Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CC6uKJbTN0ZrxWQwCaF7aDAW6NI.roa
File: CC6uKJbTN0ZrxWQwCaF7aDAW6NI.roa (raw, json)
Hash identifier: /Oc203pE2oLbPJ5wVgBjQwgeuzbQJF3ya5OZph99le8=
Subject key identifier: 08:2E:AE:28:96:D3:37:46:6B:C5:64:30:09:A1:7B:68:30:16:E8:D2
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0197ABFAEE4AE79733DCF2A618D9C6B185EE
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CC6uKJbTN0ZrxWQwCaF7aDAW6NI.roa
Signing time: Thu 26 Jun 2025 11:23:58 +0000
ROA not before: Thu 26 Jun 2025 11:23:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 146.19.21.0/24 maxlen: 24
2a05:9a40::/29 maxlen: 29
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a10:3c80::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c1::/32 maxlen: 32
2a13:c240::/29 maxlen: 29
2a14:62c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:fa:ee:4a:e7:97:33:dc:f2:a6:18:d9:c6:b1:85:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 26 11:23:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=082eae2896d337466bc5643009a17b683016e8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:6a:a6:63:3e:6c:f8:99:87:3c:9f:12:d0:
6e:76:ca:44:52:ff:2f:20:59:10:8e:19:f6:b3:e6:
85:a1:90:82:be:f9:ad:cb:3c:bd:2b:83:c2:50:8f:
c9:2b:1d:1a:b3:1c:7f:c4:47:dd:55:c8:84:12:6d:
82:1f:bf:41:42:41:56:73:33:14:e6:e7:e9:a0:a5:
ae:e3:f3:0d:09:01:4a:82:39:ca:88:27:b8:21:eb:
45:b1:16:dd:af:0c:49:bd:61:aa:de:54:f8:f9:dd:
3d:cd:76:1b:bf:a3:5d:26:f2:35:d9:a6:81:e4:ea:
90:c0:4f:5e:e8:47:0d:84:8e:b0:59:41:35:fa:36:
ab:34:8e:07:87:e1:6f:a2:e4:47:42:ce:e9:b2:3a:
72:c5:47:f6:de:21:67:2a:45:be:ee:52:3a:5f:1f:
47:e8:0e:f7:c4:75:03:dc:0d:d6:49:44:6d:fc:4a:
9d:56:0c:9c:7c:f5:d7:ad:c9:1c:48:72:88:ee:ec:
3f:d7:46:eb:ee:13:68:70:07:59:6b:87:39:bc:83:
a6:a9:9b:97:77:76:c0:b3:d5:0c:d4:51:99:21:67:
e9:15:c3:bd:4f:91:e5:86:89:6c:4a:94:d0:dc:82:
eb:de:de:45:5a:43:a7:73:28:73:a5:f1:7e:9f:34:
8e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2E:AE:28:96:D3:37:46:6B:C5:64:30:09:A1:7B:68:30:16:E8:D2
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/CC6uKJbTN0ZrxWQwCaF7aDAW6NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
IPv6:
2a05:9a40::/29
2a06:5fc0::/29
2a0b:ac00::/29
2a10:3c80::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c1::/32
2a13:c240::/29
2a14:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:71:a9:a4:1d:f5:b9:b4:50:1d:62:7f:e9:16:cf:4d:79:7b:
2c:d0:45:b2:5d:e5:52:ad:40:b3:c9:cf:86:80:70:e2:88:69:
07:6a:5b:94:5d:45:e7:44:1c:89:a3:9c:19:30:71:54:13:71:
ec:e7:ae:b8:d9:65:cf:70:1a:db:bf:3c:9d:47:15:26:49:7a:
32:52:01:fa:a1:17:4f:db:13:b7:dd:3b:35:1a:40:16:9a:ff:
b3:4c:b5:5e:77:9d:1a:4a:90:74:a7:4a:43:c7:9e:b8:ec:9e:
2e:c0:2b:ef:f0:95:e7:a2:c6:25:2b:60:be:37:50:1a:16:07:
10:7f:82:7c:51:e5:e0:16:55:00:25:2e:e9:33:7c:36:28:88:
b6:af:ad:51:b3:73:58:a9:56:2a:61:f8:c8:51:99:4f:fd:bc:
44:75:9d:ba:69:93:f4:56:2b:b8:43:58:e5:fb:73:f1:bf:0e:
bb:89:d7:c5:4f:7f:91:36:3c:0a:9a:e0:ac:1d:39:0d:30:a0:
bf:87:34:e6:1b:95:70:36:ce:d4:cb:5b:3b:4a:ff:83:33:89:
6d:b2:97:e9:12:ad:3d:50:f6:87:12:bf:c1:12:b3:cb:d9:4e:
a5:96:a5:94:be:0e:5b:96:23:58:ea:09:29:ee:b1:bb:47:66:
fc:25:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:17:43 2025 by rpki-client