Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/qVuaH5gRKmc-Hd6yIi1BOdblXYY.roa
File: qVuaH5gRKmc-Hd6yIi1BOdblXYY.roa (raw, json)
Hash identifier: B5OKBmE3Bc+iBnKhO0BpeQX3SCTA76N/vQW358w2Gs4=
Subject key identifier: A9:5B:9A:1F:98:11:2A:67:3E:1D:DE:B2:22:2D:41:39:D6:E5:5D:86
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 01970B9DB9E1788CC0903D3D9FF8610B6B83
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/qVuaH5gRKmc-Hd6yIi1BOdblXYY.roa
Signing time: Mon 26 May 2025 08:02:55 +0000
ROA not before: Mon 26 May 2025 08:02:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41327
IP address blocks: 31.185.96.0/24 maxlen: 24
31.185.98.0/24 maxlen: 24
31.185.99.0/24 maxlen: 24
31.185.100.0/24 maxlen: 24
31.185.102.0/23 maxlen: 24
93.94.88.0/21 maxlen: 24
185.61.168.0/22 maxlen: 24
185.157.228.0/22 maxlen: 24
2a03:b020::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:9d:b9:e1:78:8c:c0:90:3d:3d:9f:f8:61:0b:6b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: May 26 08:02:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a95b9a1f98112a673e1ddeb2222d4139d6e55d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:37:a7:6f:94:b5:b7:34:aa:40:bd:7b:48:
58:57:b4:a0:47:85:8b:f1:cc:9b:42:fe:f0:b7:a1:
c8:90:a4:94:bb:d3:ec:14:6c:15:60:7f:32:ba:cf:
c7:07:30:90:69:0a:68:e6:8b:84:6e:3f:de:84:a1:
a5:21:09:5f:d9:6b:e3:8a:d2:e7:5a:50:63:5f:38:
60:c1:9f:9d:7e:f1:32:74:91:9f:11:aa:d0:b2:98:
3f:c8:3a:4d:75:8f:a0:a4:77:b2:42:94:4a:19:f3:
fa:79:77:92:f9:91:0d:17:be:67:6a:d3:99:37:67:
20:af:c1:7c:92:d8:af:1a:f1:90:5a:f2:7f:b8:44:
6d:e1:9a:39:fa:34:6c:8a:70:19:c8:9c:72:c9:84:
d3:2f:3c:8f:50:9d:d8:8a:30:f9:d9:6c:72:04:ca:
54:de:35:87:af:98:39:c4:80:c4:8b:a8:ba:61:5b:
33:57:f9:84:57:10:89:40:96:76:a0:3a:b0:c4:84:
9c:71:3f:9c:a4:5f:80:63:e3:fb:b8:23:95:be:07:
65:ee:b9:03:fb:40:50:30:70:12:cc:33:27:b6:db:
db:6a:3e:f4:b6:a2:18:3a:4a:4f:7d:90:cc:d9:79:
2e:ad:87:75:b2:a1:67:c4:16:b2:6a:ed:33:23:e2:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:9A:1F:98:11:2A:67:3E:1D:DE:B2:22:2D:41:39:D6:E5:5D:86
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/qVuaH5gRKmc-Hd6yIi1BOdblXYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/24
31.185.98.0-31.185.100.255
31.185.102.0/23
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
Signature Algorithm: sha256WithRSAEncryption
88:fb:df:80:0d:ad:fc:3b:19:fc:0b:c1:c3:7f:b8:53:53:96:
92:b8:3e:44:e0:c6:ae:b3:57:6f:ea:81:d3:01:4d:92:e6:31:
ea:91:43:a9:65:d3:a6:80:a4:12:f6:9c:80:42:77:cd:3e:b6:
0f:10:60:42:8d:99:43:b5:c2:ff:d2:6e:fa:a0:1f:41:dc:f5:
4a:4b:48:0c:33:21:0c:81:c1:93:88:af:7f:6c:49:e0:0b:86:
fd:05:d9:0f:be:77:02:10:48:ae:d6:54:4b:60:f3:90:f0:dd:
d0:b4:57:48:f9:f9:33:45:09:ad:c9:66:ac:36:ec:6d:32:3f:
ec:bc:5c:45:29:7e:c8:50:79:4d:6a:ef:fc:9c:37:31:30:78:
4f:4e:2d:9a:28:28:07:55:ab:f5:aa:c0:d3:b1:5e:cb:e5:eb:
32:31:41:75:8b:73:2b:8e:47:14:e8:fe:d5:23:9d:9a:f0:2d:
8d:43:ec:46:39:fc:a7:0e:54:94:13:08:91:d8:22:8a:b2:ba:
7f:57:19:65:7c:ad:68:9d:c9:cb:f7:51:f7:f3:a1:e7:eb:5d:
25:ff:4f:cd:c7:fe:c5:ea:6a:19:e7:be:1f:19:d9:09:bf:13:
1e:64:8e:7d:3c:17:6f:05:a3:59:cb:78:0a:d1:ef:d6:c4:04:
15:e4:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:37:51 2025 by rpki-client