Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sNHg-l2M5CdQynBIHEnbLhHRmSA.roa
File: sNHg-l2M5CdQynBIHEnbLhHRmSA.roa (raw, json)
Hash identifier: +4JWXQhPc7DH2cHJbOkT7jXKNQN1zlYFwJ9OBUva0MM=
Subject key identifier: B0:D1:E0:FA:5D:8C:E4:27:50:CA:70:48:1C:49:DB:2E:11:D1:99:20
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197E38C2A5B60F109A0621EEBB18CE2519E
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sNHg-l2M5CdQynBIHEnbLhHRmSA.roa
Signing time: Mon 07 Jul 2025 06:21:43 +0000
ROA not before: Mon 07 Jul 2025 06:21:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 31.56.144.0/24 maxlen: 24
31.57.144.0/24 maxlen: 24
217.60.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:8c:2a:5b:60:f1:09:a0:62:1e:eb:b1:8c:e2:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 7 06:21:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0d1e0fa5d8ce42750ca70481c49db2e11d19920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:11:4b:0c:60:98:51:04:cb:b4:04:e6:8f:
5f:67:49:e6:2f:bc:45:24:a4:a7:13:5b:e7:c1:5f:
a2:f4:56:f7:bf:7d:07:47:57:06:73:d3:54:1e:87:
28:01:7b:27:15:bc:ca:51:29:83:78:56:7d:01:ed:
57:0a:08:36:f5:f7:87:7c:7f:1d:5d:78:5b:40:25:
7c:f6:6e:9a:2a:da:af:eb:90:70:b4:ce:f0:d2:4f:
0a:14:7f:08:19:ad:f6:b5:8c:d1:89:9e:6e:03:45:
47:4a:d7:38:a0:7b:4c:dd:18:55:a4:b4:6a:fb:65:
30:8e:fa:6a:6a:5d:bb:09:a7:ea:c0:27:20:ee:80:
ee:6e:25:76:8d:77:0f:d3:c4:b8:9b:95:a5:c6:56:
6a:4e:64:78:6e:47:a3:6d:d8:48:84:d1:81:36:87:
2e:02:97:77:e9:e3:72:7c:d7:3f:f5:e8:c9:90:2e:
0c:c2:01:fd:04:28:3c:b5:64:04:4d:40:1a:4a:b8:
2d:27:2c:a4:d1:4d:f6:9c:44:d5:4d:38:3a:73:93:
e5:04:01:3f:fa:e5:7a:10:23:0e:2f:82:b5:fd:f1:
bb:40:1c:bd:e6:bb:af:84:e9:e7:83:d4:1b:0e:33:
97:5f:08:20:ee:56:3b:ec:35:36:24:40:85:68:b1:
1b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D1:E0:FA:5D:8C:E4:27:50:CA:70:48:1C:49:DB:2E:11:D1:99:20
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/sNHg-l2M5CdQynBIHEnbLhHRmSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.144.0/24
31.57.144.0/24
217.60.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c6:1e:a5:a8:d1:76:c5:e0:2d:1c:19:f9:69:e9:b4:c6:ac:
52:ab:86:42:04:21:d3:1e:9e:e9:8f:f5:0f:90:b4:8c:6f:f8:
a2:76:3d:01:57:73:9e:6b:68:ee:c2:5f:c2:4a:92:12:3b:01:
c2:81:65:b6:f7:bc:3d:29:d2:4b:32:74:a8:a4:7d:33:ba:3a:
a8:bb:44:3c:58:08:c3:c2:af:f4:c2:ba:ff:39:63:61:11:56:
db:da:b0:3f:54:4e:78:df:89:31:fa:15:88:5f:d0:7f:28:bf:
68:77:b5:cd:2a:bb:4f:55:53:6f:f1:bf:e8:9f:ff:95:bc:53:
0a:56:c9:8c:33:b9:70:a0:10:ee:3c:54:4b:30:8e:ea:8b:61:
33:15:73:ad:42:37:ac:eb:7c:e3:52:91:e7:ab:65:39:ad:48:
03:9a:ec:c0:90:12:9e:1c:56:fb:54:31:4d:1c:03:4a:b3:90:
ba:aa:6f:9c:af:b2:4b:e3:8c:12:d1:b6:6a:77:11:26:ae:1e:
d6:f5:5d:ba:c3:4e:24:a0:3f:10:a2:a8:f9:6b:8f:0d:c5:7b:
45:f3:6c:5c:94:31:ed:b3:e9:14:0e:13:5e:7a:18:06:88:5a:
4b:d7:0a:e9:6c:1a:72:54:b0:9f:a9:f5:36:7e:c8:b8:5e:8d:
f1:c9:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 05:47:07 2025 by rpki-client