Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Trbyxb6isEHudNwZrwX-Ng2_jRA.roa
File: Trbyxb6isEHudNwZrwX-Ng2_jRA.roa (raw, json)
Hash identifier: prQmrKdqxk41ZWWCSXfgDPNUAvHPLRiABBPBSZ8xmIw=
Subject key identifier: 4E:B6:F2:C5:BE:A2:B0:41:EE:74:DC:19:AF:05:FE:36:0D:BF:8D:10
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019760D197B0F3DBDDB9BDC8566F4E29C177
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Trbyxb6isEHudNwZrwX-Ng2_jRA.roa
Signing time: Wed 11 Jun 2025 21:07:18 +0000
ROA not before: Wed 11 Jun 2025 21:07:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56630
IP address blocks: 185.47.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 04:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:d1:97:b0:f3:db:dd:b9:bd:c8:56:6f:4e:29:c1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 11 21:07:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eb6f2c5bea2b041ee74dc19af05fe360dbf8d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:1d:e1:ac:be:2c:e7:87:55:a9:a7:9f:07:
79:55:ad:4c:2c:c1:2b:08:a1:84:31:88:05:90:4d:
69:fc:55:cb:f6:2c:94:4d:60:49:70:40:d8:d7:5f:
9e:8f:74:aa:f9:50:30:ea:72:0b:c9:aa:3c:36:10:
f8:ee:a6:76:77:7b:f7:a5:19:ba:eb:15:d0:09:b0:
a6:ac:23:f9:cb:59:9f:6a:86:e9:06:f6:bd:a8:b7:
26:99:f2:8d:14:42:ad:29:7e:60:67:d5:00:17:a6:
86:d8:78:03:cc:2b:18:67:18:fb:e9:76:9d:ab:48:
da:50:02:d3:f1:94:12:12:0f:30:44:41:83:d3:88:
8a:bd:e3:c5:76:a8:42:44:41:d6:ab:66:58:d7:e2:
20:cd:a2:c8:45:99:a5:67:5f:05:fb:8c:52:c9:0d:
92:f6:be:89:c3:23:71:04:d9:b7:ae:8c:85:85:17:
b1:fa:09:2e:bb:d6:ee:5e:65:e7:2b:43:d8:89:cf:
c3:34:0d:18:2f:7c:05:45:80:b5:a3:15:ec:20:e1:
17:64:f5:dd:93:e5:73:19:2d:40:f9:eb:25:40:d9:
fb:69:1d:3c:63:ed:0e:e3:7f:38:61:da:1b:f5:c1:
28:b0:b4:1b:c8:1a:b2:88:8d:73:75:25:00:20:a7:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:F2:C5:BE:A2:B0:41:EE:74:DC:19:AF:05:FE:36:0D:BF:8D:10
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Trbyxb6isEHudNwZrwX-Ng2_jRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cb:bf:2a:49:2d:47:a4:db:e0:7f:39:48:57:73:e9:f8:b4:
ac:05:d9:27:e7:33:66:11:a4:b7:a3:4f:0d:ce:51:7a:a7:3b:
f1:99:4a:1a:62:03:f9:ae:ea:2f:4f:a7:cb:59:76:67:69:da:
98:ca:f9:d1:3b:58:8a:b6:28:f7:46:11:56:5e:e5:b2:e9:30:
65:ce:11:ef:c1:d2:1e:0e:78:31:18:34:3d:e5:3d:0b:46:ed:
87:70:2d:dd:73:80:0d:c3:b8:bf:12:7f:b2:32:0d:3e:5b:0f:
7c:e4:00:4c:75:d5:d2:50:ac:72:fb:d3:05:bd:dc:86:09:f5:
23:a3:b7:19:1e:22:70:63:09:2d:d1:35:88:f8:d6:0f:f3:ae:
b0:ad:87:7a:19:7b:a0:e5:76:89:94:bc:e0:51:36:6d:a0:fb:
50:30:f4:52:68:db:0b:b7:a0:e0:f2:21:01:f8:7c:e8:56:d1:
b7:c0:74:15:b8:a8:38:05:b1:93:45:e4:36:78:a1:6e:77:27:
70:59:9e:33:bb:cf:90:e7:d8:ec:84:cf:ec:77:f7:2d:e7:08:
49:6e:16:bf:3a:82:b2:05:b1:fe:7f:2c:05:7d:41:cc:43:cb:
3f:df:8d:6d:47:4d:59:29:ca:77:56:b6:fb:23:99:ca:b4:8a:
f4:2d:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:53:43 2025 by rpki-client