Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Uccrkp9yiYcPVZR9q8fgh4BBovs.roa
File: Uccrkp9yiYcPVZR9q8fgh4BBovs.roa (raw, json)
Hash identifier: qREWgnvh5hZ7VBkiZtHqCAQkYl5z82AEDxSC5Ki7DjM=
Subject key identifier: 51:C7:2B:92:9F:72:89:87:0F:55:94:7D:AB:C7:E0:87:80:41:A2:FB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019850E86A1E485C06F235963E4CFD7FCA6E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Uccrkp9yiYcPVZR9q8fgh4BBovs.roa
Signing time: Mon 28 Jul 2025 12:01:05 +0000
ROA not before: Mon 28 Jul 2025 12:01:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213799
IP address blocks: 31.58.247.0/24 maxlen: 24
31.58.249.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:e8:6a:1e:48:5c:06:f2:35:96:3e:4c:fd:7f:ca:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 28 12:01:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51c72b929f7289870f55947dabc7e0878041a2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:d4:7f:7f:80:b9:16:52:cd:b6:4b:17:14:
70:dd:2b:35:1d:c2:d8:78:d6:30:54:5a:2a:72:70:
25:70:eb:aa:7a:5a:b8:c8:92:ae:8b:dd:ff:f6:cb:
63:4e:14:8c:b7:f5:ec:cf:e0:2c:f9:f5:41:94:b6:
27:c5:ce:9c:8b:1e:40:f8:65:42:d4:5b:05:c7:23:
65:d2:2f:d4:3f:ee:da:5f:b2:dc:f7:24:af:90:ad:
ab:34:f4:49:ec:5d:3a:59:23:3e:dc:a3:df:8b:2e:
01:a2:8c:10:97:8a:55:65:69:c9:82:42:5d:9c:c0:
7e:15:a5:3c:7d:e1:40:17:86:ac:44:38:73:af:ae:
8e:9c:24:69:0d:08:da:b0:e7:3f:ff:ce:7e:df:09:
c6:61:c3:b5:ec:a1:b8:82:07:f2:5e:9b:a5:92:75:
9a:88:0d:2a:93:c1:20:c6:ea:71:da:59:42:1a:7d:
80:6d:57:c7:13:ff:28:6d:0d:c0:e4:78:4b:2b:ed:
97:b1:a7:e6:a3:82:62:00:48:06:29:04:62:d6:b7:
dd:0a:66:67:29:e1:10:b2:54:d0:c3:c6:48:d8:7a:
4f:58:44:b2:8d:43:48:10:a8:9f:55:41:e8:c0:d9:
ef:4d:c9:d7:d0:5e:cd:dc:b3:be:46:1f:7f:b1:76:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:2B:92:9F:72:89:87:0F:55:94:7D:AB:C7:E0:87:80:41:A2:FB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/Uccrkp9yiYcPVZR9q8fgh4BBovs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.247.0/24
31.58.249.0-31.58.250.255
Signature Algorithm: sha256WithRSAEncryption
54:28:5c:79:d9:ba:a5:eb:ac:96:2d:06:cc:67:f9:fe:fa:cc:
cf:13:cf:da:f5:89:d4:9f:cc:0f:f3:83:b3:b9:a9:63:7d:54:
da:9a:1d:0c:75:7a:21:e3:88:ca:64:a4:b5:c7:6b:8b:1b:4e:
34:bf:5b:c4:03:73:f1:cc:71:74:5b:89:cf:a4:a4:ba:bd:c3:
b1:a5:0e:cc:c5:25:e5:07:80:c8:d0:f4:0b:9f:c1:92:96:b3:
d2:b4:44:fe:ea:34:73:8f:3f:36:d0:1d:3e:7c:f9:a1:73:f3:
1a:1f:98:7c:6c:bf:4e:14:f9:3d:9d:6d:08:6d:a0:d4:64:43:
c9:dd:9a:e2:90:86:bf:2d:f7:a6:32:92:da:1b:20:bb:fb:a3:
47:d1:8f:08:c7:b9:02:ee:c0:cd:3f:57:02:ca:1e:a3:ca:93:
04:f7:ef:2b:da:85:a0:0a:49:a3:fb:68:94:87:d1:fb:cb:8d:
00:eb:1c:dc:e1:48:0e:2b:a4:88:21:a9:2f:f2:00:48:ad:86:
a5:07:09:ab:31:70:2c:16:b2:9d:c9:d7:ed:27:d6:8f:1c:ee:
05:98:cd:9c:40:76:e2:34:8f:f5:bf:e9:22:90:90:8c:d6:c9:
37:d8:20:1f:9a:0a:c1:36:61:80:7b:d4:ff:8c:c8:66:a4:c1:
08:7c:1f:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 30 07:43:59 2025 by rpki-client