Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4d2QZZ-Yg51N0ozxYFeFkxn7Qy8.roa
File: 4d2QZZ-Yg51N0ozxYFeFkxn7Qy8.roa (raw, json)
Hash identifier: GvTYY3vxIUIpSpx5NqRwtadFiwvbmCTuc+PABVRSqfg=
Subject key identifier: E1:DD:90:65:9F:98:83:9D:4D:D2:8C:F1:60:57:85:93:19:FB:43:2F
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0198ED0C52778B66B9836C9DFB856F7C7501
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4d2QZZ-Yg51N0ozxYFeFkxn7Qy8.roa
Signing time: Wed 27 Aug 2025 19:41:04 +0000
ROA not before: Wed 27 Aug 2025 19:41:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 31.187.92.0/22 maxlen: 24
91.210.80.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ed:0c:52:77:8b:66:b9:83:6c:9d:fb:85:6f:7c:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 27 19:41:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1dd90659f98839d4dd28cf16057859319fb432f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:c9:0d:84:4a:da:c2:19:82:69:03:c8:9a:
fa:25:89:4f:bc:00:d7:91:cc:ee:e1:76:2e:9e:78:
b0:d7:20:22:59:00:77:a1:65:d9:d4:7b:47:a2:83:
43:cc:60:5d:9a:a1:d8:e7:ad:65:72:5f:20:bd:8b:
77:3a:82:27:0c:d2:8a:18:54:c2:58:10:bd:8b:f8:
2a:2d:f0:fa:9e:83:94:2b:17:97:97:80:8e:fe:12:
6c:b9:88:3c:8d:d8:c6:11:47:8f:65:d8:eb:77:b8:
20:8b:99:4e:c1:f6:29:a1:6b:3a:3a:4b:12:4b:9f:
dc:8a:eb:5e:8a:cf:55:89:67:e0:fa:8d:39:45:b5:
8b:aa:08:a9:29:b8:e3:70:85:1a:4d:b6:4f:5e:e4:
45:8c:ee:6e:eb:70:dc:40:7e:e3:c1:4d:dd:1a:9a:
80:72:31:6a:8a:2f:0a:8f:9b:56:45:26:5a:02:e9:
51:30:c1:b2:af:e7:f5:06:71:a3:db:4b:3c:6a:bb:
c1:7e:f1:06:09:37:6e:37:ac:b0:a2:fc:6e:74:68:
c3:9d:de:62:da:95:08:ff:bb:c9:bf:6e:9d:1e:19:
1a:04:1c:71:04:ff:b5:f8:d9:de:dc:20:8a:b6:33:
62:b5:3c:97:9b:14:1d:71:b5:69:d2:f5:fc:fc:2b:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:90:65:9F:98:83:9D:4D:D2:8C:F1:60:57:85:93:19:FB:43:2F
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/4d2QZZ-Yg51N0ozxYFeFkxn7Qy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.92.0/22
91.210.80.0/22
192.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f4:e4:a0:dc:c3:5d:27:51:49:c4:58:35:3c:b5:16:f3:14:
6b:d9:19:02:92:55:5a:da:7e:72:64:75:8d:90:e2:dd:92:44:
57:c2:eb:61:8f:f5:c7:16:6d:42:a2:11:4e:73:3e:96:8b:3f:
74:77:5a:c9:aa:91:98:cc:20:80:65:e8:92:d9:aa:34:99:be:
4b:07:33:ac:7b:8b:b8:b8:99:d7:1e:18:42:dd:b1:d6:87:e5:
34:03:a2:66:5f:65:dd:1e:20:c1:26:93:92:0e:46:c4:9b:c5:
a1:5e:9f:f4:61:c8:e3:b6:ed:4e:8c:61:df:9b:29:de:d0:3e:
61:86:15:89:47:67:49:50:c1:6f:6e:1b:23:18:85:e6:38:da:
39:d9:1f:98:76:8b:22:23:c0:cd:a9:f5:51:9d:e4:cf:16:af:
9f:09:37:22:61:0e:f0:17:1b:37:09:4c:0b:d0:c4:5d:7b:01:
7d:fd:50:f6:ee:21:96:c8:ec:3a:a0:0b:c3:12:6f:fa:cb:63:
4a:4b:d5:c1:64:df:49:1c:92:b3:01:b1:33:9a:43:f9:80:de:
63:b9:bd:5d:32:6a:63:16:d5:e2:90:91:34:57:e7:d0:c4:de:
5c:66:49:86:dc:8e:0c:0a:1c:1a:80:88:2a:36:52:41:e1:bd:
44:3a:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:00:16 2025 by rpki-client