Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G_AQAZ5Wd_xW2FJxDLa5rPMi6Wk.roa
File: G_AQAZ5Wd_xW2FJxDLa5rPMi6Wk.roa (raw, json)
Hash identifier: Q7TiKryrBl3doEugsQwGntUEmGVrJ7drolJ9FNlkdKE=
Subject key identifier: 1B:F0:10:01:9E:56:77:FC:56:D8:52:71:0C:B6:B9:AC:F3:22:E9:69
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197D64878B0300D4C81C2DB0E5B49D5B2FF
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G_AQAZ5Wd_xW2FJxDLa5rPMi6Wk.roa
Signing time: Fri 04 Jul 2025 16:32:43 +0000
ROA not before: Fri 04 Jul 2025 16:32:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 31.56.31.0/24 maxlen: 24
31.56.32.0/24 maxlen: 24
31.56.44.0/24 maxlen: 24
31.56.112.0/24 maxlen: 24
31.57.95.0/24 maxlen: 24
31.57.171.0/24 maxlen: 24
31.57.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:48:78:b0:30:0d:4c:81:c2:db:0e:5b:49:d5:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 4 16:32:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bf010019e5677fc56d852710cb6b9acf322e969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:c2:4d:16:37:cf:0b:36:6d:70:03:96:c9:
27:d8:bf:af:aa:73:03:ca:1e:8b:78:24:61:be:87:
7c:fd:bc:af:a1:d2:e3:ce:f1:6d:2a:c4:ca:7e:8a:
c7:f5:6e:27:9d:87:49:57:a1:78:f8:ee:1b:26:c1:
82:a3:84:c9:80:9f:b9:b4:1e:61:a8:96:15:ac:34:
d8:39:2e:d2:57:0d:29:ef:e4:22:f9:c4:2e:ef:80:
76:57:39:de:c5:d4:8a:22:8b:3e:84:09:04:4a:fe:
0d:e8:df:82:61:eb:9e:75:54:5a:20:dc:f4:b6:fd:
e4:95:45:cd:97:fc:3b:a3:04:98:44:9d:89:48:51:
6b:43:41:ec:d1:cf:71:1b:22:d1:3b:a3:98:64:b4:
66:a6:3d:bf:f5:7e:bc:58:04:71:1c:ec:59:a9:83:
81:be:d2:66:7c:96:ba:0d:05:bd:5a:e6:d2:0d:d5:
c5:0e:16:80:0c:ee:d4:ba:c4:87:b9:e4:0c:06:02:
8d:e5:3a:d7:9b:2a:d5:4a:f8:43:2a:df:d8:b1:87:
f0:90:4c:8d:de:98:8f:a9:ee:81:95:e1:d8:be:e8:
8b:de:85:38:1d:c0:08:0c:e4:77:2a:03:53:f8:0b:
8b:05:1c:d7:42:eb:38:ed:50:dd:8a:80:38:f2:57:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F0:10:01:9E:56:77:FC:56:D8:52:71:0C:B6:B9:AC:F3:22:E9:69
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/G_AQAZ5Wd_xW2FJxDLa5rPMi6Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.31.0-31.56.32.255
31.56.44.0/24
31.56.112.0/24
31.57.95.0/24
31.57.171.0/24
31.57.222.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:8e:a0:7a:94:39:4f:51:ba:68:25:71:f0:44:b4:3a:3f:af:
ec:b7:2f:63:62:9e:7a:31:b7:49:52:82:96:3a:74:c0:59:a7:
ec:d9:ed:ef:e3:9c:26:e1:8f:cf:87:4a:4c:e0:84:77:3e:eb:
12:91:f1:d8:b8:e7:83:74:29:c1:d4:05:4c:1d:ed:26:25:27:
bf:01:3a:c0:ae:03:9d:ca:eb:df:75:ce:0e:b4:33:a5:31:e2:
53:e5:db:3e:33:fe:ac:49:e6:a4:be:81:60:ad:e8:2e:31:f8:
b2:3f:1e:e0:ed:74:9f:fb:59:00:86:2a:8f:d7:c9:b4:7d:42:
97:41:85:5b:69:7a:12:88:1a:09:4f:51:53:a8:bd:42:36:64:
6e:6c:d2:0e:c1:11:6c:b0:b7:0a:65:d5:1a:71:df:20:53:ac:
91:0f:10:b5:52:d5:ab:1d:f9:74:bb:a2:21:3e:6e:a2:86:01:
26:a6:ef:58:af:3f:5d:81:d7:55:69:28:5e:bd:ad:4d:79:6c:
0f:3d:d8:f8:c5:fa:de:ec:38:a6:f8:1d:4e:c7:b4:16:8c:24:
c9:d0:42:4a:7e:7e:a1:14:09:70:1e:68:2a:72:80:4d:12:54:
ab:5b:9f:1a:a8:97:8c:7b:85:87:da:9d:7b:15:10:07:78:f8:
78:c2:05:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:18:50 2025 by rpki-client