Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/spdK4oMWVcXpNb6PSTJKLQrBfic.roa
File: spdK4oMWVcXpNb6PSTJKLQrBfic.roa (raw, json)
Hash identifier: KY9zTUMho6i9qzhu4Xs7GKd51HdQw1+dDS9B8igodnU=
Subject key identifier: B2:97:4A:E2:83:16:55:C5:E9:35:BE:8F:49:32:4A:2D:0A:C1:7E:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197A268B60BDA368926AE0B71E84BB6BC18
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/spdK4oMWVcXpNb6PSTJKLQrBfic.roa
Signing time: Tue 24 Jun 2025 14:47:40 +0000
ROA not before: Tue 24 Jun 2025 14:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 79.110.50.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:68:b6:0b:da:36:89:26:ae:0b:71:e8:4b:b6:bc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 24 14:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2974ae2831655c5e935be8f49324a2d0ac17e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:3d:7b:03:4f:23:1e:1d:a7:3d:ea:53:b0:
4b:e5:fc:ae:78:49:2b:17:52:61:06:e2:de:ca:47:
a9:ed:62:12:85:90:84:0f:7a:8c:a8:9e:1a:b1:9d:
b5:7c:67:3c:fd:cb:ee:5b:b9:67:75:d5:e6:f8:73:
be:d0:13:71:cd:53:52:f1:5d:ea:de:53:5c:cb:bf:
bb:40:17:56:5a:31:a1:05:2f:49:06:e7:da:a8:de:
46:e0:fa:16:f4:91:5d:05:02:87:e1:49:8d:3b:59:
cc:f0:67:a7:f8:bf:ff:ff:47:37:ea:75:b3:f3:98:
c1:7f:e0:ca:b5:bf:24:14:72:34:7a:50:65:0c:fc:
c5:00:ae:04:64:16:4a:cc:00:ff:42:92:19:96:f7:
32:e9:38:d0:18:05:d8:bd:91:eb:95:01:e5:67:17:
0e:8e:90:21:c3:3b:85:84:51:e2:29:fa:95:dc:be:
d1:94:21:22:11:5b:d4:d8:54:36:02:e5:40:c6:bf:
66:38:d6:9d:c3:65:21:74:40:6b:17:c1:64:de:42:
56:56:53:37:36:4a:0f:df:c2:7e:81:17:96:83:a0:
02:57:20:20:76:97:68:97:57:11:e6:85:2e:56:b5:
b0:59:4f:d4:c2:0d:c3:77:78:77:42:51:3d:7f:c3:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:4A:E2:83:16:55:C5:E9:35:BE:8F:49:32:4A:2D:0A:C1:7E:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/spdK4oMWVcXpNb6PSTJKLQrBfic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
55:dd:85:b8:fd:2c:31:0a:98:2f:cf:79:2e:bc:5a:76:bf:8d:
38:83:d7:99:e1:48:cf:a1:ee:e6:9e:2e:ae:98:4a:9b:3f:6d:
38:15:31:23:3b:18:9b:be:74:87:4f:01:c6:f2:97:47:1f:86:
c2:17:ea:a4:be:0f:f5:d5:2e:35:48:e0:19:6c:7f:3b:e8:9a:
0f:42:c8:f0:85:b3:d9:c6:e2:a2:75:e1:7f:ab:d9:4d:0f:14:
81:a3:1d:a1:bd:3c:52:ba:ac:68:7a:64:c2:d6:ae:2b:00:d7:
c6:f3:4f:9f:dc:cc:63:f1:89:a9:ca:c7:c3:85:dd:48:13:59:
6f:92:3e:46:db:7b:c0:a7:ba:21:ec:24:5a:64:5c:ba:5f:eb:
57:25:76:60:e2:10:8a:19:3c:74:c2:03:bc:ee:a0:6a:74:b2:
de:b5:b4:c1:6a:eb:49:68:4e:17:4e:5b:c2:b0:8d:69:64:b9:
a1:4d:3c:cf:6f:4c:dd:e1:2c:22:d1:d3:a4:6f:4a:3e:79:8b:
5f:05:3f:ac:87:e7:f7:43:9e:5a:01:91:fa:e0:d4:86:38:1c:
1f:e5:02:41:bd:39:0c:f9:7c:df:4f:b3:ab:04:2e:8f:09:a9:
a1:62:b8:03:06:9b:43:f0:b4:4a:53:8b:1b:f9:20:b8:7d:f5:
c8:57:b5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:08:20 2025 by rpki-client