Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G-TMzAKeRCtvJLRFj-Pd5PkZnJE.roa
File: G-TMzAKeRCtvJLRFj-Pd5PkZnJE.roa (raw, json)
Hash identifier: CM4rl/ybdYPia8Q9yBbHFuXwdNefJlO1COIQq+38ly0=
Subject key identifier: 1B:E4:CC:CC:02:9E:44:2B:6F:24:B4:45:8F:E3:DD:E4:F9:19:9C:91
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197366FAE3DBB0DCFA0C9C04B7744312BFB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G-TMzAKeRCtvJLRFj-Pd5PkZnJE.roa
Signing time: Tue 03 Jun 2025 15:36:18 +0000
ROA not before: Tue 03 Jun 2025 15:36:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
45.12.254.0/24 maxlen: 24
45.14.165.0/24 maxlen: 24
45.81.243.0/24 maxlen: 24
45.88.67.0/24 maxlen: 24
84.21.172.0/24 maxlen: 24
85.31.45.0/24 maxlen: 24
85.209.132.0/24 maxlen: 24
85.209.134.0/24 maxlen: 24
93.123.30.0/24 maxlen: 24
94.125.100.0/24 maxlen: 24
94.125.101.0/24 maxlen: 24
109.206.241.0/24 maxlen: 24
192.145.28.0/24 maxlen: 24
192.145.29.0/24 maxlen: 24
192.145.30.0/24 maxlen: 24
192.145.31.0/24 maxlen: 24
212.87.220.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:6f:ae:3d:bb:0d:cf:a0:c9:c0:4b:77:44:31:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 3 15:36:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1be4cccc029e442b6f24b4458fe3dde4f9199c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:1f:4f:51:95:90:dc:b0:bf:ba:bb:37:f2:
a1:a0:73:67:43:a5:41:66:b5:47:6e:33:19:80:8b:
13:d1:58:cd:56:d9:bd:04:53:5f:22:1f:c6:35:f0:
6c:8e:05:26:b8:c9:01:6f:b5:51:b5:97:c5:63:1c:
70:81:99:0a:ff:98:41:e2:d8:23:ec:30:15:33:41:
b7:8e:dc:06:29:d4:71:ed:51:97:5b:95:63:cb:88:
24:18:9d:d8:5e:56:1a:ee:e2:0d:91:9b:40:d8:f2:
5b:a6:ba:83:bd:a9:32:84:05:48:1a:1d:b3:0c:51:
b3:92:85:dc:a4:03:a6:84:a5:f5:93:d8:ac:14:0e:
22:ac:b4:26:12:14:39:00:21:b5:4a:b4:bf:db:e0:
a7:9e:b0:6f:89:f5:2d:eb:d3:0f:fb:f1:ba:e0:8a:
1e:1a:e9:c1:b3:1c:d3:2d:45:e7:9c:ba:a9:13:98:
d8:e4:15:5f:f0:30:b4:cb:03:0d:a2:f0:91:c7:44:
d5:0c:8c:2b:69:36:05:ec:f2:3e:86:52:00:0f:b4:
2d:74:2f:36:86:55:11:5f:ff:77:5d:b4:7a:0a:b8:
d5:b6:8d:0c:90:82:11:83:13:4f:72:8b:eb:eb:e3:
ef:4a:b4:00:d6:b4:81:58:8d:17:c9:3b:db:80:c6:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:CC:CC:02:9E:44:2B:6F:24:B4:45:8F:E3:DD:E4:F9:19:9C:91
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/G-TMzAKeRCtvJLRFj-Pd5PkZnJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0-31.169.126.255
45.12.254.0/24
45.14.165.0/24
45.81.243.0/24
45.88.67.0/24
84.21.172.0/24
85.31.45.0/24
85.209.132.0/24
85.209.134.0/24
93.123.30.0/24
94.125.100.0/23
109.206.241.0/24
192.145.28.0/22
212.87.220.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5e:b5:d1:6b:00:36:9f:73:65:bd:db:bb:10:c2:1e:a4:47:
a6:f0:65:31:14:11:2b:b9:96:5b:4d:d3:97:b6:09:3e:cd:f7:
af:ba:82:b7:9f:1d:e4:f1:ad:87:4d:1c:f4:29:70:1f:77:df:
73:78:23:62:78:99:16:88:b5:02:2e:df:7a:3d:34:8a:e4:99:
aa:2d:a9:d3:e1:98:75:4a:29:a0:5c:d1:3e:50:35:de:0e:e3:
97:07:2b:26:3c:79:32:d2:49:38:42:47:59:e3:b9:67:1c:f5:
79:80:5c:a0:b0:88:67:d5:b2:7f:a9:5b:75:dd:3d:c7:a6:f7:
47:5a:70:0d:46:b1:aa:2e:45:4b:dd:c7:bf:59:79:65:4f:1c:
1a:79:e1:8e:05:68:c3:e5:63:d7:41:7a:ba:e9:da:e3:13:29:
04:8f:45:91:aa:a1:18:ce:42:71:37:90:e2:8f:a9:1a:40:67:
f2:11:e6:da:c5:da:d7:ce:e2:44:19:a3:af:8f:20:ba:d2:94:
26:cb:22:d9:d6:70:b9:30:b4:79:e9:7a:a8:18:81:e8:3d:1c:
6e:75:a2:bb:81:ea:aa:0c:ba:8f:78:a1:03:df:17:5f:53:13:
d5:60:5c:03:69:c3:f9:fd:c4:6a:c5:ed:3d:36:12:29:d1:51:
4e:b0:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:28:40 2025 by rpki-client