Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/6_xNKvKsiyZMdKMukhQ7G0PNeao.roa
File: 6_xNKvKsiyZMdKMukhQ7G0PNeao.roa (raw, json)
Hash identifier: 9ruVW6EaPvHe/h/BSSLEev3gfYXJbsL78/n89CguJ0c=
Subject key identifier: EB:FC:4D:2A:F2:AC:8B:26:4C:74:A3:2E:92:14:3B:1B:43:CD:79:AA
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 0198E5C7F8B96AC24257D5D5E81A91F4761E
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/6_xNKvKsiyZMdKMukhQ7G0PNeao.roa
Signing time: Tue 26 Aug 2025 09:49:04 +0000
ROA not before: Tue 26 Aug 2025 09:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51683
IP address blocks: 31.40.241.0/24 maxlen: 24
31.40.243.0/24 maxlen: 24
185.9.138.0/24 maxlen: 24
185.115.209.0/24 maxlen: 24
2a07:9d40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:c7:f8:b9:6a:c2:42:57:d5:d5:e8:1a:91:f4:76:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Aug 26 09:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebfc4d2af2ac8b264c74a32e92143b1b43cd79aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:a0:03:45:f9:8f:63:26:48:0f:d1:0a:57:
91:5e:27:27:30:3e:f6:0c:26:1c:84:61:ff:ee:ed:
f0:c1:85:7d:3e:7c:60:03:a3:e5:aa:18:09:e3:75:
e7:a2:b3:7a:b9:f4:f7:05:8b:fa:57:84:29:f5:e8:
7e:1d:26:6c:79:a0:4b:0b:25:5e:fd:df:3e:f1:90:
99:80:1b:94:a7:90:cd:57:7d:07:43:b0:81:d5:a7:
f9:2b:72:f6:14:67:73:0a:b5:78:1e:37:8a:5a:ca:
e6:cc:82:fc:62:df:d2:1a:c9:a3:5f:10:44:40:de:
10:c5:1c:0c:3b:b6:19:ce:76:34:69:97:ce:ef:5d:
01:54:4a:b1:e6:d6:22:23:33:2f:d7:28:44:51:c9:
b2:73:c6:37:f8:85:ec:80:24:26:db:5a:94:93:71:
ef:a4:e1:7e:65:20:41:13:09:34:3c:93:ae:06:1c:
4a:c5:97:51:7a:31:95:56:2d:0d:67:ff:83:b5:ee:
15:5a:a5:64:94:22:52:24:91:d8:7d:26:b2:74:0c:
5c:07:a7:e3:12:06:ea:12:a8:6d:8d:fc:4d:38:5d:
b0:2e:4a:24:da:6f:fa:cc:d7:7a:69:a2:ed:8a:0e:
f0:2a:f7:a5:15:20:db:02:29:4b:f8:f7:7d:9c:5f:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FC:4D:2A:F2:AC:8B:26:4C:74:A3:2E:92:14:3B:1B:43:CD:79:AA
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/6_xNKvKsiyZMdKMukhQ7G0PNeao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.241.0/24
31.40.243.0/24
185.9.138.0/24
185.115.209.0/24
IPv6:
2a07:9d40::/29
Signature Algorithm: sha256WithRSAEncryption
76:99:51:79:7c:c0:81:45:f4:08:b5:ef:a2:12:18:fe:f9:96:
6b:2a:e5:f7:b5:8e:fb:b5:c8:a6:d2:cf:ab:9e:7b:c2:d1:1f:
f6:46:1a:7e:43:94:c1:a1:94:96:c2:9d:d4:f4:8d:83:20:ee:
d3:59:e8:22:98:d4:c8:6c:35:79:ae:87:a3:ec:90:1f:43:80:
ac:57:2f:a9:a3:0c:c5:19:f4:a6:2c:06:35:b5:7e:c2:97:d5:
aa:13:29:8e:20:9f:76:c4:ad:7f:cc:46:3e:25:3f:52:1e:cb:
bd:58:78:80:59:e8:bf:7b:f0:9a:e6:18:f3:a3:bc:3e:81:e0:
dd:cb:a9:b7:55:67:90:f1:b0:10:e5:8f:40:aa:92:b6:75:b2:
0c:c9:b5:cf:3c:90:69:e4:7d:88:fa:9b:98:64:12:89:fe:2d:
f0:a3:13:66:89:47:a3:e4:f7:c4:9e:21:7f:a5:31:fc:e1:34:
ce:8f:3c:0e:b7:bd:ba:8a:d1:ba:6c:98:b7:2e:12:dc:94:a3:
74:ee:22:c5:79:96:9a:1c:77:cc:77:7a:4f:1d:94:92:a8:f4:
4f:ed:b9:48:ed:37:92:86:a8:d9:6e:e1:e6:53:14:e7:56:c2:
0f:63:75:12:14:bd:92:f4:a8:56:08:97:c9:df:97:9d:23:f6:
5f:58:16:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:40:43 2025 by rpki-client