Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/Iy0xYJFVaSUpkc2TbsdezF59hPQ.roa
File: Iy0xYJFVaSUpkc2TbsdezF59hPQ.roa (raw, json)
Hash identifier: yc/wxf6t0jomAnEf1S9R6mg0/BH4SO1UAudfyh2QjG4=
Subject key identifier: 23:2D:31:60:91:55:69:25:29:91:CD:93:6E:C7:5E:CC:5E:7D:84:F4
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 0198791D2EABF55FBD1611DC21F4E8F34977
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/Iy0xYJFVaSUpkc2TbsdezF59hPQ.roa
Signing time: Tue 05 Aug 2025 07:23:32 +0000
ROA not before: Tue 05 Aug 2025 07:23:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56910
IP address blocks: 31.177.56.0/21 maxlen: 24
86.106.173.0/24 maxlen: 24
185.4.236.0/24 maxlen: 24
185.36.232.0/22 maxlen: 24
185.109.16.0/22 maxlen: 24
188.214.127.0/24 maxlen: 24
2a04:3e00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:1d:2e:ab:f5:5f:bd:16:11:dc:21:f4:e8:f3:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Aug 5 07:23:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=232d3160915569252991cd936ec75ecc5e7d84f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:97:ee:1d:e0:07:9e:8f:38:d6:20:9f:5a:
37:56:aa:f2:30:d6:74:f5:c2:5d:4d:70:c3:e4:cc:
ea:cf:83:c7:c1:37:da:8a:23:98:bd:f5:01:a8:1b:
41:4b:ad:fa:4a:45:0b:d2:0d:e7:11:be:c9:33:03:
43:a8:8d:d6:c7:6d:33:46:a7:fe:cc:9b:74:28:3c:
c8:2f:a6:5b:cf:1a:5c:a4:74:65:03:af:9a:3d:b7:
cb:12:c7:85:b1:59:27:3c:b1:b4:68:ac:cf:84:47:
5f:b8:ae:9d:b2:ba:86:7e:4d:1e:b0:ea:39:d4:34:
6f:73:76:f1:1d:45:20:ff:22:a8:65:28:e1:7b:8a:
51:27:52:2c:1a:3d:0d:f3:02:43:89:c1:2f:40:95:
77:01:cc:94:20:85:c4:90:ec:4a:fe:8c:38:ce:6f:
ec:0e:3f:41:fc:15:5b:f2:d5:9d:12:b5:eb:7a:67:
ab:ea:41:21:da:43:2b:d3:66:45:5e:a1:2c:0e:dd:
04:7e:16:7d:ac:17:d2:2c:76:1b:ee:de:20:f6:25:
9a:41:01:a4:50:0a:ce:d5:7a:ae:b9:44:63:49:12:
2d:85:4e:ed:d6:cd:9c:31:0e:7e:82:28:6a:cf:0e:
04:36:06:9f:8e:69:ac:01:d2:72:49:d0:61:dd:54:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2D:31:60:91:55:69:25:29:91:CD:93:6E:C7:5E:CC:5E:7D:84:F4
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/Iy0xYJFVaSUpkc2TbsdezF59hPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.56.0/21
86.106.173.0/24
185.4.236.0/24
185.36.232.0/22
185.109.16.0/22
188.214.127.0/24
IPv6:
2a04:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
9c:75:74:32:ee:5a:69:03:df:3f:09:ac:06:88:62:88:66:6f:
39:7e:bd:c4:f5:a6:17:37:1c:33:a8:d2:26:a6:a3:fa:8c:bf:
a4:a0:b2:04:2f:80:11:fe:10:4e:fa:18:86:a1:e9:85:4b:ba:
05:a6:64:ce:93:f2:52:de:c4:d8:52:3e:ed:bc:19:05:a2:af:
f6:30:cf:f9:6e:cd:ea:87:81:2a:4c:65:0b:35:28:45:6a:b2:
fd:eb:c9:05:11:4a:82:11:1e:4f:2e:9a:31:5b:6e:ab:d2:14:
af:7b:72:1c:7f:86:3e:f7:d9:7f:5a:6f:34:2c:5e:03:21:e1:
8e:16:55:06:0e:3d:df:18:d9:aa:6f:8b:d4:14:ad:bc:f5:7d:
d5:86:c5:1b:f9:4d:63:bf:f1:34:2b:f7:54:c1:0a:90:e9:2d:
8f:b3:0c:56:92:81:bc:dc:f9:e5:17:eb:13:c0:c3:77:d4:3b:
3b:de:f6:34:cc:2d:e0:8d:6e:a6:e3:9e:1d:27:59:3a:14:7a:
5a:1c:f0:9c:92:f8:77:f9:c0:db:d7:3b:06:56:86:0f:f3:0c:
2c:19:41:58:2e:89:a6:c7:6a:c2:4d:02:0c:47:9e:ab:d3:f3:
45:d4:45:b5:6c:99:aa:e4:2a:7f:6a:7d:6a:e3:0d:80:75:a4:
c5:2b:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:27:22 2025 by rpki-client