Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jREcC-UhWXUSzApEIajwAOrnPds.roa
File: jREcC-UhWXUSzApEIajwAOrnPds.roa (raw, json)
Hash identifier: oDuVDFJg2IBsGrgjsTg4xM1gEZyvXvszObYC5lZZqSw=
Subject key identifier: 8D:11:1C:0B:E5:21:59:75:12:CC:0A:44:21:A8:F0:00:EA:E7:3D:DB
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0197DECFFF20690BBE52D412180F5353B0BB
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jREcC-UhWXUSzApEIajwAOrnPds.roa
Signing time: Sun 06 Jul 2025 08:17:42 +0000
ROA not before: Sun 06 Jul 2025 08:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 31.170.55.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
176.46.134.0/24 maxlen: 24
176.46.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:de:cf:ff:20:69:0b:be:52:d4:12:18:0f:53:53:b0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jul 6 08:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d111c0be521597512cc0a4421a8f000eae73ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:b0:4a:50:19:fb:d8:fd:82:a4:bf:d1:e8:
be:93:51:a2:2d:04:ee:4c:a2:bf:7c:bf:f9:33:12:
33:e6:7b:d9:74:f6:c2:9e:dd:d7:75:c7:cb:0f:39:
cc:c4:e3:6e:7b:b4:ff:de:dd:5f:2a:ce:c6:6a:2b:
ed:e1:19:28:3f:f8:32:54:49:ed:b9:f7:3b:17:c0:
b8:9a:43:32:59:dd:d0:50:25:2b:b2:e0:ea:f3:d3:
eb:ec:db:f0:63:81:ab:77:d9:84:ae:3d:c9:3f:3b:
0a:14:8d:bc:c1:10:c8:b9:b8:cc:0d:e1:e3:f4:fe:
19:9f:04:7e:2f:79:b0:98:a6:cf:aa:e1:e7:c8:21:
f7:b6:4f:c2:11:c8:26:bc:b6:0b:55:71:4a:03:ca:
0a:54:ae:53:80:17:ec:91:1c:c6:72:6b:3f:ed:07:
29:c9:7b:e3:a8:d5:ec:5d:09:53:ff:f0:7f:51:1e:
68:4f:fa:3e:84:64:10:9a:fe:11:21:45:87:8a:bd:
1c:16:fe:c4:10:00:92:6c:96:18:37:bd:ba:f5:dd:
4c:18:68:9f:dd:31:42:d8:97:04:ce:b7:7e:1b:94:
0e:dd:17:f5:e3:a2:9b:3b:ad:6b:b7:39:85:2c:12:
2f:92:51:0f:70:52:45:33:b4:c7:b8:88:50:5e:6d:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:1C:0B:E5:21:59:75:12:CC:0A:44:21:A8:F0:00:EA:E7:3D:DB
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/jREcC-UhWXUSzApEIajwAOrnPds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
94.74.173.0/24
176.46.134.0/24
176.46.147.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d7:36:4c:b4:1e:8e:91:b9:38:5c:a3:6c:c4:00:7a:b7:bc:
eb:3f:68:b6:a0:f6:ef:ea:b2:9a:e7:1f:b5:f4:00:66:25:08:
55:a7:3e:9b:ce:6b:4b:c7:e7:1c:d6:0d:80:dc:76:b1:dc:c0:
f8:13:9d:36:03:0b:20:92:26:c0:79:a3:0d:91:c1:06:44:2f:
4e:db:11:fd:98:34:6c:62:ca:2e:28:37:0d:8d:bb:95:f8:39:
9a:77:ae:c2:95:ae:7a:13:21:9c:01:c7:6c:98:0c:4e:4d:55:
fa:71:f0:07:d0:ae:74:28:78:32:4d:a0:68:cf:cd:df:45:3a:
9d:4c:41:c9:87:cd:1e:ee:4c:c8:16:8e:6d:53:9c:2f:ec:6f:
41:f5:40:b1:20:ad:90:e7:0c:01:1f:8e:d6:33:97:08:dc:70:
20:ef:1f:00:df:2e:27:8e:70:7c:83:5d:f8:04:97:75:22:dc:
d5:dc:c9:14:d4:df:8e:7f:ab:8e:0a:3c:10:cc:92:73:04:c9:
b7:20:6c:f6:3e:e2:b8:ff:58:02:44:81:0b:82:8f:57:70:da:
cd:42:b4:af:d7:b6:6f:57:0d:25:30:df:ba:52:60:8d:d1:a2:
c7:61:12:13:38:bf:96:f7:6e:85:93:b6:66:2d:84:3c:de:a0:
33:63:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:58:12 2025 by rpki-client