Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-b2li8ShrTuM8UIee0pJDQe-MGg.roa
File: 1-b2li8ShrTuM8UIee0pJDQe-MGg.roa (raw, json)
Hash identifier: V09dFxu6Jmb3uggbFJubWgNJS1uK/SLJSov5o08/cqE=
Subject key identifier: F9:BD:A5:8B:C4:A1:AD:3B:8C:F1:42:1E:7B:4A:49:0D:07:BE:30:68
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0197A10400E609FE1211312AF5803E90EF34
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-b2li8ShrTuM8UIee0pJDQe-MGg.roa
Signing time: Tue 24 Jun 2025 08:18:03 +0000
ROA not before: Tue 24 Jun 2025 08:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 80.97.54.0/24 maxlen: 24
81.181.175.0/24 maxlen: 24
194.102.217.0/24 maxlen: 24
217.156.29.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:04:00:e6:09:fe:12:11:31:2a:f5:80:3e:90:ef:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 24 08:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9bda58bc4a1ad3b8cf1421e7b4a490d07be3068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:85:66:61:29:8d:4b:47:69:21:a3:45:0c:
8b:7b:0d:64:1d:d1:1d:d9:fc:06:37:31:6d:d7:21:
2f:5f:7d:4c:8d:d4:9f:d8:24:23:b5:bf:6a:0d:27:
17:f3:1b:41:5f:f5:8b:f5:86:11:7f:39:48:fa:75:
ca:e9:fa:44:ac:b6:ab:4e:84:7b:ed:95:1b:36:91:
fd:eb:f2:af:60:b4:35:b4:2a:00:dc:d2:48:65:56:
da:00:5e:9c:73:b4:8b:75:95:e2:42:0b:61:e1:11:
53:52:29:65:b9:27:eb:e8:eb:51:6a:bc:4b:99:ba:
d0:ee:8d:d1:4f:d0:74:75:31:db:44:5a:8f:a8:72:
8c:1e:f9:ff:f3:44:63:22:01:35:2f:ce:1a:b1:bf:
0e:d8:73:08:34:8e:fc:83:60:cd:64:16:a7:d5:52:
4e:e1:25:09:bf:a5:30:80:11:22:12:79:c3:56:a0:
4a:5b:b1:97:33:47:df:3e:13:3a:1c:c4:e1:33:3e:
eb:64:b4:4a:83:e0:88:c2:4c:25:38:cb:5b:de:ae:
52:39:ab:fc:ed:56:a7:af:aa:fe:8a:f4:07:fa:b5:
04:cb:3c:48:65:c2:8a:07:51:25:42:b3:9c:56:c6:
0e:20:05:59:eb:2b:dd:1c:e3:cd:ba:52:8e:06:d4:
4e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:A5:8B:C4:A1:AD:3B:8C:F1:42:1E:7B:4A:49:0D:07:BE:30:68
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-b2li8ShrTuM8UIee0pJDQe-MGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.54.0/24
81.181.175.0/24
194.102.217.0/24
217.156.29.0/24
217.156.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8d:1c:c0:3a:e7:f8:76:d1:f5:35:dd:08:23:cb:81:a8:1d:
38:f9:d2:77:e1:a3:00:ab:56:4c:70:77:fe:12:3c:64:89:9c:
41:a2:f1:41:b2:c2:27:78:72:6b:ee:d7:49:f8:dc:66:c5:da:
6c:7f:85:c7:c6:f0:a6:b9:1f:47:e3:77:1e:a9:04:60:dc:e1:
2f:2f:28:ae:78:4d:30:76:ff:de:95:74:e9:46:ee:3d:2b:89:
83:8e:76:24:ad:6b:49:00:77:2d:f5:87:79:ca:4c:5e:19:84:
24:ca:48:ff:2a:1f:19:1d:ad:52:c0:38:14:94:ff:3d:06:38:
8d:42:04:d5:ad:7f:ab:47:74:d2:f7:6c:c6:15:1c:b4:e5:06:
34:31:ee:29:62:57:58:fc:b4:4e:f4:8e:dc:0a:96:dd:1f:2f:
27:ae:b0:c6:74:ff:b4:78:7d:c9:9a:1a:a9:53:9d:19:17:ff:
10:56:c0:47:79:ac:93:d7:c7:f9:47:24:60:76:f2:b7:97:dc:
6b:66:81:ce:c9:5c:c6:f6:b2:9f:cc:47:d5:90:28:c1:e7:ca:
64:d8:3c:46:e1:f9:0b:64:fd:77:4a:65:37:74:dd:a9:69:99:
a6:17:bd:cc:49:53:9e:73:46:56:2e:4a:61:df:78:95:03:ef:
56:31:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:03:01 2025 by rpki-client