Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/snupTYoK5juck4950rcxQ6ysnyE.roa
File: snupTYoK5juck4950rcxQ6ysnyE.roa (raw, json)
Hash identifier: MCWx177AVZHwrzPQ5nBKazdfxzPlPaDjIQCFhFzpb+A=
Subject key identifier: B2:7B:A9:4D:8A:0A:E6:3B:9C:93:8F:79:D2:B7:31:43:AC:AC:9F:21
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0197F9FE6846B6E7EB44ACC0DFF94629FC51
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/snupTYoK5juck4950rcxQ6ysnyE.roa
Signing time: Fri 11 Jul 2025 14:58:09 +0000
ROA not before: Fri 11 Jul 2025 14:58:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 31.56.88.0/24 maxlen: 24
31.56.236.0/24 maxlen: 24
31.57.11.0/24 maxlen: 24
31.57.57.0/24 maxlen: 24
31.57.131.0/24 maxlen: 24
31.57.150.0/24 maxlen: 24
31.57.176.0/24 maxlen: 24
31.57.194.0/24 maxlen: 24
31.58.59.0/24 maxlen: 24
31.58.71.0/24 maxlen: 24
31.58.146.0/24 maxlen: 24
31.59.14.0/24 maxlen: 24
31.59.30.0/24 maxlen: 24
31.59.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f9:fe:68:46:b6:e7:eb:44:ac:c0:df:f9:46:29:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jul 11 14:58:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b27ba94d8a0ae63b9c938f79d2b73143acac9f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:4e:94:1d:d6:f3:f5:e2:5b:0b:6c:c5:98:
ec:e2:4e:44:c5:70:86:ef:3a:d3:fb:62:e1:da:77:
97:3d:22:76:d7:13:79:6c:5e:d0:af:64:50:cd:d7:
7d:ab:c0:a2:8a:da:fa:97:8a:9a:5f:04:1c:59:43:
c6:0e:a7:f8:c8:7f:b2:fb:b9:04:d7:bb:17:11:38:
22:90:39:14:de:c0:f8:82:1c:31:c3:1d:40:12:19:
ea:1a:7b:50:a5:8f:f7:75:c1:70:0d:a9:9b:a9:be:
28:0e:ec:61:9f:48:bb:30:46:2c:17:75:a5:81:c2:
bb:ba:86:1b:6c:94:ee:34:1a:4f:7f:95:3d:f2:65:
ad:f2:96:b1:44:5a:cb:b1:0c:00:78:d3:62:e6:54:
75:b5:b7:12:c7:f4:e7:61:9c:ed:e6:43:8d:38:f7:
e0:90:c2:c8:87:c7:f3:db:40:af:7e:57:e4:8e:04:
4e:66:62:4c:26:59:a0:f2:93:64:78:97:fd:4e:0e:
d5:05:7a:a0:a3:70:2a:4f:a9:e4:55:87:eb:c8:9f:
c4:75:81:5f:36:e1:e4:fd:f3:71:f1:80:8d:04:55:
19:bc:61:a0:41:5c:41:de:6b:7a:58:af:25:3a:83:
14:7b:b2:88:1b:ce:dd:23:00:70:f4:6f:3a:0c:65:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7B:A9:4D:8A:0A:E6:3B:9C:93:8F:79:D2:B7:31:43:AC:AC:9F:21
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/snupTYoK5juck4950rcxQ6ysnyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.88.0/24
31.56.236.0/24
31.57.11.0/24
31.57.57.0/24
31.57.131.0/24
31.57.150.0/24
31.57.176.0/24
31.57.194.0/24
31.58.59.0/24
31.58.71.0/24
31.58.146.0/24
31.59.14.0/24
31.59.30.0/24
31.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8c:3e:04:fc:6b:ad:96:8c:cb:43:30:06:34:3a:6c:8a:ed:
5b:9d:31:87:ae:67:74:42:fe:c5:41:a9:ca:8f:80:5f:1c:c1:
03:28:ab:01:32:54:ad:7e:c9:d2:91:ca:02:db:f5:14:d1:b9:
f3:05:a6:9e:6e:ba:40:d1:0d:bd:b5:6b:71:4b:40:7e:ca:ed:
e2:87:9b:61:d3:50:8d:16:41:74:dc:34:f9:c9:23:5b:6d:14:
11:62:1e:0e:a1:dd:e3:35:54:b1:b3:82:8e:03:78:17:20:fc:
f0:36:5c:3e:6c:23:9a:bc:48:b4:bb:6a:11:69:2d:55:da:48:
d6:7e:b1:91:b7:4b:10:b0:0b:e6:77:8b:bd:bf:18:cf:c3:4f:
69:b7:13:68:0f:60:d0:23:d7:a4:58:8c:cd:09:19:9b:97:27:
74:46:cb:99:05:68:a6:30:db:32:82:6d:e6:86:11:09:21:dc:
81:74:c0:08:8e:d6:1c:b0:ae:54:14:c4:1a:96:da:b5:b8:a5:
5b:ef:4f:b7:ef:7d:49:cc:69:fe:fe:5b:6c:1f:a9:63:66:72:
a8:59:10:b4:05:1c:1d:73:5b:e5:f7:d6:f2:71:9a:aa:25:28:
d3:e1:98:3b:1d:a1:f1:39:88:25:9e:ce:e0:33:d8:f2:97:80:
b0:bc:4c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:44:14 2025 by rpki-client