Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/eysMLCnP0aTsaOxEKY1PrTev3gM.roa
File: eysMLCnP0aTsaOxEKY1PrTev3gM.roa (raw, json)
Hash identifier: hlV2/IUhDlwp241/nuu6G4gV6iGsUWBU0XsfTWbah/w=
Subject key identifier: 7B:2B:0C:2C:29:CF:D1:A4:EC:68:EC:44:29:8D:4F:AD:37:AF:DE:03
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 0197DC2F1522FEE04F78AC5ADC4527C09329
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/eysMLCnP0aTsaOxEKY1PrTev3gM.roa
Signing time: Sat 05 Jul 2025 20:02:42 +0000
ROA not before: Sat 05 Jul 2025 20:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62206
IP address blocks: 31.133.80.0/22 maxlen: 24
31.133.80.0/24 maxlen: 24
31.133.81.0/24 maxlen: 24
31.133.82.0/24 maxlen: 24
31.133.83.0/24 maxlen: 24
31.133.84.0/22 maxlen: 22
31.133.88.0/24 maxlen: 24
31.133.89.0/24 maxlen: 24
31.133.90.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
176.103.224.0/22 maxlen: 22
176.103.224.0/24 maxlen: 24
176.103.225.0/24 maxlen: 24
176.103.226.0/24 maxlen: 24
176.103.227.0/24 maxlen: 24
176.103.232.0/22 maxlen: 22
176.103.232.0/24 maxlen: 24
176.103.233.0/24 maxlen: 24
176.103.234.0/24 maxlen: 24
176.103.235.0/24 maxlen: 24
176.103.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:dc:2f:15:22:fe:e0:4f:78:ac:5a:dc:45:27:c0:93:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 5 20:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2b0c2c29cfd1a4ec68ec44298d4fad37afde03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:82:7a:c5:1f:13:69:47:77:81:f2:b2:ed:
9e:3f:2c:1d:ba:b1:e2:54:35:63:92:af:6e:c6:38:
aa:10:19:dc:da:46:78:69:48:f2:fa:10:dd:79:54:
13:bf:2b:55:76:a2:75:2f:46:cf:fb:64:40:33:4b:
3f:54:df:3d:77:b0:ca:99:f8:b2:57:00:b3:a9:24:
ff:8f:85:0e:5a:79:5d:41:ce:dd:0f:e3:71:95:4d:
de:6c:29:8e:63:38:5a:d4:91:f3:15:ba:15:39:e7:
ff:5d:b1:42:4b:ab:7d:cf:88:b0:a3:f7:3f:c0:f0:
79:34:df:ba:d4:8f:c3:39:7c:88:01:d5:62:6c:b5:
f5:3e:47:b5:a3:0d:02:a7:37:db:90:55:7f:d2:37:
e2:7c:0e:64:68:79:8f:65:9d:04:86:6a:32:de:94:
5b:78:1b:57:52:f6:ed:d3:00:3b:45:d8:f7:b7:eb:
7d:7b:59:a1:24:eb:de:67:ad:61:e7:a6:5e:da:17:
d1:62:5a:95:82:ef:c8:97:be:6f:c8:8b:96:f5:d4:
ec:d7:39:b6:4b:a2:61:3d:b3:27:b5:a8:b9:d3:63:
72:e4:de:5c:f8:06:3b:e0:90:57:5b:9d:01:76:bd:
14:3e:f0:07:88:b3:31:ec:27:29:c3:c8:ab:7c:e4:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2B:0C:2C:29:CF:D1:A4:EC:68:EC:44:29:8D:4F:AD:37:AF:DE:03
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/eysMLCnP0aTsaOxEKY1PrTev3gM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.80.0-31.133.91.255
176.103.224.0/22
176.103.232.0/21
Signature Algorithm: sha256WithRSAEncryption
94:d3:91:13:39:00:cd:4c:52:a1:fd:68:a0:93:91:01:a5:37:
e1:ed:45:ce:01:bd:ce:7d:5e:94:56:0c:02:3d:52:de:b3:1b:
1d:c8:d7:bb:27:a4:04:e7:13:66:57:f9:04:12:56:b5:f3:dd:
54:10:eb:31:8d:1c:bb:ba:5a:0a:df:89:43:2e:5c:48:66:5d:
e0:3a:1b:da:22:7f:7f:ed:6d:9a:01:0b:2f:db:26:7c:d9:52:
b1:ab:38:3e:bc:d9:ab:6e:41:46:e8:a0:94:19:ce:77:aa:0d:
48:f5:62:82:97:bd:49:d3:e9:fb:4c:d7:5b:9b:70:ac:bb:1f:
20:8d:8c:47:b3:b5:85:ff:f1:a6:1d:54:be:65:60:ae:59:bd:
e4:fa:80:69:11:a8:b0:2f:9a:b5:c4:d8:ae:8d:ef:d9:17:47:
d0:29:8a:12:ae:2e:16:06:3e:3c:ae:1d:85:f2:54:e8:bb:63:
fa:5b:5e:b0:22:11:e5:9b:bc:bf:22:ea:9e:52:34:8c:09:44:
b2:21:87:5e:48:19:36:7b:43:ac:f7:9f:87:5f:8b:33:f1:ba:
b0:e1:a3:5e:45:8a:50:91:f0:99:5b:a2:2b:18:d6:b2:e2:dd:
10:63:98:ba:0d:02:8a:d6:ee:9f:e6:96:c4:77:69:8b:50:25:
81:a9:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:02:08 2025 by rpki-client