Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/YXA6aqio6Sogb7UifutDHrpNQ4Q.roa
File: YXA6aqio6Sogb7UifutDHrpNQ4Q.roa (raw, json)
Hash identifier: xfPovmvwvvSgxymKTvQ/ETIu4GwrujkG9BRHiCGNR8E=
Subject key identifier: 61:70:3A:6A:A8:A8:E9:2A:20:6F:B5:22:7E:EB:43:1E:BA:4D:43:84
Certificate issuer: /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial: 0196A8B5367AFA63862CED4DFF0AC9D35D47
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/YXA6aqio6Sogb7UifutDHrpNQ4Q.roa
Signing time: Wed 07 May 2025 03:06:10 +0000
ROA not before: Wed 07 May 2025 03:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64289
IP address blocks: 185.225.24.0/24 maxlen: 24
185.225.26.0/24 maxlen: 24
192.189.157.0/24 maxlen: 24
2a14:3f80::/45 maxlen: 45
2a14:3f80:8::/45 maxlen: 45
2a14:3f80:10::/45 maxlen: 45
2a14:3f80:18::/45 maxlen: 45
2a14:3f80:20::/45 maxlen: 45
2a14:3f80:28::/45 maxlen: 45
2a14:3f80:60::/45 maxlen: 45
2a14:3f80:80::/45 maxlen: 45
2a14:3f80:88::/45 maxlen: 45
2a14:3f80:100::/45 maxlen: 45
2a14:3f80:108::/45 maxlen: 45
2a14:3f80:3d1::/48 maxlen: 48
2a14:3f80:800::/38 maxlen: 38
2a14:3f80:c00::/38 maxlen: 38
2a14:3f80:1000::/38 maxlen: 38
2a14:3f80:1400::/38 maxlen: 38
2a14:3f80:1800::/38 maxlen: 38
2a14:3f80:1ed0::/45 maxlen: 45
2a14:3f80:2000::/38 maxlen: 38
2a14:3f80:2400::/38 maxlen: 38
2a14:3f80:2800::/38 maxlen: 38
2a14:3f80:3000::/38 maxlen: 38
2a14:3f80:3400::/38 maxlen: 38
2a14:3f80:3800::/38 maxlen: 38
2a14:3f80:3c00::/38 maxlen: 38
2a14:3f80:4000::/38 maxlen: 38
2a14:3f80:4400::/38 maxlen: 38
2a14:3f80:5000::/38 maxlen: 38
2a14:3f80:6000::/38 maxlen: 38
2a14:3f80:7000::/38 maxlen: 38
2a14:3f80:8800::/38 maxlen: 38
2a14:3f80:af38::/45 maxlen: 45
2a14:3f81:5800::/38 maxlen: 38
2a14:3f82:4000::/38 maxlen: 38
2a14:3f82:6000::/38 maxlen: 38
2a14:3f82:7000::/38 maxlen: 38
2a14:3f82:8800::/38 maxlen: 38
2a14:3f87:2800::/38 maxlen: 38
2a14:3f87:4800::/38 maxlen: 38
2a14:3f87:6800::/38 maxlen: 38
2a14:3f87:9800::/38 maxlen: 38
2a14:3f87:c800::/38 maxlen: 38
2a14:3f87:e000::/38 maxlen: 38
2a14:3f87:f000::/38 maxlen: 38
2a14:3f87:fc00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b5:36:7a:fa:63:86:2c:ed:4d:ff:0a:c9:d3:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Validity
Not Before: May 7 03:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61703a6aa8a8e92a206fb5227eeb431eba4d4384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:9f:40:c4:b0:c1:84:09:0d:18:be:15:16:
1a:d0:8c:f6:84:f5:e6:db:0a:27:29:e1:c4:d1:50:
e7:0f:b4:e8:a8:6b:72:ca:01:fb:97:76:20:9d:ba:
37:c2:fb:46:f0:8e:60:c4:fb:6d:63:30:b3:ff:03:
