Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DAe_8_mXwNsjPb4NLeReUHQXlxo.roa
File: DAe_8_mXwNsjPb4NLeReUHQXlxo.roa (raw, json)
Hash identifier: Wvi127dxRm3laLdm/CdsV+FSDUN/hs3sxJnf1rig2Ik=
Subject key identifier: 0C:07:BF:F3:F9:97:C0:DB:23:3D:BE:0D:2D:E4:5E:50:74:17:97:1A
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019932A474A14320F6DF6559823CB4EBFEE1
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DAe_8_mXwNsjPb4NLeReUHQXlxo.roa
Signing time: Wed 10 Sep 2025 08:01:02 +0000
ROA not before: Wed 10 Sep 2025 08:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47376
IP address blocks: 31.56.211.0/24 maxlen: 24
31.59.168.0/24 maxlen: 24
94.183.151.0/24 maxlen: 24
94.183.158.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a4:74:a1:43:20:f6:df:65:59:82:3c:b4:eb:fe:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 08:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c07bff3f997c0db233dbe0d2de45e507417971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:af:4d:7b:06:d1:50:a4:16:ad:1f:63:df:d7:
45:ce:db:5e:1c:dc:fb:aa:49:39:4f:01:ef:0e:48:
8e:02:22:87:69:c5:0c:c5:93:e1:a5:ac:56:fa:fe:
d8:82:c0:2f:77:50:a4:a2:e0:2e:ad:af:0c:82:1d:
50:e8:58:8f:5d:cc:c8:66:30:a3:28:f4:ad:05:77:
f0:07:bc:0f:0b:11:30:8f:68:76:6f:7e:c0:31:44:
7f:5c:5e:50:a6:d5:b7:ef:47:ad:31:1e:29:7f:e0:
87:c4:3b:95:f7:cb:a4:bd:59:95:41:6a:9e:dc:15:
94:63:64:9c:8a:52:de:a8:9a:c2:a6:24:ac:4a:17:
7e:d0:cb:cb:a6:eb:e7:d2:f6:b5:c6:6e:dc:9d:3f:
38:07:f7:73:f4:14:a9:4f:9c:3b:52:ea:37:6d:a8:
9e:36:d7:47:30:b2:da:74:9e:23:1b:12:53:a5:d8:
d2:af:61:12:8d:dd:eb:ed:0d:2c:dc:15:0d:78:29:
b6:d2:63:60:fe:42:3d:ab:6a:cf:bc:95:9c:fc:a5:
5c:c5:a8:f9:e5:ee:1e:f9:69:bd:d8:5c:3c:b8:d4:
bf:86:67:10:93:67:b5:8d:14:b1:42:21:5a:cf:d5:
d1:9a:86:7f:54:1f:95:ce:4c:83:e4:49:a3:57:b1:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:07:BF:F3:F9:97:C0:DB:23:3D:BE:0D:2D:E4:5E:50:74:17:97:1A
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/DAe_8_mXwNsjPb4NLeReUHQXlxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.211.0/24
31.59.168.0/24
94.183.151.0/24
94.183.158.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
24:65:0a:96:59:3c:9f:dc:56:0a:51:0a:fa:75:d0:14:5d:15:
73:62:dd:cf:e9:16:8b:11:91:91:bc:f7:98:28:3e:c8:8f:05:
fc:0f:d6:c4:1c:9e:0b:d9:34:05:a4:3a:47:a1:a4:6c:a0:c8:
87:63:d1:62:f8:a9:0a:51:41:ae:36:5d:21:66:21:b3:9c:9f:
04:de:43:e7:fa:d4:0a:5e:bb:e7:1d:3b:5c:20:1f:c6:ba:02:
c8:d6:1c:0a:d4:0a:ff:14:96:ad:fb:33:ee:91:f6:17:f2:63:
e0:49:1f:6c:9b:62:fb:71:7d:75:7a:d0:5a:df:6d:12:3c:95:
21:91:d2:46:ea:e4:00:47:0d:a3:ed:a9:0a:0f:19:98:74:bb:
e4:5e:68:76:f0:8c:4d:c3:92:82:b7:03:71:83:da:64:fd:3d:
d3:6c:04:4b:d3:64:ed:33:1b:a4:30:df:81:2b:33:74:09:1a:
2f:dc:1d:b2:e3:35:ae:9f:22:c4:ec:f5:86:4e:20:ee:fc:44:
5e:d1:ad:f5:30:b7:fa:e2:67:94:bb:fc:cf:56:8d:a4:4f:0d:
78:5c:89:70:7f:58:5f:01:63:f9:da:66:fe:db:1d:66:09:7f:
e5:a2:1d:04:66:51:8a:27:1f:0b:b4:da:4d:69:8c:86:aa:2b:
46:53:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:32:39 2025 by rpki-client