Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/AqRcwBOoELP7sO7G2ArRpdIIf-8.roa
File: AqRcwBOoELP7sO7G2ArRpdIIf-8.roa (raw, json)
Hash identifier: Y1QC1/53Sd9JtcwMQ3kWoyldjEFlmNNOZ3rUXpglWPs=
Subject key identifier: 02:A4:5C:C0:13:A8:10:B3:FB:B0:EE:C6:D8:0A:D1:A5:D2:08:7F:EF
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 019768F46C10A95658587A8EE78482A78E57
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/AqRcwBOoELP7sO7G2ArRpdIIf-8.roa
Signing time: Fri 13 Jun 2025 11:02:18 +0000
ROA not before: Fri 13 Jun 2025 11:02:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21034
IP address blocks: 185.2.146.0/23 maxlen: 23
185.179.103.0/24 maxlen: 24
212.43.96.0/19 maxlen: 20
2a00:1be0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f4:6c:10:a9:56:58:58:7a:8e:e7:84:82:a7:8e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jun 13 11:02:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02a45cc013a810b3fbb0eec6d80ad1a5d2087fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:65:d6:0a:9c:96:e0:8f:68:d8:87:9e:e6:
78:2f:e3:d1:83:f2:49:98:98:9c:6a:63:1e:af:71:
82:2c:0a:fe:93:5f:35:e0:22:d9:8c:ea:f9:84:18:
9a:fa:59:7c:e8:48:50:54:02:60:38:46:bc:f1:3e:
a4:42:43:b1:57:95:64:68:9b:8e:30:05:ff:3f:d4:
cb:6b:9b:e4:34:56:25:15:a9:2b:cf:bc:3d:15:3f:
02:c3:3c:25:68:22:06:e1:9d:c4:8b:7a:99:c5:be:
c4:46:18:47:0c:ac:7b:d7:8b:d2:27:28:e4:4f:65:
ad:f5:4b:61:0b:6d:c0:eb:35:ea:b2:a1:42:6b:70:
8d:bf:51:cc:0c:0d:b1:a6:95:8d:2f:f8:59:c7:0a:
2c:a9:53:d2:80:04:3a:2f:7b:6d:a5:03:e7:76:e7:
c6:56:39:74:26:ac:0f:9e:c3:68:19:eb:15:a2:8d:
59:c9:1d:fb:d3:7f:68:38:30:1e:a4:ea:3a:d6:91:
ce:eb:3a:60:bd:0c:ba:fe:5d:bc:6a:5f:4e:d0:7d:
26:c0:5c:67:86:78:af:90:68:c1:36:92:43:18:92:
ec:06:a2:cd:b5:7e:b6:b6:e2:4f:38:4d:de:28:05:
cd:b0:8a:28:e0:f7:1b:86:f2:c1:d0:c1:96:b3:71:
de:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A4:5C:C0:13:A8:10:B3:FB:B0:EE:C6:D8:0A:D1:A5:D2:08:7F:EF
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/AqRcwBOoELP7sO7G2ArRpdIIf-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.146.0/23
185.179.103.0/24
212.43.96.0/19
IPv6:
2a00:1be0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:3c:73:27:82:bd:f0:11:03:19:40:02:44:62:02:64:c0:fd:
1d:6d:be:30:d9:b6:00:06:82:33:65:18:a4:31:4e:88:63:ed:
2a:62:11:c1:5f:b5:76:a7:93:f5:83:0b:08:0d:c2:2f:29:7f:
a5:c6:c4:d3:22:3b:1c:6c:c9:ee:e1:4c:7c:56:07:5c:83:ee:
ff:dd:91:9b:62:7d:69:72:38:12:35:7d:db:79:a8:82:9a:ea:
35:c7:0d:f0:25:f6:6e:c1:7b:f6:73:d1:f6:f0:79:fd:f8:1c:
f6:50:50:21:b5:52:ad:e2:70:b4:cb:7c:8f:85:1d:7e:6c:ac:
c7:01:6b:ec:27:c9:36:a0:4c:e3:b8:b7:5c:71:28:8a:00:0e:
9f:8d:c5:61:c0:ba:1f:b3:33:91:79:d0:64:ea:d2:20:60:32:
57:a4:04:d7:42:52:c7:a9:41:5b:19:6b:eb:1b:e5:30:6c:8e:
c7:40:31:71:02:4d:f3:99:c0:54:96:53:23:a1:a7:a0:ab:5d:
dc:df:5d:b8:3e:70:03:03:1a:b2:50:56:18:12:26:34:ee:90:
20:f1:a4:69:eb:3b:bb:59:c4:61:5d:6f:73:c0:a7:b0:e6:da:
8d:b0:ef:01:bb:7f:a8:f1:30:bd:2e:3e:bc:cd:d8:21:6f:14:
8c:d5:27:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:57 2025 by rpki-client