Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/TRbKL4kGxrCFAvUXltN0ocBpT58.roa
File: TRbKL4kGxrCFAvUXltN0ocBpT58.roa (raw, json)
Hash identifier: oZP4etk1n3bpFlXee7D7+3mgIQiNQb5oae2tqJgBRbc=
Subject key identifier: 4D:16:CA:2F:89:06:C6:B0:85:02:F5:17:96:D3:74:A1:C0:69:4F:9F
Certificate issuer: /CN=171bfdd42fa9484f56e189ba683d5188c524083b
Certificate serial: 01978570D36E3536479B911197FCE030BF93
Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/TRbKL4kGxrCFAvUXltN0ocBpT58.roa
Signing time: Wed 18 Jun 2025 23:47:33 +0000
ROA not before: Wed 18 Jun 2025 23:47:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62838
IP address blocks: 185.179.204.0/24 maxlen: 24
185.179.205.0/24 maxlen: 24
185.179.206.0/24 maxlen: 24
185.179.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:70:d3:6e:35:36:47:9b:91:11:97:fc:e0:30:bf:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b
Validity
Not Before: Jun 18 23:47:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d16ca2f8906c6b08502f51796d374a1c0694f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:4a:00:b0:c9:39:fb:1b:ee:1d:c6:71:e5:
e7:76:5e:33:35:45:ec:6e:db:11:eb:6b:5d:83:48:
1e:67:89:cb:54:11:55:0d:a3:46:b4:53:00:e9:51:
78:38:38:6e:03:cd:40:7c:01:c3:8d:73:cd:e5:fa:
a7:c4:68:9b:0c:95:46:0a:cd:e8:74:08:0f:90:c0:
de:c6:ee:3f:50:a8:07:4f:9d:96:f8:d5:52:d5:0f:
7c:7e:1e:e9:a8:87:ab:25:e6:69:23:28:89:33:43:
ce:aa:61:d9:f3:2d:73:ae:26:fa:41:a0:3b:07:81:
87:6b:34:ce:60:bb:6c:1d:a9:fa:d1:15:50:8c:cf:
7b:5d:59:1a:36:97:81:62:cf:d8:4c:d6:70:3b:7d:
3e:0d:cc:49:6b:4f:2b:07:f0:da:d0:f5:0d:53:59:
04:b7:63:b1:8a:52:20:ff:27:7b:bf:c0:40:4a:0a:
c1:d9:5f:70:69:ce:7f:cb:c5:52:83:b8:81:d7:c4:
eb:54:9d:10:fc:ff:79:63:39:0d:6c:31:f0:1a:07:
cf:13:8d:99:7a:7a:37:7d:6b:9c:31:a3:5b:84:09:
be:86:ab:1d:bd:cc:12:4f:5f:8e:8f:e5:90:99:c1:
85:30:bd:a6:0c:4e:e7:31:d9:47:0a:4e:57:95:89:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:16:CA:2F:89:06:C6:B0:85:02:F5:17:96:D3:74:A1:C0:69:4F:9F
X509v3 Authority Key Identifier:
keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/TRbKL4kGxrCFAvUXltN0ocBpT58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.204.0/22
Signature Algorithm: sha256WithRSAEncryption
80:27:61:bb:fd:4c:05:6b:45:94:1e:23:46:0f:ba:25:e0:4c:
20:21:60:57:34:b5:14:3a:ae:1e:0e:88:06:b3:d3:12:00:88:
54:e6:70:90:43:8e:7f:08:f6:a8:38:31:48:2f:64:e5:b9:ae:
cc:14:46:72:d1:5d:2e:54:96:2e:53:6c:1a:bb:9f:4c:cb:cc:
4d:f9:ad:02:d0:e2:c5:07:fa:a6:9e:7d:af:6d:94:82:ff:ea:
b0:0d:99:d8:e5:80:f4:d7:ab:e0:5e:35:7c:b8:d7:2e:08:87:
ea:e7:8c:ca:fc:3c:d5:4c:0f:77:52:02:af:03:98:fd:dd:18:
48:e6:ea:2f:0a:4e:00:85:4a:ca:91:d0:6b:23:3c:5b:4c:fa:
6a:46:5d:2a:cc:48:6e:ab:0c:04:12:05:96:13:1f:eb:3b:23:
4a:d8:e4:07:cc:99:96:c2:99:b0:9d:1f:ed:82:c1:12:e3:20:
92:65:c9:d1:15:d2:b2:cd:55:de:91:ca:cf:dd:57:16:d1:e5:
12:d5:3d:11:41:bc:41:56:99:e6:c8:96:91:e1:58:31:63:f7:
c3:4e:a0:ee:a9:29:99:a9:06:57:e3:2a:c1:88:a3:fb:9d:50:
df:a5:c8:e4:52:b6:ce:84:6c:0c:8c:fc:ac:67:dd:58:8d:65:
4c:8b:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:02:41 2025 by rpki-client