Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa
File: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (raw, json)
Hash identifier: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=
Subject key identifier: EF:24:B3:11:27:43:23:E1:20:D1:8E:B1:7C:54:C3:64:E1:10:99:99
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 0196BAE017B2CF2041244B7D57C0F88A7728
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa
Signing time: Sat 10 May 2025 15:46:10 +0000
ROA not before: Sat 10 May 2025 15:46:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43848
IP address blocks: 85.255.144.0/20 maxlen: 24
85.255.156.0/24 maxlen: 24
85.255.157.0/24 maxlen: 24
185.135.16.0/24 maxlen: 24
185.135.17.0/24 maxlen: 24
193.188.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:e0:17:b2:cf:20:41:24:4b:7d:57:c0:f8:8a:77:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: May 10 15:46:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef24b311274323e120d18eb17c54c364e1109999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:01:fa:1f:1c:4b:63:5f:9f:22:9a:60:30:
b5:69:9f:fa:3a:17:4e:e0:05:ae:3a:c6:58:dc:2f:
ee:81:92:77:1d:a0:4e:82:a9:b9:e3:6e:be:a8:d7:
87:8f:99:ff:ef:b6:d0:6f:d5:b8:d4:c5:77:4f:e8:
24:08:30:25:36:ff:f4:6b:53:bc:91:b7:37:f0:87:
29:47:8a:e8:55:bc:2a:3f:62:35:0d:8c:7f:5f:2a:
61:6c:b9:b0:a3:31:ab:db:66:f5:a8:d1:dd:a4:d7:
b1:6e:82:30:76:c1:ed:f6:05:cf:46:b6:fd:63:81:
d4:8c:44:9d:13:d7:8b:3b:f4:8b:50:56:70:36:b2:
8d:73:a9:19:f5:94:3d:6d:b8:a5:e4:26:26:ce:a1:
00:95:4b:45:9f:8d:f1:3b:5c:e3:2b:62:0d:d6:29:
19:f5:04:3c:77:50:7b:8f:e3:92:76:34:e1:61:6c:
3e:f8:b2:5e:5e:fe:a0:be:2c:79:de:20:b8:24:6d:
99:e1:bb:6a:83:5d:f1:ff:b1:d8:df:50:95:bb:97:
83:82:e3:15:0a:c4:01:d0:f1:ba:3e:67:16:fa:9b:
3a:89:b9:e9:72:88:4d:1f:67:54:15:17:f6:7c:e3:
8a:61:7d:d4:6c:b9:ed:6e:6a:17:b4:09:01:ab:cd:
bf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:B3:11:27:43:23:E1:20:D1:8E:B1:7C:54:C3:64:E1:10:99:99
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.144.0/20
185.135.16.0/23
193.188.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:3a:d7:eb:6c:14:92:ee:32:2c:c8:33:69:ba:ff:4b:39:da:
e3:9c:57:b1:d6:8a:92:26:22:62:bd:cc:93:44:46:4f:e8:d4:
2e:d5:8b:d9:99:3b:e2:3d:e5:4b:60:3d:20:5a:a7:76:6a:89:
13:95:3a:09:74:4c:6e:e9:d6:96:43:c9:f5:65:b4:31:3f:43:
2c:93:b9:4c:f7:bb:8b:35:0b:cd:6a:86:0b:9e:d7:ac:04:ad:
ff:df:c7:d7:39:1f:97:9f:ef:64:3e:1d:02:21:16:d1:87:04:
a9:4f:19:ad:24:83:6b:38:4d:69:4e:f1:3d:37:e5:84:db:b0:
5a:d5:79:c5:f2:eb:53:63:4f:65:73:18:c6:9d:8e:a5:14:16:
32:3d:0d:a8:6d:25:14:7d:21:28:47:73:27:aa:16:cf:f6:9e:
73:15:53:0b:31:bc:bd:20:80:a0:91:2a:3d:18:7c:8c:2c:b1:
35:3a:b0:03:41:ff:ee:12:5d:f5:d8:e7:1f:d3:ce:e8:3a:8e:
4d:96:da:df:7f:2b:cf:b8:7a:ce:8d:61:c3:07:74:65:4a:1d:
23:f7:1f:42:ae:4e:a8:1b:91:e6:7c:77:69:03:1d:8c:3f:33:
7a:a9:06:3a:9c:82:ba:64:70:c3:ec:22:e2:a7:95:5f:10:91:
2d:c2:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:42:26 2025 by rpki-client