Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/e2Eq6uJyglQ4a9YXU_7zXZr1XfM.roa
File: e2Eq6uJyglQ4a9YXU_7zXZr1XfM.roa (raw, json)
Hash identifier: gd3m9enGrq88uLLqp91/gZdvP59I/QkUQxc8uiiiRxs=
Subject key identifier: 7B:61:2A:EA:E2:72:82:54:38:6B:D6:17:53:FE:F3:5D:9A:F5:5D:F3
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0197A82277F5BEF4B6C4C06E1883BA2A76A1
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/e2Eq6uJyglQ4a9YXU_7zXZr1XfM.roa
Signing time: Wed 25 Jun 2025 17:28:40 +0000
ROA not before: Wed 25 Jun 2025 17:28:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 95.164.53.0/24 maxlen: 24
95.164.55.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a8:22:77:f5:be:f4:b6:c4:c0:6e:18:83:ba:2a:76:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jun 25 17:28:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b612aeae2728254386bd61753fef35d9af55df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:13:1c:08:e9:37:78:f4:0f:7b:1f:9b:b1:
38:f0:77:b7:e2:7e:02:23:ba:bf:89:2b:c1:e7:b1:
d8:63:a5:38:59:da:a8:24:e0:ee:91:45:79:bf:d1:
dd:eb:62:d9:fe:14:bd:a6:cc:6e:88:ce:ea:d1:4b:
0a:b7:0a:0f:7d:32:7f:5a:c7:aa:1b:84:9a:e6:b8:
bf:06:c2:49:d3:dd:67:4d:77:86:21:5d:f3:6d:a4:
da:40:c8:f9:da:1f:7e:85:9f:1e:c0:3f:b8:30:81:
c2:bf:a8:b6:cc:ea:a5:d0:bd:6b:1b:93:a0:5e:a4:
4e:03:62:5b:68:8a:4a:03:d0:d8:4a:05:be:7c:eb:
12:7c:22:e2:f5:b1:28:66:f5:e7:9e:5f:ca:29:18:
b4:fe:b3:f3:9c:46:d2:85:5a:94:20:0f:e2:06:2c:
25:b7:35:37:31:a6:60:8c:10:0e:01:7d:68:b6:34:
e0:63:33:39:87:64:37:0c:65:06:38:d4:d6:a1:22:
32:12:19:a8:f0:2d:47:3b:02:ee:96:a0:23:5f:91:
bb:02:b2:58:c2:0a:2e:4a:15:f6:60:8b:17:5a:00:
91:0a:3e:43:25:77:e4:8c:dd:65:06:28:d4:e8:e3:
0b:9a:d7:7e:e9:02:65:31:e7:05:b4:ac:00:f5:1e:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:61:2A:EA:E2:72:82:54:38:6B:D6:17:53:FE:F3:5D:9A:F5:5D:F3
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/e2Eq6uJyglQ4a9YXU_7zXZr1XfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.53.0/24
95.164.55.0/24
95.164.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3f:00:e4:2e:6d:d5:b6:69:08:ad:d7:d7:05:11:a9:91:10:
f1:44:bd:f8:34:0f:ed:05:09:00:36:f4:fc:bf:7d:78:4e:04:
fe:b6:8d:d4:f5:7a:50:b7:44:f4:af:ae:56:ea:cb:53:4c:1a:
42:05:d1:aa:72:0c:3c:d3:01:9b:68:f9:46:cc:f6:b7:cf:29:
fe:26:20:cb:f7:f5:8f:dd:42:a0:57:53:d2:42:01:ac:94:8c:
5b:e3:0e:37:36:5d:10:fd:91:a5:ea:29:23:57:45:ac:19:2d:
5a:4b:2c:1c:76:b3:66:fa:ad:79:e0:4b:c0:b7:6f:d5:01:5b:
77:80:be:c8:e7:4f:a6:97:d5:2a:1c:30:85:14:7e:d3:ff:62:
b2:57:9b:be:07:5b:aa:5c:19:03:8e:01:91:7c:82:ee:17:6a:
9c:da:ba:e4:61:36:19:9a:5d:06:7a:b4:88:78:68:6b:cb:9b:
47:13:62:64:21:b6:b4:31:0d:af:30:8f:6e:56:ef:42:57:c5:
67:18:93:25:e2:73:6f:54:bd:07:da:42:0f:ae:d6:04:f4:bb:
13:37:66:f7:a9:c8:b3:fe:52:41:65:86:81:89:d5:ec:f3:c6:
64:d0:f3:c7:18:36:be:99:b5:1b:ad:1c:4a:34:84:2e:80:f0:
fd:a5:7a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:30:28 2025 by rpki-client