Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/8NPdfH0T0I7HL29z1EDZQ1o_E54.roa
File: 8NPdfH0T0I7HL29z1EDZQ1o_E54.roa (raw, json)
Hash identifier: IT5DLYBSmqmVf9zn+vVj7yeGwJekIyH3SpOq/Npzejg=
Subject key identifier: F0:D3:DD:7C:7D:13:D0:8E:C7:2F:6F:73:D4:40:D9:43:5A:3F:13:9E
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0197A0659D00D5A4E527BCF29DB07319915F
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/8NPdfH0T0I7HL29z1EDZQ1o_E54.roa
Signing time: Tue 24 Jun 2025 05:25:03 +0000
ROA not before: Tue 24 Jun 2025 05:25:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60175
IP address blocks: 89.63.0.0/20 maxlen: 20
89.63.16.0/20 maxlen: 20
89.63.20.0/24 maxlen: 24
89.63.32.0/24 maxlen: 24
89.63.240.0/20 maxlen: 20
185.35.12.0/22 maxlen: 22
195.4.128.0/19 maxlen: 19
195.4.145.0/24 maxlen: 24
195.4.160.0/20 maxlen: 20
195.4.184.0/21 maxlen: 21
195.4.192.0/20 maxlen: 20
195.4.199.0/24 maxlen: 24
195.4.208.0/21 maxlen: 21
2a00:dca0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a0:65:9d:00:d5:a4:e5:27:bc:f2:9d:b0:73:19:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Jun 24 05:25:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0d3dd7c7d13d08ec72f6f73d440d9435a3f139e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:53:d8:44:c9:96:82:4a:27:61:5c:71:30:
a8:c0:eb:70:d5:50:57:f9:6a:03:f3:78:94:3a:d6:
12:7d:77:38:d4:a5:8b:14:00:1d:da:e7:b6:2d:9a:
f7:d8:60:31:a3:16:98:6a:78:67:14:fa:1e:80:52:
74:d8:31:23:ec:68:5b:36:73:cf:87:d4:e2:cc:fe:
73:39:26:77:61:26:db:b0:4f:36:ea:5f:f7:58:cf:
70:f1:27:4e:f2:ac:1c:2d:1e:dd:cc:a9:9e:8a:c7:
fd:ec:21:4e:b1:6b:fe:5c:b0:d9:4c:1b:29:f7:0c:
93:78:cb:af:cf:83:ba:c4:f7:e2:8f:13:de:e6:56:
4c:bd:11:ef:ed:87:d3:96:ab:cb:66:00:c3:f3:84:
cc:60:48:5a:f7:5d:86:93:a2:cf:c1:aa:58:17:b2:
b7:05:57:bd:e3:5a:de:b7:ee:7b:1c:4d:53:c3:e2:
65:ac:b2:8e:64:1f:74:05:71:8d:4c:a9:2b:8f:c9:
a9:aa:a9:37:b7:50:14:02:58:28:52:5f:ce:9d:e1:
68:b3:6a:12:2e:c0:dc:a1:3e:e2:41:f6:19:56:24:
5b:67:42:bb:d2:bc:6c:4f:8d:1c:d7:e9:68:66:27:
31:bb:4b:a9:19:c3:dd:0d:54:c9:a3:06:96:1f:ef:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D3:DD:7C:7D:13:D0:8E:C7:2F:6F:73:D4:40:D9:43:5A:3F:13:9E
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/8NPdfH0T0I7HL29z1EDZQ1o_E54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.63.0.0-89.63.32.255
89.63.240.0/20
185.35.12.0/22
195.4.128.0-195.4.175.255
195.4.184.0-195.4.215.255
IPv6:
2a00:dca0::/29
Signature Algorithm: sha256WithRSAEncryption
74:01:3d:fd:e0:90:04:72:d1:c0:c3:cc:d7:95:81:4d:66:6b:
9f:97:6d:22:6c:14:20:2f:15:63:01:5b:e5:d2:a0:e3:8a:49:
e0:f2:79:c3:d1:80:d3:9b:c4:fa:c5:19:8f:64:4c:a2:22:61:
34:34:42:51:40:83:30:34:01:2e:ef:85:5a:be:b2:da:56:88:
1e:3e:1d:89:48:bc:bd:32:66:da:ae:8a:86:59:24:42:38:87:
52:93:a3:6d:ba:9f:a8:a4:5b:38:f9:47:75:3e:82:44:91:fe:
0c:bf:3e:74:0f:7a:ba:fe:59:f2:99:8f:55:c0:a7:c4:87:b8:
30:fa:d8:7c:cc:b8:7f:33:9d:5e:0d:e1:8b:f1:f3:43:87:7a:
96:24:1c:89:bf:3f:1e:ca:e7:87:5d:f1:03:eb:66:9a:1d:b3:
e7:c6:54:65:68:d1:10:07:29:8e:57:fe:0b:d7:b2:22:27:2d:
c0:c0:39:ed:40:76:79:54:b3:06:a0:7a:ec:ec:1d:a7:32:9f:
84:0a:cb:82:3e:2e:0c:c1:a2:f7:99:28:ef:f2:9b:d4:94:78:
d8:5c:5b:09:b1:b7:cd:db:aa:53:86:c7:39:f7:6c:66:06:d0:
74:0c:3c:19:82:d7:79:80:5e:57:c3:87:86:a1:89:99:7b:4d:
6d:d1:6e:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 30 14:53:41 2025 by rpki-client