Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/124yGEBreVIYx0h4R6YHGA9qi1E.roa
File: 124yGEBreVIYx0h4R6YHGA9qi1E.roa (raw, json)
Hash identifier: CHOYTiaY5ZMgVsWwqtc/RkpETqO0JrFkgTGxrZ98MNo=
Subject key identifier: D7:6E:32:18:40:6B:79:52:18:C7:48:78:47:A6:07:18:0F:6A:8B:51
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019763C6BACCE11EC97750696CCF1B8F2AD3
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/124yGEBreVIYx0h4R6YHGA9qi1E.roa
Signing time: Thu 12 Jun 2025 10:54:17 +0000
ROA not before: Thu 12 Jun 2025 10:54:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 31.169.64.0/24 maxlen: 24
31.169.65.0/24 maxlen: 24
31.169.66.0/24 maxlen: 24
31.169.67.0/24 maxlen: 24
31.169.69.0/24 maxlen: 24
31.169.70.0/24 maxlen: 24
31.169.71.0/24 maxlen: 24
31.169.72.0/24 maxlen: 24
31.169.77.0/24 maxlen: 24
31.169.78.0/24 maxlen: 24
31.169.81.0/24 maxlen: 24
31.169.82.0/24 maxlen: 24
31.169.85.0/24 maxlen: 24
31.169.87.0/24 maxlen: 24
31.169.88.0/24 maxlen: 24
31.169.90.0/24 maxlen: 24
31.169.92.0/24 maxlen: 24
31.169.93.0/24 maxlen: 24
31.169.94.0/24 maxlen: 24
185.33.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:c6:ba:cc:e1:1e:c9:77:50:69:6c:cf:1b:8f:2a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jun 12 10:54:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d76e3218406b795218c7487847a607180f6a8b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1f:af:73:a9:70:d4:da:33:06:e7:ca:d9:bb:
04:1c:4a:4b:66:4d:2a:38:9e:c6:ad:ba:b2:38:be:
46:f7:d4:be:ef:c6:db:1c:c1:03:d6:87:c4:d3:94:
ee:a4:91:fa:01:a3:07:a7:f6:ec:6a:53:b9:9f:1c:
64:71:24:ed:17:5a:63:5e:03:70:42:d6:5f:2a:82:
c4:08:a9:fd:47:3e:10:25:cd:bb:63:a1:67:3d:01:
b2:87:9b:fc:35:ea:45:8a:fc:b7:8f:19:7e:f8:a8:
40:ce:7e:91:70:62:fc:94:a3:cc:6f:62:97:94:6a:
68:8e:33:3e:fb:b6:cb:1d:2a:28:44:81:10:14:a4:
a6:3f:1f:5f:8d:6b:61:b0:ba:36:cf:19:c8:f0:fa:
f7:40:54:ca:81:2c:1e:a8:d0:f6:48:dd:08:84:c7:
32:59:cb:a2:6d:2a:4c:0f:43:44:36:b0:5e:25:10:
9d:f5:e6:d9:be:d6:ca:6a:a6:c7:97:25:72:68:99:
ef:88:d4:28:b5:67:ce:0d:09:07:b0:4d:ab:b5:07:
dd:03:28:db:ab:c4:d9:5e:7b:47:8f:18:96:62:e5:
65:8f:56:c4:2b:7c:18:11:77:83:ab:46:32:2b:89:
22:1a:fd:4f:cb:86:db:4c:38:60:99:c9:39:bb:32:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:32:18:40:6B:79:52:18:C7:48:78:47:A6:07:18:0F:6A:8B:51
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/124yGEBreVIYx0h4R6YHGA9qi1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.64.0/22
31.169.69.0-31.169.72.255
31.169.77.0-31.169.78.255
31.169.81.0-31.169.82.255
31.169.85.0/24
31.169.87.0-31.169.88.255
31.169.90.0/24
31.169.92.0-31.169.94.255
185.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c1:32:a5:4f:5c:7f:25:b1:e1:53:44:38:b4:e9:32:ae:0e:
4a:a6:d0:b5:87:e0:92:46:08:13:5a:e9:5c:5a:ad:7b:a4:4f:
77:28:d1:e3:4d:aa:2f:a6:79:88:b1:cc:5d:6b:12:b6:4f:a2:
d4:84:96:37:9b:57:75:f8:47:0e:5e:0a:3a:f9:5d:19:05:b2:
56:6c:89:2f:42:74:9d:01:41:e5:79:3f:7b:5f:7c:68:ed:6b:
c3:bc:9a:aa:52:74:3c:a4:be:4f:28:c3:d5:ed:2d:3c:c0:c2:
a7:d6:6d:eb:93:02:46:ff:e5:d4:2c:2d:3d:92:ae:85:c1:56:
00:50:bf:73:9f:2e:dc:35:aa:7e:b9:1f:5a:90:00:82:b0:aa:
6d:44:db:3d:a7:fe:98:92:80:91:1e:07:95:be:62:55:6c:93:
44:45:a3:0d:70:c9:3c:9b:da:f3:7e:37:5e:8f:ba:c5:26:92:
f5:67:f6:47:4a:11:ca:c7:ef:aa:a6:55:48:ba:a3:32:8d:e6:
91:cd:f9:12:05:55:dd:27:22:d9:c7:97:5e:0b:46:03:34:75:
16:37:92:51:99:5a:44:27:9c:02:ce:ab:e3:25:cb:b1:07:1c:
e1:26:c0:52:73:50:31:ad:49:54:8c:a9:9d:15:e5:81:d9:bd:
31:0f:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:51:21 2025 by rpki-client