Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p5Ezo86-J_cLmvoQ-0_EmV7rXCE.roa
File: p5Ezo86-J_cLmvoQ-0_EmV7rXCE.roa (raw, json)
Hash identifier: shr/OD1Y0ImY4gMyDx4ItMBRe8x591Us4yZLUcWRFp0=
Subject key identifier: A7:91:33:A3:CE:BE:27:F7:0B:9A:FA:10:FB:4F:C4:99:5E:EB:5C:21
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0198363826A5E12D6D87C8340AE139E7DEF3
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p5Ezo86-J_cLmvoQ-0_EmV7rXCE.roa
Signing time: Wed 23 Jul 2025 07:38:26 +0000
ROA not before: Wed 23 Jul 2025 07:38:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142382
IP address blocks: 31.56.74.0/24 maxlen: 24
31.56.121.0/24 maxlen: 24
31.56.199.0/24 maxlen: 24
31.57.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:38:26:a5:e1:2d:6d:87:c8:34:0a:e1:39:e7:de:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 23 07:38:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a79133a3cebe27f70b9afa10fb4fc4995eeb5c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:04:c1:2e:e5:4b:a6:07:6b:07:39:f5:d7:3d:
8e:36:26:54:18:67:5a:44:b5:c8:49:57:76:b1:95:
2b:30:a9:11:7e:fa:71:29:3e:15:e0:8e:e4:62:e8:
cf:84:6a:41:1e:e3:18:9c:90:4b:e4:22:10:52:55:
28:65:e6:bb:3f:3a:b2:6b:53:09:6b:ff:91:6e:32:
3d:91:35:2e:6d:e1:8d:3a:98:e2:1a:f8:5e:09:f7:
e2:0f:e1:87:93:6d:3f:fa:db:66:b8:b2:c8:59:18:
60:8f:09:b0:e0:c0:10:03:53:c4:6a:c1:28:9f:01:
ec:b2:fd:f2:0a:fa:45:f1:35:db:35:b9:ed:c8:46:
1b:9d:ea:4e:75:7c:eb:de:4e:9a:ce:4c:98:cb:20:
82:c6:3c:59:69:20:55:95:f2:c7:2e:4d:13:47:1e:
75:70:fa:67:3b:fa:45:bc:bb:c3:dc:cf:61:e0:d4:
2a:70:e0:70:b3:d4:07:66:0b:fb:02:3f:7d:ad:3f:
55:d1:07:b6:34:3a:60:6b:e7:58:72:5e:26:30:a2:
6a:c7:63:ab:91:97:1f:9d:4b:7b:fa:1e:f2:9d:93:
74:a9:42:e2:66:a2:b3:0d:cb:1f:22:b4:2f:a8:29:
70:2e:93:38:7e:a1:e4:a7:82:bd:7c:f6:83:49:80:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:91:33:A3:CE:BE:27:F7:0B:9A:FA:10:FB:4F:C4:99:5E:EB:5C:21
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/p5Ezo86-J_cLmvoQ-0_EmV7rXCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.74.0/24
31.56.121.0/24
31.56.199.0/24
31.57.183.0/24
Signature Algorithm: sha256WithRSAEncryption
56:de:93:19:f8:c1:a4:76:4d:62:19:87:f8:b7:3b:34:88:d9:
fd:f2:70:6f:64:dd:ba:5e:27:af:4a:af:b1:a8:e9:3b:6e:4d:
53:07:9b:35:92:36:df:16:97:dc:5a:5c:f2:8d:a7:0f:56:f0:
ba:05:65:7c:c3:7c:ad:b4:10:f2:a1:f7:39:5e:1c:e9:df:74:
ff:46:3f:20:53:fc:5f:9f:ce:53:f8:49:78:3d:78:51:87:71:
c3:6f:1f:0c:ab:6f:fa:97:a9:42:06:48:43:3c:63:b8:e3:8e:
2a:e6:a8:b7:4e:a6:29:7d:83:6b:be:83:b9:cd:5c:1a:76:82:
6c:cd:d4:03:62:59:04:99:d0:6c:32:9b:7e:23:cc:e9:d2:0d:
55:2d:6e:16:56:65:a0:80:d9:f3:c5:8a:25:ac:19:71:e0:b7:
d3:21:32:6e:8b:7a:5d:46:c0:b8:da:07:ae:d6:e2:e3:d2:2e:
67:ef:79:0f:f1:52:b0:00:ea:06:ec:b8:d3:ee:2c:3d:d7:6a:
c7:27:5f:41:4e:c6:fe:dd:38:e2:88:95:53:37:cd:de:a0:ec:
d8:f4:18:56:8a:2d:21:d3:31:74:67:17:3a:c7:41:66:71:e8:
89:34:df:b5:f3:e0:b8:05:35:32:64:c1:82:94:7f:af:d7:21:
3c:97:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:39:30 2025 by rpki-client