Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa
File: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (raw, json)
Hash identifier: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=
Subject key identifier: 6C:50:F5:B2:33:6B:95:3F:3E:13:1B:F9:44:C6:A9:AB:FD:4A:3C:9D
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 01971B0F388EC28F33BF0DCE4CFDD4D487BD
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa
Signing time: Thu 29 May 2025 08:01:11 +0000
ROA not before: Thu 29 May 2025 08:01:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44493
IP address blocks: 31.192.232.0/24 maxlen: 24
31.192.234.0/24 maxlen: 24
31.192.235.0/24 maxlen: 24
31.192.236.0/24 maxlen: 24
31.192.237.0/24 maxlen: 24
31.192.238.0/24 maxlen: 24
31.192.239.0/24 maxlen: 24
80.85.152.0/23 maxlen: 23
80.85.154.0/24 maxlen: 24
80.85.156.0/22 maxlen: 22
185.144.28.0/24 maxlen: 24
185.144.29.0/24 maxlen: 24
185.144.30.0/23 maxlen: 23
2a03:a0e0::/32 maxlen: 32
2a0a:eec0::/48 maxlen: 48
2a0a:eec0:2::/48 maxlen: 48
2a0a:eec0:3::/48 maxlen: 48
2a0a:eec0:4::/48 maxlen: 48
2a0a:eec0:5::/48 maxlen: 48
2a0a:eec0:6::/48 maxlen: 48
2a0a:eec0:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:0f:38:8e:c2:8f:33:bf:0d:ce:4c:fd:d4:d4:87:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: May 29 08:01:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c50f5b2336b953f3e131bf944c6a9abfd4a3c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:6a:4b:ac:2c:ec:78:d1:af:ef:c5:c6:ce:
7e:a1:a2:5b:3d:cc:ac:1b:b7:f4:46:da:a2:f6:86:
b8:4c:9c:34:bd:3a:d1:cf:5c:ec:c2:ea:cf:60:1b:
37:df:5e:20:c1:e0:4b:36:47:17:6a:4a:27:80:6e:
eb:74:bc:30:80:42:44:42:b8:e3:90:84:f2:19:72:
78:c1:bf:46:c0:a4:8a:ea:c9:b3:d3:1b:8a:53:da:
9a:e9:fb:d8:04:d2:9c:d0:2a:fd:51:a9:8c:ed:02:
c5:98:4f:50:77:78:10:f7:d8:e2:02:e2:88:29:95:
7a:84:05:d3:65:ba:21:89:bc:04:81:44:75:2d:34:
4c:3d:be:45:f9:2b:69:b5:79:a7:9c:ae:1c:e4:4a:
f4:63:ed:c6:08:42:42:29:d7:59:1c:9e:a3:40:39:
a7:ee:20:42:56:5c:d2:47:f7:81:72:09:3e:27:e3:
34:c3:4a:f3:75:9f:fc:19:68:2b:28:b1:87:5a:36:
e0:b6:b5:ab:3a:8a:78:99:2c:f3:3c:1a:c6:c9:4d:
c4:5c:3d:87:65:0a:f3:6b:03:3a:3e:40:48:cb:a9:
9b:f5:6f:8e:e7:83:30:4e:f5:07:8d:f5:cd:d4:33:
49:a2:f1:04:11:97:aa:fb:1b:19:62:f5:8d:a8:fa:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:50:F5:B2:33:6B:95:3F:3E:13:1B:F9:44:C6:A9:AB:FD:4A:3C:9D
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.192.232.0/24
31.192.234.0-31.192.239.255
80.85.152.0-80.85.154.255
80.85.156.0/22
185.144.28.0/22
IPv6:
2a03:a0e0::/32
2a0a:eec0::/48
2a0a:eec0:2::-2a0a:eec0:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:77:11:67:34:83:bc:41:ac:c8:5a:ca:4e:15:5e:d1:5f:93:
fc:9d:db:6a:5b:8e:70:b8:90:c7:b0:cd:02:9d:a9:a0:8e:f3:
03:b7:f9:87:be:7e:8f:94:97:0a:80:ce:fa:5f:a3:b8:06:94:
0e:a9:d9:2d:24:66:46:3a:18:c1:c6:bd:c3:40:de:dc:79:0f:
d8:a4:a9:06:0f:61:07:e0:24:3b:3d:cc:08:90:eb:59:00:9b:
43:4a:59:76:00:21:ba:0e:ed:82:46:de:f5:cd:11:34:b3:5e:
10:0d:ec:35:3d:0e:f9:13:cd:70:db:a8:da:97:69:81:4a:3b:
f7:1d:c3:19:1b:4a:20:bc:1d:a3:ae:b8:e3:bb:58:18:bb:93:
7f:f5:d8:3b:21:b1:97:55:8d:9a:e0:77:97:fa:55:dc:fd:a4:
4b:cb:f4:79:d4:66:5d:bb:4c:8b:dc:07:86:46:31:57:34:f0:
b9:85:bb:ec:21:20:77:9d:11:bf:15:45:57:08:08:a7:39:b7:
32:03:cf:cb:c3:d0:54:a5:ca:da:45:f6:d3:47:cf:db:06:42:
4d:e2:d2:cc:b7:84:d6:5e:93:1a:43:3a:b1:3c:59:0d:62:5f:
ca:b3:4c:b7:61:30:df:a7:40:0c:d9:b7:ef:6f:0a:8b:ea:b0:
1e:c9:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:00 2025 by rpki-client