Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lLTt27CvKVrZ46MtIxZb-bD0JJg.roa
File: lLTt27CvKVrZ46MtIxZb-bD0JJg.roa (raw, json)
Hash identifier: r41CVNzvdr3xjDNcNmmOPnidy7vQT3DjIW3YSNMbicI=
Subject key identifier: 94:B4:ED:DB:B0:AF:29:5A:D9:E3:A3:2D:23:16:5B:F9:B0:F4:24:98
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0199018BB1924D3BBA131A0C586E1628EE04
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lLTt27CvKVrZ46MtIxZb-bD0JJg.roa
Signing time: Sun 31 Aug 2025 19:12:36 +0000
ROA not before: Sun 31 Aug 2025 19:12:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216270
IP address blocks: 31.43.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:01:8b:b1:92:4d:3b:ba:13:1a:0c:58:6e:16:28:ee:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Aug 31 19:12:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94b4eddbb0af295ad9e3a32d23165bf9b0f42498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:00:66:92:22:0a:30:e6:7d:da:35:6b:1e:
36:7e:84:8e:01:eb:3b:a0:b4:2d:6e:c2:a2:c7:7d:
01:4a:5a:95:96:d7:8d:28:8a:a7:84:3f:16:9c:1b:
99:f7:60:3f:74:b9:82:87:15:83:d4:18:59:3d:9d:
f2:14:96:ef:03:e6:78:98:f8:14:5b:3e:96:15:c4:
04:00:91:90:46:2c:e4:16:31:33:90:91:21:43:de:
9f:cd:ba:60:56:a6:32:1c:5b:3d:1b:d4:a9:3e:98:
7f:02:02:41:da:37:64:cb:70:d8:4b:d7:f1:ca:82:
50:d2:1d:ae:6b:b2:23:f3:9e:6f:c8:66:05:32:f6:
80:95:39:fe:a2:45:36:99:8a:2b:97:27:b6:1f:77:
a7:14:f9:a4:3b:e9:ab:a6:a9:17:60:95:bd:49:c8:
65:8c:95:b5:57:fb:61:dd:5f:9e:f8:6b:af:1f:3e:
49:26:57:a5:54:dc:5f:a0:e1:81:67:bf:52:e5:3f:
95:47:24:e7:8d:35:a1:d6:cd:1c:1d:73:34:b2:21:
fc:28:c6:85:06:42:05:9c:5a:81:49:cb:97:5f:09:
27:f4:f6:f2:58:a2:ff:78:3b:b4:2d:2c:df:83:44:
cb:d3:64:42:e3:6b:a9:72:21:b7:ad:0c:62:a3:52:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:ED:DB:B0:AF:29:5A:D9:E3:A3:2D:23:16:5B:F9:B0:F4:24:98
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/lLTt27CvKVrZ46MtIxZb-bD0JJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.43.167.0/24
Signature Algorithm: sha256WithRSAEncryption
57:56:cf:0c:0c:8d:ca:63:d3:96:7c:58:37:6b:a7:59:f5:8f:
d7:c6:c7:9e:e7:63:51:24:c5:bf:81:0d:2c:d0:6a:95:88:07:
6d:62:9f:54:5f:ad:cb:de:a8:05:e8:11:7c:e6:ce:21:48:69:
55:43:08:dc:69:22:0c:39:25:13:25:bf:54:d2:7b:36:45:65:
f7:d5:49:de:be:70:bd:99:71:7a:98:b6:d7:33:21:2a:06:02:
3b:29:0d:c9:45:9c:fb:aa:74:21:e4:ec:1e:51:74:00:f9:fe:
1c:78:b5:cc:80:99:4c:83:e5:6d:e2:e1:9b:c6:6a:fa:47:43:
24:7d:e4:4f:b2:d3:73:d4:07:06:94:9c:99:93:a5:6a:b7:0c:
40:6b:04:07:e0:eb:f8:2b:13:f0:6c:db:08:a6:bf:54:45:27:
53:94:0a:fa:57:a9:ce:5f:21:f2:31:79:87:57:11:b2:ba:80:
23:ad:b7:99:d1:eb:c4:81:83:3f:a5:f4:76:98:40:49:b1:93:
ee:53:25:b8:c9:6f:d5:08:7d:c0:7a:15:a7:3b:53:21:26:3a:
8a:08:e7:3d:8e:1d:4c:86:7e:c6:2a:54:12:55:c4:30:bf:a3:
06:d8:4c:fc:32:85:be:57:b6:e3:4d:3c:b2:75:ee:d1:2e:ef:
4b:09:23:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:45:36 2025 by rpki-client