6e:87:0d:37:ca:c8:8a:9b:dc:94:b6:59:4a:b0:60:
30:25:cc:37:ab:85:0e:fa:33:53:1d:fa:c2:92:4d:
a9:e2:59:89:f7:63:23:f3:0a:92:2e:5b:54:76:ac:
4b:8e:f1:fc:37:c6:57:9b:64:58:f6:25:91:7f:35:
e8:6c:27:e7:0c:f5:8a:10:0a:2c:c4:41:0a:4c:6e:
dd:e3:7d:ca:91:4c:a2:49:42:02:3d:fc:43:19:26:
14:d4:77:c1:fc:cb:d6:ba:f9:ab:9c:d2:72:5e:45:
b3:25:65:7b:8a:2c:a4:65:9f:ca:34:a0:e0:6c:dd:
e6:fd:89:e5:1f:2d:6c:fa:23:1e:5c:b6:4d:3d:98:
04:70:99:ef:37:fc:6a:90:6c:91:08:9c:3f:6b:c0:
5d:fa:2d:d1:a2:73:9f:1d:3f:35:95:d3:21:f6:73:
e3:d4:1a:93:f9:6c:20:af:b5:2d:a6:d5:92:08:a5:
7e:22:d4:b5:93:5c:15:9e:91:37:2d:7a:18:e2:04:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:3A:6A:A8:A8:E9:2A:20:6F:B5:22:7E:EB:43:1E:BA:4D:43:84
X509v3 Authority Key Identifier:
keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/YXA6aqio6Sogb7UifutDHrpNQ4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.24.0/24
185.225.26.0/24
192.189.157.0/24
IPv6:
2a14:3f80::-2a14:3f80:2f:ffff:ffff:ffff:ffff:ffff
2a14:3f80:60::/45
2a14:3f80:80::/44
2a14:3f80:100::/44
2a14:3f80:3d1::/48
2a14:3f80:800::-2a14:3f80:1bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:1ed0::/45
2a14:3f80:2000::-2a14:3f80:2bff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:3000::-2a14:3f80:47ff:ffff:ffff:ffff:ffff:ffff
2a14:3f80:5000::/38
2a14:3f80:6000::/38
2a14:3f80:7000::/38
2a14:3f80:8800::/38
2a14:3f80:af38::/45
2a14:3f81:5800::/38
2a14:3f82:4000::/38
2a14:3f82:6000::/38
2a14:3f82:7000::/38
2a14:3f82:8800::/38
2a14:3f87:2800::/38
2a14:3f87:4800::/38
2a14:3f87:6800::/38
2a14:3f87:9800::/38
2a14:3f87:c800::/38
2a14:3f87:e000::/38
2a14:3f87:f000::/38
2a14:3f87:fc00::/38
Signature Algorithm: sha256WithRSAEncryption
b8:11:7a:25:e6:99:10:1f:98:d4:a6:27:53:5f:75:11:6d:b7:
cf:21:1a:71:a7:f2:51:d1:df:63:0a:92:09:7a:b5:aa:53:63:
f4:0f:69:5d:87:fa:a5:b6:91:0b:fd:b4:4d:5a:16:de:40:5c:
3b:0c:68:2b:ff:ae:77:7f:46:78:68:f6:d9:da:8b:e0:50:03:
d8:1a:b1:08:41:9c:14:45:7b:93:bd:84:e6:d9:c9:94:20:30:
d5:60:89:2f:36:38:8b:44:3c:ce:48:64:39:54:8f:51:4a:06:
6a:77:a5:d8:82:53:23:ab:b5:7e:bf:5a:b3:2a:25:22:0c:fb:
92:5a:c4:da:05:a7:6b:f2:f3:f7:07:ad:c0:59:8a:64:19:96:
f4:f9:09:c3:52:96:97:4f:56:83:59:29:d6:90:6f:17:03:24:
02:f4:57:c0:c9:c5:20:ee:5c:da:fe:7e:a3:b4:0d:3c:9e:57:
a1:d0:33:39:a0:d0:dc:ab:90:78:00:0c:e1:fb:6e:2f:72:b1:
55:18:04:c5:06:d7:3a:a2:9b:4f:83:da:16:e1:8a:c0:f3:18:
e1:fd:db:6f:0e:53:b0:73:10:96:77:14:1f:79:e0:01:ca:18:
26:fa:70:9a:de:9e:0c:e2:6e:b6:ca:fb:2b:01:81:02:32:dc:
b1:b5:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:09:52 2025 by rpki-client