Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3gEskidu9hzim9bHHjBv00RXBus.roa
File: 3gEskidu9hzim9bHHjBv00RXBus.roa (raw, json)
Hash identifier: qVrwph8vjAe26OaOmBfx8ePQeTotJEN7VoI5ZWsaeUk=
Subject key identifier: DE:01:2C:92:27:6E:F6:1C:E2:9B:D6:C7:1E:30:6F:D3:44:57:06:EB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019830EA6C0FA8C2FC4E9A661CC14C844725
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3gEskidu9hzim9bHHjBv00RXBus.roa
Signing time: Tue 22 Jul 2025 06:55:26 +0000
ROA not before: Tue 22 Jul 2025 06:55:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209279
IP address blocks: 31.59.169.0/24 maxlen: 24
94.183.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:ea:6c:0f:a8:c2:fc:4e:9a:66:1c:c1:4c:84:47:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 22 06:55:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de012c92276ef61ce29bd6c71e306fd3445706eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:6b:87:a3:c0:1c:ff:00:af:c6:9f:60:17:
71:0b:c5:e8:04:27:19:88:ac:07:a3:36:b1:5f:b8:
33:e3:b2:9f:38:3d:40:9d:a0:97:91:2a:f4:13:47:
4a:00:81:45:63:73:b1:01:72:07:84:91:5c:94:f8:
49:0c:ea:88:98:27:0e:da:98:9c:fc:70:ce:d7:82:
ee:42:7f:b6:16:1e:03:41:fd:6a:f7:9e:ef:38:cb:
df:f2:82:e1:a2:36:f3:02:9c:9f:8e:2a:07:e4:e7:
12:37:aa:53:39:97:ab:86:26:a5:89:de:37:21:20:
e8:b4:4a:07:46:d9:7d:96:80:71:b9:63:5c:11:dc:
73:71:ff:7a:1c:b9:5c:ee:06:81:d6:c5:9d:1e:19:
91:c8:bf:1e:df:8a:06:2f:05:70:d1:ad:a4:27:10:
75:6f:80:0b:87:65:ea:f5:e9:14:c1:51:d8:bf:93:
2a:25:21:fe:0e:d2:7e:24:4a:7f:e0:fa:67:1f:fb:
e5:c9:50:21:23:87:12:e5:8f:bf:ac:1d:22:56:f1:
cb:d8:74:36:b3:65:f8:d9:a4:16:29:2a:eb:0d:50:
6b:8c:5f:57:5e:6e:4b:d1:ab:6e:f2:15:e8:28:85:
fe:59:61:7e:a0:cc:d6:d7:f6:49:43:87:61:26:c9:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:01:2C:92:27:6E:F6:1C:E2:9B:D6:C7:1E:30:6F:D3:44:57:06:EB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/3gEskidu9hzim9bHHjBv00RXBus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.59.169.0/24
94.183.161.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b2:82:e7:ce:4e:d6:bd:3d:8d:c2:16:ef:ec:e9:99:cb:f6:
d0:05:33:ca:43:05:5b:f9:d5:89:92:66:8f:a4:00:03:68:f4:
11:60:00:65:a7:2b:9c:60:06:01:5c:11:ae:6d:0c:ad:35:f3:
3f:72:32:d0:65:c2:42:87:4d:0d:d7:21:e0:bb:91:aa:c9:0e:
fd:bb:b6:8f:03:69:e4:7a:26:74:84:e6:f4:6f:7b:ff:7e:c5:
3b:85:98:64:5c:8f:a4:14:c7:05:bc:a6:cd:67:28:3d:52:15:
1c:b6:0b:fe:54:46:18:04:0c:4d:87:39:64:92:e9:35:b3:a7:
54:4e:45:e1:ad:50:a8:80:12:f2:f1:05:75:0c:53:62:ae:75:
e5:f3:89:37:1e:dd:05:de:df:16:c9:56:a2:ad:98:05:2d:04:
7b:96:a8:eb:3f:0a:21:e5:b3:15:62:86:7c:c3:f9:74:ea:b6:
5d:df:58:74:19:43:07:b7:87:d6:92:71:af:76:4c:bc:30:93:
be:d7:2f:dc:85:8f:a7:f5:25:39:fa:5c:c1:ee:e5:83:fc:df:
1d:52:53:54:37:13:d3:8a:af:b5:02:91:b9:56:0e:b4:10:bb:
04:48:1a:03:65:6c:9f:68:b7:a3:be:c4:df:59:70:2a:b9:2d:
46:a8:50:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:42:34 2025 by rpki-client