Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/31eja_tbnq_0jWNTgyvlK_3Sing.roa
File: 31eja_tbnq_0jWNTgyvlK_3Sing.roa (raw, json)
Hash identifier: rmbPmmaIu4C2re+gcy24kBfyHlmaf45FfJvIO49/pOs=
Subject key identifier: DF:57:A3:6B:FB:5B:9E:AF:F4:8D:63:53:83:2B:E5:2B:FD:D2:8A:78
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01994C178D0A73265BD4AAD23DC85F5EDA7B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/31eja_tbnq_0jWNTgyvlK_3Sing.roa
Signing time: Mon 15 Sep 2025 06:37:15 +0000
ROA not before: Mon 15 Sep 2025 06:37:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 984
IP address blocks: 45.141.168.0/23 maxlen: 24
148.222.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:17:8d:0a:73:26:5b:d4:aa:d2:3d:c8:5f:5e:da:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 15 06:37:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df57a36bfb5b9eaff48d6353832be52bfdd28a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:d2:cf:10:19:08:21:f4:69:30:62:be:89:
83:97:0f:c4:cb:ef:52:d5:8e:51:07:a7:cf:e5:34:
f6:c3:8e:55:32:1b:af:b9:26:3e:ad:b7:23:16:da:
8d:50:21:c2:78:21:14:e7:39:3a:53:0f:66:30:24:
8a:31:9f:0c:e2:e2:72:65:27:2d:bf:40:4b:c9:9d:
a8:57:85:f0:8a:21:ef:57:8f:31:ca:c1:06:e1:07:
42:a8:23:35:d7:8c:07:c5:b1:70:88:3f:f8:42:49:
02:63:1c:0d:3c:da:61:38:4c:e0:63:5a:8c:dd:1e:
1c:c0:fc:8f:ef:c2:61:6d:6d:b6:47:0b:0f:86:18:
13:08:88:ee:70:f8:32:10:52:2f:08:c3:7d:2d:ef:
0f:3a:b5:2a:0c:26:a3:25:30:d3:60:61:ca:8d:cd:
0f:f7:52:52:05:e2:30:da:fe:23:8b:03:a7:d6:6e:
ad:83:e2:27:21:29:55:a4:32:38:e6:80:25:c2:d6:
93:36:ca:16:4d:50:22:d7:19:9f:b9:0a:98:b2:fb:
2d:f6:79:86:9c:72:be:d6:d1:1f:df:be:10:69:1f:
70:e7:ac:ad:eb:f4:93:97:50:a7:9b:76:05:68:ab:
bc:5f:22:b2:3b:9d:af:27:05:d3:0e:67:24:13:c9:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:A3:6B:FB:5B:9E:AF:F4:8D:63:53:83:2B:E5:2B:FD:D2:8A:78
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/31eja_tbnq_0jWNTgyvlK_3Sing.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
148.222.240.0/22
Signature Algorithm: sha256WithRSAEncryption
78:49:14:99:6d:c5:a8:1a:f6:d3:1f:6f:42:8e:76:3d:66:ab:
b2:d7:9d:e0:52:dc:24:27:35:6b:02:b2:95:ef:71:32:90:e3:
59:d2:9b:9a:66:4f:34:0d:88:33:7f:c5:a6:24:b2:50:15:a1:
8b:52:48:f2:d0:c0:2d:60:ee:62:1e:56:ff:a6:b6:f1:a6:41:
74:91:42:fe:61:d8:81:c7:42:8b:fc:14:29:68:72:b3:f0:87:
44:aa:91:dc:b3:ea:bb:84:b4:7b:6a:eb:e2:3e:9c:81:c2:17:
ec:0b:36:8d:42:31:cd:19:5e:33:83:8a:5f:c9:23:83:26:44:
10:ee:94:68:df:c1:45:94:03:c5:a8:77:32:74:c9:30:aa:6b:
71:14:d1:1e:f7:21:6a:29:b4:89:66:cd:6e:07:9a:16:95:cc:
41:6d:cc:33:ae:a5:d8:9d:78:a5:50:e7:51:e4:61:1b:39:8a:
d2:a2:24:45:43:e1:e5:ae:88:54:20:1b:15:40:ba:d6:9f:a0:
41:a3:42:ee:4a:b0:f8:b2:3d:64:68:a9:52:d4:f3:b0:81:3c:
95:d9:b2:60:f7:7c:f5:67:b2:d5:08:aa:4c:77:bb:90:a2:1e:
1d:22:35:7d:ff:45:3c:a7:f9:da:5d:2f:ef:4f:00:68:fa:87:
80:24:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:32 2025 by rpki-client