Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/pb4QZ95Peoa-v89w9IfVF9OInYI.roa
File: pb4QZ95Peoa-v89w9IfVF9OInYI.roa (raw, json)
Hash identifier: mVmSldgY3RuIKYBpTP9fbMVJ33NM7M6bAyGk/0LxYwU=
Subject key identifier: A5:BE:10:67:DE:4F:7A:86:BE:BF:CF:70:F4:87:D5:17:D3:88:9D:82
Certificate issuer: /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial: 0197F33CF7EC7C8AB8343AEFBC26287E78A7
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/pb4QZ95Peoa-v89w9IfVF9OInYI.roa
Signing time: Thu 10 Jul 2025 07:29:08 +0000
ROA not before: Thu 10 Jul 2025 07:29:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44806
IP address blocks: 31.24.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:3c:f7:ec:7c:8a:b8:34:3a:ef:bc:26:28:7e:78:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Validity
Not Before: Jul 10 07:29:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5be1067de4f7a86bebfcf70f487d517d3889d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:87:89:66:97:06:b7:a8:98:66:df:ec:db:
54:81:12:c2:37:53:cb:01:6b:32:66:55:31:fe:7a:
5c:72:6f:b3:90:60:80:8c:57:4d:7b:78:16:7e:0a:
7a:0a:19:80:dc:37:a4:06:84:9d:87:52:73:d4:71:
94:1a:1c:2a:a9:67:12:a1:17:f7:30:ef:9a:76:6e:
d0:db:46:85:37:64:73:72:2f:65:be:b3:3f:18:34:
84:0f:69:af:85:85:aa:7c:85:0c:bc:56:a4:16:5d:
3e:98:51:f0:6e:02:7f:05:8b:5d:ab:6c:2f:22:fb:
6c:76:93:12:dc:1b:82:2f:6e:d2:cc:24:d1:ef:61:
da:5f:90:b0:8a:62:1c:56:b0:01:e3:99:88:80:93:
10:3a:56:66:21:66:a9:4f:f3:89:62:e1:58:9c:e1:
e0:78:3b:99:31:bb:47:8e:95:d1:2d:2b:31:d9:00:
8c:87:c2:50:25:30:cf:c2:5b:23:21:e9:4f:0e:d3:
59:e2:e8:f4:d9:f7:cd:23:36:ac:05:43:88:f3:9c:
81:3d:0c:ad:19:29:b8:4a:74:69:4c:bb:6f:9a:63:
b4:c3:c5:4c:a0:59:4a:c8:da:5e:81:13:29:9f:9c:
c5:11:a0:8f:6b:cc:8e:54:be:9a:4e:82:be:a5:72:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:10:67:DE:4F:7A:86:BE:BF:CF:70:F4:87:D5:17:D3:88:9D:82
X509v3 Authority Key Identifier:
keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/pb4QZ95Peoa-v89w9IfVF9OInYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.112.0/21
Signature Algorithm: sha256WithRSAEncryption
68:47:71:25:36:61:d4:55:2c:98:e8:cb:33:41:91:3a:1f:e2:
31:8a:bb:c5:30:50:76:34:20:4c:06:39:9e:d6:32:92:61:9c:
46:54:dd:1a:d8:aa:e1:3c:ec:bc:c9:c6:47:c2:f9:f0:ca:40:
5e:b9:bd:7b:73:06:c8:1a:8e:d6:6b:30:78:67:a2:b1:f3:8a:
81:17:01:de:43:e2:02:cf:2e:06:51:6f:fc:31:3f:54:aa:12:
35:00:9c:74:ff:51:75:84:fb:d9:6c:00:65:5d:7b:ae:fb:a9:
9b:86:72:12:19:92:bc:cb:8f:4b:62:cd:cf:24:a0:47:40:2f:
94:23:af:77:d7:c3:f3:c9:8e:2f:66:74:04:dc:3a:bf:1a:e0:
b5:64:ba:fa:5f:a0:68:0a:48:9b:f7:98:4a:d5:33:c6:ad:77:
3f:e8:64:d0:9d:d2:2b:09:71:e8:84:8c:60:f3:73:5f:bb:fd:
18:3e:1e:64:70:f8:4c:fd:73:ae:d7:d8:68:2a:fc:f0:dc:50:
e4:3e:54:f2:d1:60:00:1e:6c:0d:26:c0:a9:7c:9c:3b:24:ca:
c4:c2:54:5e:c9:70:a6:4f:99:23:6a:a4:cf:45:87:d0:ae:46:
09:34:f4:fc:6b:88:c7:55:31:c0:bb:9a:eb:8d:aa:f6:78:48:
b9:16:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:41 2025 by rpki-client