Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vGyvAC6wPVw-E0kCEuVdKPX6mTs.roa
File: vGyvAC6wPVw-E0kCEuVdKPX6mTs.roa (raw, json)
Hash identifier: 5PKqaxMG92RaJl/1i8cZeNdf5d4nuic6p09Wp/SGtas=
Subject key identifier: BC:6C:AF:00:2E:B0:3D:5C:3E:13:49:02:12:E5:5D:28:F5:FA:99:3B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01986BC14BF9FDC92CE9BD28FAF8A1EA5AFA
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vGyvAC6wPVw-E0kCEuVdKPX6mTs.roa
Signing time: Sat 02 Aug 2025 17:08:06 +0000
ROA not before: Sat 02 Aug 2025 17:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 31.56.33.0/24 maxlen: 24
31.56.160.0/21 maxlen: 24
31.57.202.0/24 maxlen: 24
31.57.203.0/24 maxlen: 24
31.59.116.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6b:c1:4b:f9:fd:c9:2c:e9:bd:28:fa:f8:a1:ea:5a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 2 17:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc6caf002eb03d5c3e13490212e55d28f5fa993b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:60:ba:80:36:6c:ec:b7:4d:eb:9d:ab:3a:
75:73:33:18:bf:d1:4a:ec:0d:ff:7e:0c:1e:ac:92:
7b:3a:63:25:d2:4b:1f:fe:40:33:93:ac:3a:a8:3e:
6a:dd:1e:50:e5:fb:da:fe:72:0c:98:fd:ee:31:6e:
5e:06:3f:9a:a5:be:f1:64:5a:4a:8b:f6:f3:fd:5e:
72:23:d0:2a:24:ee:1b:5b:59:3f:88:1a:c9:58:4b:
1e:5a:20:62:57:96:df:7f:15:e9:f5:35:83:7b:f2:
2d:08:04:04:f7:c5:0f:10:fe:92:6d:3d:70:15:86:
1a:7e:81:ce:8b:7e:ec:9e:70:6a:1d:0b:24:71:23:
5e:3b:b2:1e:5c:92:5e:5e:06:de:92:55:f3:e8:5b:
f6:3e:c4:aa:10:0f:b6:7f:6c:8f:78:7f:b5:69:a3:
e2:07:5f:3e:f5:99:e8:93:6d:25:be:fa:92:6d:35:
0e:13:0d:a2:84:32:28:08:da:ad:ec:b3:84:6f:1b:
26:23:bc:4f:28:3f:f5:b7:57:12:2f:69:bd:5d:a5:
16:95:9a:ed:30:11:04:e9:a7:64:62:ea:f2:f1:c8:
fa:b7:f6:c2:0b:6d:1e:b3:6f:3c:c6:9d:dc:ce:99:
0a:2a:24:43:52:ca:9f:2f:ae:3b:5a:14:d9:71:03:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:AF:00:2E:B0:3D:5C:3E:13:49:02:12:E5:5D:28:F5:FA:99:3B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/vGyvAC6wPVw-E0kCEuVdKPX6mTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.33.0/24
31.56.160.0/21
31.57.202.0/23
31.59.116.0/22
217.60.0.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:5d:21:28:ee:df:90:da:f0:39:c8:80:80:2e:0c:3f:79:e6:
4c:aa:4c:be:b1:14:ed:20:01:a9:ea:3f:db:39:65:f1:8e:71:
f7:3c:38:08:db:a5:aa:59:64:ac:31:17:3d:e3:22:8d:8d:91:
1f:37:63:94:61:41:48:9c:47:7d:51:55:b0:f6:74:a8:f5:66:
b5:c8:6e:c0:a0:f4:42:9f:2c:03:ac:83:5e:b5:76:5a:f6:c6:
0e:5d:ea:6e:c8:03:ac:5d:9a:65:5b:43:9a:6f:b1:f5:a5:95:
53:a9:95:f7:8f:ab:28:d1:49:22:85:a3:ff:c9:d6:8b:e2:63:
11:78:bc:bc:13:7a:98:2b:79:4e:f4:03:f8:1d:14:42:af:e1:
56:01:d3:82:82:99:a9:70:46:a1:a6:57:a6:57:08:36:ab:9c:
f8:4a:95:97:89:3e:91:55:a2:4a:0b:ef:16:db:c0:2c:f2:e5:
27:32:46:fc:48:96:17:e4:4f:ef:bd:91:16:d7:2b:80:67:28:
da:c9:d5:4b:d1:37:43:b0:14:46:18:c7:86:75:3d:35:43:95:
05:7b:49:48:7c:6a:7b:6e:3b:d9:72:0f:8f:23:be:c0:5b:d8:
57:cb:a0:92:c2:35:2d:14:15:c7:2f:9b:e4:2e:76:e7:e5:3e:
17:dc:36:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:30:39 2025 by rpki-client