Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/dUq-3e7AXs3N0NZXA1WRrQbzyIw.roa
File: dUq-3e7AXs3N0NZXA1WRrQbzyIw.roa (raw, json)
Hash identifier: 6zZ3aXPzck3AwBDGQRuh+epBnP8VFiXbdP1xY7RBv1M=
Subject key identifier: 75:4A:BE:DD:EE:C0:5E:CD:CD:D0:D6:57:03:55:91:AD:06:F3:C8:8C
Certificate issuer: /CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Certificate serial: 01979CC370666327D5A1B5F79ADEB55B042E
Authority key identifier: F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/dUq-3e7AXs3N0NZXA1WRrQbzyIw.roa
Signing time: Mon 23 Jun 2025 12:29:03 +0000
ROA not before: Mon 23 Jun 2025 12:29:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5539
IP address blocks: 82.118.32.0/19 maxlen: 19
185.54.120.0/22 maxlen: 22
185.54.188.0/22 maxlen: 22
193.149.32.0/19 maxlen: 19
194.97.64.0/19 maxlen: 19
194.97.128.0/19 maxlen: 19
194.97.137.0/24 maxlen: 24
195.24.96.0/19 maxlen: 19
195.30.0.0/16 maxlen: 16
195.30.21.0/24 maxlen: 24
195.30.50.0/24 maxlen: 24
195.30.64.0/24 maxlen: 24
195.30.121.0/24 maxlen: 24
2001:608::/32 maxlen: 32
2001:608:a04::/48 maxlen: 48
2001:67c:158c::/48 maxlen: 48
2001:4150::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:c3:70:66:63:27:d5:a1:b5:f7:9a:de:b5:5b:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48b3f0c6a87c045bdcffabd900db8892be702e1
Validity
Not Before: Jun 23 12:29:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=754abeddeec05ecdcdd0d657035591ad06f3c88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:b8:12:74:aa:39:52:78:c5:78:40:2e:60:
a2:d3:a1:5a:7b:16:6c:0b:98:2a:d8:91:23:dc:78:
68:d4:d3:4b:98:ef:c2:13:ee:a0:fc:fa:f5:9f:15:
e6:db:06:23:1e:7b:7f:b2:76:74:36:af:02:c6:3b:
ec:aa:76:3f:1c:2a:3a:f3:2c:3d:81:41:2d:d0:b2:
13:69:fd:50:5d:8d:94:91:80:f2:17:4d:e4:0a:28:
83:f4:86:9a:4c:ba:e9:ed:40:96:93:b6:b2:55:cb:
06:8f:da:94:c9:05:4e:a2:9b:cf:89:9b:29:89:32:
61:2a:3b:62:60:36:b4:d5:81:94:41:08:21:66:46:
18:e6:a6:50:c4:ac:72:da:ce:bf:88:6c:90:89:43:
e1:71:08:a8:38:7c:88:fc:cf:25:c3:3d:c0:eb:fe:
9f:ae:ad:e0:d6:cf:07:73:e9:c9:5c:a5:5c:b2:cf:
5a:3e:e6:29:11:0c:04:e9:f7:22:b7:ac:49:1b:94:
20:05:54:f5:f3:4d:af:41:00:e8:91:51:ae:67:06:
64:76:1f:87:90:dd:7e:86:e3:19:28:79:ff:af:cf:
4b:dc:b1:71:f9:73:22:13:54:9d:2a:34:85:ad:16:
02:d0:2d:7b:f8:ab:60:5f:d5:e9:fb:d1:ef:62:eb:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:BE:DD:EE:C0:5E:CD:CD:D0:D6:57:03:55:91:AD:06:F3:C8:8C
X509v3 Authority Key Identifier:
keyid:F4:8B:3F:0C:6A:87:C0:45:BD:CF:FA:BD:90:0D:B8:89:2B:E7:02:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Is_DGqHwEW9z_q9kA24iSvnAuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/dUq-3e7AXs3N0NZXA1WRrQbzyIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2e2747-ad74-4d31-9256-d35edb9fdd21/1/9Is_DGqHwEW9z_q9kA24iSvnAuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.32.0/19
185.54.120.0/22
185.54.188.0/22
193.149.32.0/19
194.97.64.0/19
194.97.128.0/19
195.24.96.0/19
195.30.0.0/16
IPv6:
2001:608::/32
2001:67c:158c::/48
2001:4150::/32
Signature Algorithm: sha256WithRSAEncryption
8c:cd:f3:62:ac:25:d6:fe:d5:b4:06:30:28:f8:81:2c:9a:a7:
d0:6e:f2:06:df:44:24:38:3e:b4:e7:71:5a:6c:a8:9f:45:2e:
6a:ec:dd:17:bc:36:cb:12:97:c5:b0:4f:fd:b7:0d:1c:8b:b5:
53:c2:ad:fe:28:ef:da:b7:13:f5:71:a9:b9:fe:d1:54:ce:50:
72:37:1e:4e:cb:30:8a:ab:44:80:6e:a6:c5:d8:77:55:27:04:
0d:32:d1:39:b7:e4:47:8c:d6:b7:aa:1f:60:8b:30:3b:48:de:
01:53:eb:66:ee:67:44:bb:a5:c6:a8:6d:d6:f2:0e:48:ad:6d:
a7:b5:78:4d:28:d1:c5:3b:a8:ac:cb:85:66:9a:89:c4:16:2b:
c3:d2:0a:44:a7:95:ae:ea:bc:2c:71:1f:e4:0e:2f:50:50:85:
74:37:02:0f:bb:21:e0:b3:b5:d0:7a:ee:7f:20:d1:2e:31:40:
69:a7:54:70:1b:29:3a:e6:ae:9d:9f:f8:70:c6:ad:73:fd:6c:
2c:d9:b9:1a:58:04:cb:b1:9e:61:90:91:49:d4:83:77:57:8b:
12:50:c3:cc:84:e7:36:c7:c8:b1:b2:12:7e:2d:16:1d:55:02:
31:6f:53:63:e3:7c:75:cf:ca:a5:d2:0f:df:f2:e2:fe:46:70:
2b:61:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:00:58 2025 by rpki-client