2:9c:a4:e9:98:12:92:
b8:8d:41:ea:b4:b0:fd:b9:37:8d:4c:cc:89:da:ae:da:cb:b4:
39:a9:fb:68:42:30:52:50:1c:32:d3:b4:36:d6:df:31:40:ee:
88:c2:a3:2a:ab:7c:70:16:8d:d3:46:1c:c6:4a:cc:95:78:71:
eb:26:0b:b7:e2:ab:f8:f6:5f:46:36:fe:c5:45:3b:b6:be:06:
9e:88:c7:6c:69:52:99:96:d2:32:94:18:26:6d:47:4a:d1:c3:
3a:61:8b:10:da:cc:75:93:be:24:05:09:50:c0:ba:fb:a9:2a:
f4:30:bc:9b:b6:03:57:e7:33:d2:a4:cc:01:75:92:2e:3f:04:
cf:2a:cc:6b:a5:80:9d:00:11:e0:da:31:2f:4a:71:d2:43:f3:
f0:82:71:91:00:c8:10:3e:0c:3b:b3:0b:3a:0f:1e:b2:fa:39:
fd:a7:68:e1:04:74:4d:db:2b:8d:2a:86:7d:6d:12:e9:db:b3:
a1:9b:9d:78
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZhPmkDXYT0Sj3DN0A7r9dneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNzI4MDU1NjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2NiZDgyOTAyYTlhZGE1ZjBmNDMzMTE3MThjNjIyOGNkY2U3MTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzbzoKb6iHGxml7q/Eo8VdwgWJuB
XreFYqHljVMoGyd7bbYzIBl2fRlhypJNmTRoIWu9JIYM1joZhj6b2YAJIVr3anz/
vQ1HmqaUjxpl2M2VgOEI5wBT1XjxtvgVOuWUnygQ/vAVWgVCa/k7jhlp9cocuoLq
AVLS210UXkMhUiBM8rhkV/iyi0s7q9DRzgDk99AuV2xgCs2NcmiYJjHUH2M2ZbZb
2QRI/eKdwQ/dcUY4QjyAlpSN/1HLElBr2L339bdZZX3jpmPfx8qh0KUAqaApZsea
HPpuEHE/+7B8KGmIX9R3a0lMuvu3fwqjozN24cOtYEpbvH10cMZdR++j7wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHzL2CkCqa2l8PQzEXGMYijNznEzMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvZk12WUtRS3ByYVh3OURNUmNZeGlLTTNPY1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHzhrAwQA
HzkOAwQAHzljAwQAHzpUMA0GCSqGSIb3DQEBCwUAA4IBAQCvKzwV2s9gKJPp4YGB
ihB+UW6gLfVhdxtC6AS8PmMO/wzJ16MIm41lKkzySqFgDKklIM3sZGW/vRoAS6tU
cgCWvLKcpOmYEpK4jUHqtLD9uTeNTMyJ2q7ay7Q5qftoQjBSUBwy07Q21t8xQO6I
wqMqq3xwFo3TRhzGSsyVeHHrJgu34qv49l9GNv7FRTu2vgaeiMdsaVKZltIylBgm
bUdK0cM6YYsQ2sx1k74kBQlQwLr7qSr0MLybtgNX5zPSpMwBdZIuPwTPKsxrpYCd
ABHg2jEvSnHSQ/PwgnGRAMgQPgw7sws6Dx6y+jn9p2jhBHRN2yuNKoZ9bRLp27Oh
m514
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:13 2025 by rpki-client