Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2d_IPVGamuZZc9FfZ4hHucRiP2U.roa
File: 2d_IPVGamuZZc9FfZ4hHucRiP2U.roa (raw, json)
Hash identifier: wU5+aQEuQxjFUCLcXwcqbluLhEFn3i07PoaXRiNlbGY=
Subject key identifier: D9:DF:C8:3D:51:9A:9A:E6:59:73:D1:5F:67:88:47:B9:C4:62:3F:65
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01972196B87CF2EF0262599D2495F588A475
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2d_IPVGamuZZc9FfZ4hHucRiP2U.roa
Signing time: Fri 30 May 2025 14:26:55 +0000
ROA not before: Fri 30 May 2025 14:26:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205463
IP address blocks: 31.58.244.0/24 maxlen: 24
31.58.245.0/24 maxlen: 24
31.58.246.0/24 maxlen: 24
31.58.250.0/24 maxlen: 24
31.58.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:21:96:b8:7c:f2:ef:02:62:59:9d:24:95:f5:88:a4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 30 14:26:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9dfc83d519a9ae65973d15f678847b9c4623f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:0c:e2:e0:f2:27:16:16:dc:25:e6:73:dc:
d9:27:c9:de:d2:44:fe:6e:48:43:1a:3c:07:b7:83:
fb:0b:6f:47:48:7c:e0:91:e7:4e:c0:f4:7a:9f:62:
30:61:10:7a:f1:ec:21:74:fb:89:62:b6:fc:d6:d1:
1c:00:8b:3e:b7:e9:2a:4a:a8:fa:dc:76:ec:62:d9:
a2:a5:16:09:ee:13:46:b7:c4:d2:e1:d2:09:c9:b8:
cb:2d:5a:fa:5b:49:44:27:a0:23:28:b2:c7:7b:a3:
6b:5f:1a:45:87:94:2b:0a:0d:5c:0f:9e:f5:08:93:
47:65:e6:92:e8:44:24:cf:0e:9f:d7:cc:84:ac:e8:
63:2d:6a:0f:1c:4f:42:1a:69:34:03:7f:f8:a3:36:
28:0f:5e:8a:f3:9f:0a:d0:58:e9:ad:6a:22:35:01:
e9:02:1b:11:6d:66:08:74:bc:62:f8:e8:7c:33:b9:
ac:62:ed:2e:5c:6e:80:48:55:c3:74:6c:f7:cf:a1:
df:d7:4c:d1:9e:c0:68:84:40:98:22:14:01:f0:36:
60:5f:ca:a4:48:63:d9:c3:71:bc:cb:37:c4:19:88:
a8:14:87:ca:bb:5b:ce:b2:15:6a:fc:a0:91:43:29:
cc:43:e5:68:34:1b:92:41:b7:bb:4e:20:ae:6e:e2:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:C8:3D:51:9A:9A:E6:59:73:D1:5F:67:88:47:B9:C4:62:3F:65
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/2d_IPVGamuZZc9FfZ4hHucRiP2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.244.0-31.58.246.255
31.58.250.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:df:e7:07:4e:db:93:28:41:e8:7c:b5:40:36:63:3d:7c:d2:
b3:47:e2:0e:3c:0d:5a:db:eb:ca:80:f4:19:06:27:79:e4:e4:
0c:73:07:88:fd:c7:e2:91:e5:97:2e:4d:a4:84:ad:db:f1:0e:
1f:d0:b8:39:a0:ba:7e:d2:c5:41:37:7b:cc:30:21:8b:67:a3:
66:b0:fc:34:fe:c1:47:c4:33:c7:31:8d:9c:1a:8f:3b:71:0b:
e8:84:fa:e3:dc:c2:82:32:03:b1:08:b4:14:86:07:d7:52:f2:
9f:b9:41:d6:f5:bf:60:27:b7:d5:b7:20:0d:d5:08:3c:53:dd:
52:ba:81:01:80:04:76:ff:50:e1:86:82:2d:c1:b9:53:7b:c3:
97:8f:51:9f:8e:99:2b:59:f5:ee:e0:93:96:34:ac:b7:f2:88:
bf:92:7f:24:80:94:a2:89:c2:0b:18:9b:dd:fb:0b:ec:30:79:
41:97:5f:9b:49:ac:21:91:01:b1:a5:ea:7d:48:ea:e9:be:ac:
8d:dc:41:28:f0:c5:ab:de:61:33:63:eb:a4:93:b9:cf:9e:20:
fb:1d:1e:4e:98:93:db:8c:8f:ec:87:7d:78:d6:d2:88:05:a8:
87:78:de:a7:83:19:d7:a2:80:6e:c1:af:ab:31:93:58:9e:8c:
ca:75:0c:c2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZchlrh88u8CYlmdJJX1iKR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNTMwMTQyNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWRmYzgzZDUxOWE5YWU2NTk3M2QxNWY2Nzg4NDdiOWM0NjIzZjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxgM4uDyJxYW3CXmc9zZJ8ne0kT+
bkhDGjwHt4P7C29HSHzgkedOwPR6n2IwYRB68ewhdPuJYrb81tEcAIs+t+kqSqj6
3HbsYtmipRYJ7hNGt8TS4dIJybjLLVr6W0lEJ6AjKLLHe6NrXxpFh5QrCg1cD571
CJNHZeaS6EQkzw6f18yErOhjLWoPHE9CGmk0A3/4ozYoD16K858K0FjprWoiNQHp
AhsRbWYIdLxi+Oh8M7msYu0uXG6ASFXDdGz3z6Hf10zRnsBohECYIhQB8DZgX8qk
SGPZw3G8yzfEGYioFIfKu1vOshVq/KCRQynMQ+VoNBuSQbe7TiCubuIHuQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNnfyD1RmprmWXPRX2eIR7nEYj9lMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvMmRfSVBWR2FtdVpaYzlGZlo0aEh1Y1JpUDJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAIfOvQD
BAAfOvYDBAEfOvowDQYJKoZIhvcNAQELBQADggEBAI/f5wdO25MoQeh8tUA2Yz18
0rNH4g48DVrb68qA9BkGJ3nk5AxzB4j9x+KR5ZcuTaSErdvxDh/QuDmgun7SxUE3
e8wwIYtno2aw/DT+wUfEM8cxjZwajztxC+iE+uPcwoIyA7EItBSGB9dS8p+5Qdb1
v2Ant9W3IA3VCDxT3VK6gQGABHb/UOGGgi3BuVN7w5ePUZ+OmStZ9e7gk5Y0rLfy
iL+SfySAlKKJwgsYm937C+wweUGXX5tJrCGRAbGl6n1I6um+rI3cQSjwxaveYTNj
66STuc+eIPsdHk6Yk9uMj+yHfXjW0ogFqId43qeDGdeigG7Br6sxk1iejMp1DMI=
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:31:15 2025 by rpki-client