Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EQIxeG_gj0SJNjAYG5EJoJtUokI.roa
File: EQIxeG_gj0SJNjAYG5EJoJtUokI.roa (raw, json)
Hash identifier: 6H2QVgg0EOWl9EdEL0sy7kP8QbSaAwMJEJrN38NFpYs=
Subject key identifier: 11:02:31:78:6F:E0:8F:44:89:36:30:18:1B:91:09:A0:9B:54:A2:42
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01983C0FF52D8FEB016A53CCB3CC275BFCC9
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EQIxeG_gj0SJNjAYG5EJoJtUokI.roa
Signing time: Thu 24 Jul 2025 10:52:15 +0000
ROA not before: Thu 24 Jul 2025 10:52:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 31.56.29.0/24 maxlen: 24
31.56.86.0/24 maxlen: 24
31.57.120.0/24 maxlen: 24
31.57.122.0/24 maxlen: 24
31.57.124.0/24 maxlen: 24
31.57.125.0/24 maxlen: 24
31.57.140.0/24 maxlen: 24
31.57.162.0/23 maxlen: 24
31.57.164.0/23 maxlen: 24
31.57.180.0/24 maxlen: 24
31.57.221.0/24 maxlen: 24
31.58.41.0/24 maxlen: 24
31.58.42.0/24 maxlen: 24
31.58.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:0f:f5:2d:8f:eb:01:6a:53:cc:b3:cc:27:5b:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 24 10:52:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=110231786fe08f44893630181b9109a09b54a242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:b7:38:4b:1f:2a:0e:a7:fa:2a:b4:79:d0:
87:46:ae:4d:0f:87:1f:15:3e:ec:84:6b:b3:d0:e2:
1a:3b:ca:9f:e0:c5:5d:d7:a8:e5:0f:df:7f:64:b8:
f5:4b:7d:f0:3c:ed:4a:99:14:09:82:8b:fd:29:b3:
ed:1e:de:6e:fd:c6:b2:87:5e:73:9d:9e:fe:37:a7:
fe:a5:61:cc:ab:e3:99:fe:45:d4:27:06:99:39:64:
e3:d8:e5:46:3d:85:16:c9:86:f3:34:90:98:f0:f4:
d5:8f:94:25:82:aa:b6:d2:ff:31:78:50:da:1d:1f:
9c:77:55:9e:b2:3b:ca:82:97:66:1c:60:f6:dd:7c:
29:8a:8c:c8:ed:c8:3c:32:cf:24:cf:a1:56:97:e9:
dc:00:29:c4:81:29:46:5c:cc:b6:de:32:5a:c6:c7:
6f:e8:ff:a6:ae:27:95:91:a3:40:24:f1:a8:27:79:
df:b3:93:ad:cf:cd:d9:b3:7b:ff:12:dc:ee:a6:52:
d9:2a:4a:ce:88:f5:4e:44:ea:74:14:24:13:7f:88:
60:68:51:41:bd:6b:64:95:4c:bf:44:9e:6a:74:e4:
31:b1:d5:11:5b:95:9e:f7:f5:ce:83:1d:ab:7c:c4:
31:bc:c6:4d:5a:a6:44:25:97:98:57:04:ea:7f:d8:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:31:78:6F:E0:8F:44:89:36:30:18:1B:91:09:A0:9B:54:A2:42
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EQIxeG_gj0SJNjAYG5EJoJtUokI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.29.0/24
31.56.86.0/24
31.57.120.0/24
31.57.122.0/24
31.57.124.0/23
31.57.140.0/24
31.57.162.0-31.57.165.255
31.57.180.0/24
31.57.221.0/24
31.58.41.0-31.58.42.255
31.58.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c7:a9:63:48:58:5d:01:c0:31:de:0e:d8:f7:2e:92:96:24:
43:44:93:0a:1a:a6:b9:14:67:ed:ec:79:29:da:89:08:22:ea:
53:d6:9c:19:04:8f:23:6d:62:0a:d5:e4:98:82:13:b5:5d:d6:
07:0e:62:1a:1a:af:91:15:a3:62:40:c8:93:ba:74:bb:3e:82:
59:27:37:6d:f0:26:22:0b:c6:f0:f3:c0:fe:35:7c:26:23:c3:
bd:24:f6:de:b1:e4:16:74:03:41:35:4a:01:04:fb:98:6d:dd:
be:87:a7:d4:d7:dd:80:17:e1:9c:ff:4f:f3:82:52:66:44:21:
a8:d7:2a:8e:fc:bc:ef:5c:89:96:6d:f7:fd:26:f8:c2:87:a1:
fd:ef:26:28:47:a5:f2:fa:7a:31:5d:6d:39:a5:62:62:a4:ee:
99:64:ad:15:b3:5e:88:b4:34:19:63:0f:99:12:92:3c:e3:ab:
6d:50:85:7b:fd:64:ab:2c:59:91:c2:a1:21:40:42:68:11:4d:
4c:2f:16:99:11:9a:11:ec:bd:83:7c:7c:6d:12:75:f3:d6:e1:
a6:f2:d8:26:0d:4d:a7:b7:e1:c2:1e:c6:16:ee:11:62:51:22:
f6:1d:48:6b:f3:ac:bb:23:0e:31:bb:76:84:50:46:fd:9a:d1:
36:7d:c8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:21 2025 by rpki-client