Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JfoIPjXYxzDMg2Fk91casbkylHE.roa
File: JfoIPjXYxzDMg2Fk91casbkylHE.roa (raw, json)
Hash identifier: LEmsudTH6L3328g4/unRQrE45kEbv6vgtSyjmeaPcrY=
Subject key identifier: 25:FA:08:3E:35:D8:C7:30:CC:83:61:64:F7:57:1A:B1:B9:32:94:71
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019A4F273DE335360CDC6D5EAA3D71136A7B
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JfoIPjXYxzDMg2Fk91casbkylHE.roa
Signing time: Tue 04 Nov 2025 13:56:03 +0000
ROA not before: Tue 04 Nov 2025 13:56:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206943
IP address blocks: 31.42.128.0/20 maxlen: 20
31.42.146.0/23 maxlen: 23
31.42.148.0/22 maxlen: 22
31.42.152.0/24 maxlen: 24
31.42.154.0/23 maxlen: 23
178.159.64.0/20 maxlen: 20
178.218.128.0/22 maxlen: 22
178.218.132.0/22 maxlen: 22
178.218.136.0/21 maxlen: 21
185.171.28.0/23 maxlen: 23
185.171.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:27:3d:e3:35:36:0c:dc:6d:5e:aa:3d:71:13:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Nov 4 13:56:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25fa083e35d8c730cc836164f7571ab1b9329471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:f5:12:21:73:2f:ed:57:43:be:1a:c1:66:
1c:55:16:ac:3b:be:01:f4:99:f7:66:c3:ab:e6:2d:
f4:2b:d8:1d:ff:45:18:7d:ff:67:b0:08:60:7e:1d:
c5:d8:a6:01:be:74:8e:29:ac:89:86:00:c6:76:0e:
e0:fc:90:f0:37:93:49:79:7e:2a:3a:f1:ae:58:c3:
b3:b1:74:d6:c4:e9:f4:7e:03:03:58:02:d7:51:37:
82:ca:fd:37:99:c7:3b:ab:e1:b1:40:52:92:73:92:
58:8e:98:a5:6f:da:9e:42:8a:bd:cc:c0:f5:b7:ff:
4c:66:d4:fc:bb:52:e2:7b:55:92:9b:56:c6:db:9f:
51:70:f4:c4:34:ba:f8:ed:d5:d8:30:79:d2:55:c6:
10:58:1d:3c:7d:c2:e9:16:4d:a9:14:d4:07:14:6e:
c0:e9:c8:e9:bb:bf:4c:e5:3a:55:e4:09:8b:55:9c:
0a:90:7b:1a:11:9f:1d:10:9f:2f:eb:7f:e3:25:b4:
f4:37:66:d1:b5:8a:2a:04:5d:27:bf:24:1f:24:b5:
b6:7c:d4:45:b1:fb:c9:8a:fa:93:2b:c5:5f:3a:40:
83:df:26:f2:47:93:60:dc:10:b5:02:cf:40:26:fa:
54:9f:b7:e2:65:22:ab:3a:44:10:ef:ec:54:5a:95:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:08:3E:35:D8:C7:30:CC:83:61:64:F7:57:1A:B1:B9:32:94:71
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/JfoIPjXYxzDMg2Fk91casbkylHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.128.0/20
31.42.146.0-31.42.152.255
31.42.154.0/23
178.159.64.0/20
178.218.128.0/20
185.171.28.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:a3:de:e4:aa:79:39:2b:92:c8:d0:27:56:31:30:f2:7c:d2:
53:2e:13:48:cf:ee:a0:21:a8:35:25:57:bc:52:96:06:1a:ab:
8c:ae:2a:94:a3:8d:d7:2a:b4:55:9e:d7:80:92:b8:b7:f0:f1:
2e:dc:49:d1:dd:ab:c9:89:ff:8c:64:a9:76:f1:50:8e:c6:85:
e3:ec:31:00:df:8a:0d:8c:b1:e2:ae:36:b9:aa:1b:2b:e9:f6:
af:92:36:1f:fd:b9:f8:cd:60:86:77:19:c1:10:5a:c1:43:01:
fc:80:fd:e5:ae:04:8f:93:7a:47:1a:dc:b1:67:bc:71:92:26:
aa:96:c8:3f:0c:52:b3:b2:aa:d2:cb:21:c4:ad:71:91:db:2f:
af:28:8d:68:69:3b:03:18:fd:e4:cc:ba:ee:d8:45:f8:84:21:
fd:05:c2:56:98:71:8c:9f:9c:4f:51:35:4c:7e:8a:1e:d7:9b:
5a:b4:d8:4f:55:f4:98:3b:f8:54:b2:7b:a7:a5:81:f9:15:6b:
12:75:d5:5c:65:2c:3f:42:b7:01:2e:73:fa:65:ec:2f:41:ab:
f9:a4:4e:2b:b0:2a:fb:89:38:2d:19:f6:4f:31:c8:32:31:84:
d0:92:cf:49:b5:13:a4:55:fd:ca:63:0c:c9:50:a4:56:c2:bd:
0a:1d:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:19:34 2025 by rpki-client