Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/fTWM1zKEU10CvPHR7x8xLqGMmBk.roa
File: fTWM1zKEU10CvPHR7x8xLqGMmBk.roa (raw, json)
Hash identifier: SLdOjrmdsiTj6gBhRX9Fmq3urmuPys2J1yZIBUXb9kE=
Subject key identifier: 7D:35:8C:D7:32:84:53:5D:02:BC:F1:D1:EF:1F:31:2E:A1:8C:98:19
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 0196392BFA4D401CABB8B7DB787EBB1B99C2
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/fTWM1zKEU10CvPHR7x8xLqGMmBk.roa
Signing time: Tue 15 Apr 2025 11:18:25 +0000
ROA not before: Tue 15 Apr 2025 11:18:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51032
IP address blocks: 31.128.128.0/19 maxlen: 24
31.130.0.0/19 maxlen: 24
31.130.12.0/22 maxlen: 22
31.130.16.0/20 maxlen: 20
31.130.31.192/29 maxlen: 29
62.122.88.0/21 maxlen: 24
85.159.224.0/24 maxlen: 24
85.159.227.0/24 maxlen: 24
89.23.128.0/19 maxlen: 20
89.23.128.0/21 maxlen: 24
89.23.144.0/20 maxlen: 24
89.23.146.0/24 maxlen: 24
89.23.147.0/24 maxlen: 24
89.23.160.0/19 maxlen: 19
89.23.168.0/21 maxlen: 21
89.23.176.0/21 maxlen: 21
91.123.80.0/20 maxlen: 20
91.202.204.0/22 maxlen: 24
93.157.160.0/21 maxlen: 21
93.157.162.0/24 maxlen: 24
93.157.163.0/24 maxlen: 24
178.212.80.0/21 maxlen: 24
178.216.176.0/21 maxlen: 24
2a13:2c80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:2b:fa:4d:40:1c:ab:b8:b7:db:78:7e:bb:1b:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Apr 15 11:18:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d358cd73284535d02bcf1d1ef1f312ea18c9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:18:cb:a3:00:4e:c4:a8:c0:3e:07:ae:08:
77:96:48:17:1a:28:cc:5e:2b:22:54:29:9a:3d:3c:
ad:10:e6:6b:44:4b:2f:e6:f9:ef:7d:44:08:2d:dc:
10:66:e7:e6:47:fc:40:3e:a8:e8:70:0e:75:62:8c:
65:df:37:d4:c1:da:a7:6b:17:fe:4a:22:8d:9c:59:
14:a7:f7:ef:70:91:79:ee:42:82:0c:4d:87:a3:5b:
6f:c9:24:0e:2e:dc:88:27:ac:0c:cc:49:96:d5:49:
f3:2c:8f:8c:c8:ce:7f:06:5f:ef:50:04:48:4f:fd:
30:52:72:6c:58:7f:c9:21:be:29:95:06:6f:25:5f:
b3:57:ff:4b:e3:8e:9f:6a:d3:17:c8:6c:a2:0f:4b:
86:1d:e6:26:b3:8c:86:90:00:36:32:7d:14:2b:b6:
7b:51:1b:97:92:b7:32:f9:86:7a:64:24:9e:bb:6a:
a2:6f:ae:93:d1:37:b0:12:a4:03:2b:6c:8b:9e:ba:
45:9d:79:b7:55:e3:00:ed:00:2a:f9:87:ec:82:6e:
87:67:10:9e:6a:d3:ec:9b:3a:8a:06:4f:83:65:77:
57:61:e8:c1:ed:a1:75:a4:a7:44:bb:c6:55:9b:19:
a8:0d:79:32:41:41:51:7d:d4:c9:7c:12:62:7f:c1:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:8C:D7:32:84:53:5D:02:BC:F1:D1:EF:1F:31:2E:A1:8C:98:19
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/fTWM1zKEU10CvPHR7x8xLqGMmBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.128.0/19
31.130.0.0/19
62.122.88.0/21
85.159.224.0/24
85.159.227.0/24
89.23.128.0/18
91.123.80.0/20
91.202.204.0/22
93.157.160.0/21
178.212.80.0/21
178.216.176.0/21
IPv6:
2a13:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
3e:47:ca:94:51:4a:81:b9:23:6b:9f:1c:c5:7b:12:c3:e7:87:
d3:df:6e:d4:8c:02:f8:a7:02:5a:a9:9a:78:b3:b2:ec:af:cf:
32:d2:5b:76:d5:a3:4c:65:d7:9a:9c:c0:ce:fd:cb:22:fd:8c:
38:15:7a:cb:63:9d:7b:1c:71:8e:2e:64:13:7b:38:83:84:a9:
21:fb:00:d5:e9:f3:83:7e:a7:2a:c9:1d:31:86:e0:68:2a:64:
93:1d:77:fc:2a:1e:f7:e0:0a:6d:1c:6b:d4:46:22:0a:15:9a:
00:3d:87:0b:40:23:6a:9c:4c:fb:06:d8:aa:64:5f:8c:49:3f:
c2:8a:c2:19:79:61:e6:93:28:a2:b0:ef:9b:c9:4c:8a:aa:d0:
8b:f9:3b:16:55:e5:d9:8a:c4:da:f2:79:e2:2d:e1:d2:a0:9b:
de:c2:95:04:c1:b8:db:02:d0:b0:d9:b2:b3:c8:ec:75:ec:80:
cf:78:d7:65:4a:1f:1f:2a:8f:57:ed:48:42:5e:7b:6d:f3:b5:
a3:8b:be:29:99:35:9f:cc:e3:4f:d0:1c:69:0f:a9:24:85:7d:
e5:cd:a2:9a:aa:bb:cb:57:ab:9e:3c:df:3f:50:fd:32:d2:75:
55:98:77:16:2d:90:e2:f5:93:37:b2:b0:47:e0:ca:74:b2:0f:
c4:44:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:14 2025 by rpki-client