Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ale_Q1sCcGcc2gk5Ou_t6nsaIpY.roa
File: Ale_Q1sCcGcc2gk5Ou_t6nsaIpY.roa (raw, json)
Hash identifier: gXHC4RxRbGmiH1cIb+i94Wao6hVtzoBukvULOA59bWE=
Subject key identifier: 02:57:BF:43:5B:02:70:67:1C:DA:09:39:3A:EF:ED:EA:7B:1A:22:96
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0196FD49346576F96CAA8BF910679E3939F5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ale_Q1sCcGcc2gk5Ou_t6nsaIpY.roa
Signing time: Fri 23 May 2025 13:15:55 +0000
ROA not before: Fri 23 May 2025 13:15:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203553
IP address blocks: 31.148.175.0/24 maxlen: 24
92.38.5.0/24 maxlen: 24
93.170.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fd:49:34:65:76:f9:6c:aa:8b:f9:10:67:9e:39:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 23 13:15:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0257bf435b0270671cda09393aefedea7b1a2296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:8c:ce:ee:cf:d8:05:d0:d8:a2:de:ee:14:
9b:bc:86:93:5b:9a:b8:8d:1d:de:f8:4c:2a:9e:37:
82:e2:f0:6d:0d:93:55:8c:b2:e1:f4:7d:d0:99:ac:
c8:a2:b4:dc:44:fe:28:6d:97:9b:ee:be:92:6d:54:
8f:fe:1a:f3:bc:c1:5a:54:31:d6:4e:19:df:c8:5f:
90:5d:55:9b:86:e8:b1:32:93:fe:95:93:c3:a5:53:
84:02:2b:83:77:44:e5:68:d7:86:5e:72:81:cc:52:
c1:2c:15:f5:77:2c:03:84:55:dd:43:2b:75:ed:49:
a9:8a:2b:18:e2:52:fd:b6:7c:3c:d4:b5:1b:78:eb:
4c:c6:97:75:5a:59:9f:2a:1f:85:f5:59:f7:6f:54:
b5:ab:5c:ba:fd:b4:b5:f6:b4:55:84:c7:24:28:92:
26:9a:b5:ff:b9:05:e1:53:bd:d8:27:4b:89:a6:3e:
c3:95:5d:97:a9:36:4b:5f:c5:b7:70:92:84:7d:d8:
00:fb:04:7f:d0:cb:b9:df:3f:68:e8:7d:e2:8a:88:
f4:e5:86:82:90:2c:2a:44:b0:45:dd:c6:58:d7:f4:
c8:b1:f2:6e:de:bf:1f:14:38:66:be:51:06:52:d7:
ee:66:65:a7:13:41:62:b4:e5:37:fc:4c:f9:3c:7c:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:57:BF:43:5B:02:70:67:1C:DA:09:39:3A:EF:ED:EA:7B:1A:22:96
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Ale_Q1sCcGcc2gk5Ou_t6nsaIpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.175.0/24
92.38.5.0/24
93.170.164.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ac:38:0f:70:43:54:4c:74:6d:7b:ab:a6:7b:87:27:e5:73:
1d:b8:82:cb:d6:00:0a:5a:24:d8:b2:81:1d:85:19:74:d5:68:
8b:41:73:82:b7:e8:64:76:38:3b:20:16:10:1a:cd:87:26:f3:
1f:8c:35:d8:1a:d5:e9:00:ec:1f:1a:4e:6f:fe:dc:7d:a3:9b:
15:91:43:56:19:10:7c:1c:06:05:87:27:cf:3f:2d:a1:a6:2d:
d5:86:9d:54:bd:46:0c:af:d5:07:cb:6d:82:9b:4c:64:65:00:
c2:68:9b:36:ca:bf:98:f2:ae:47:b4:12:18:eb:b4:f6:2f:22:
66:59:75:e1:72:3f:00:31:4d:50:58:97:d1:92:c8:00:20:bb:
12:1d:fb:d2:71:a7:4f:1b:61:84:4b:fb:29:e0:16:fb:28:e0:
49:db:f6:fb:2d:25:1c:f4:f7:a6:23:33:2a:92:8f:bb:d3:29:
99:08:5f:9f:a8:1b:20:e0:96:30:0d:58:44:7e:69:2d:a3:d7:
14:80:f0:aa:44:c1:e1:9d:f6:38:11:c9:a7:e0:34:0d:66:1a:
5b:ca:98:50:e9:9f:65:00:2f:93:87:ce:90:d4:fc:df:da:35:
f7:4b:62:ca:87:49:7e:88:8a:73:ca:e2:42:26:5b:1b:65:5d:
29:db:80:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 09:17:26 2025 by rpki-client