Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0U76h2BnPa9DhhX-GFy3cAPeJf4.roa
File: 0U76h2BnPa9DhhX-GFy3cAPeJf4.roa (raw, json)
Hash identifier: 5iBCqRcRIOiarqBRpL+Ej3sGxrkg4NCcjha7ED9S8AY=
Subject key identifier: D1:4E:FA:87:60:67:3D:AF:43:86:15:FE:18:5C:B7:70:03:DE:25:FE
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01979CC62FAE0654288E2766BF98377CAEB3
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0U76h2BnPa9DhhX-GFy3cAPeJf4.roa
Signing time: Mon 23 Jun 2025 12:32:03 +0000
ROA not before: Mon 23 Jun 2025 12:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213908
IP address blocks: 194.62.52.0/24 maxlen: 24
194.62.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:c6:2f:ae:06:54:28:8e:27:66:bf:98:37:7c:ae:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 23 12:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d14efa8760673daf438615fe185cb77003de25fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:8d:52:d9:fa:34:62:55:89:81:5b:74:f0:
d8:28:0b:2f:b1:eb:8b:67:e8:63:05:93:a7:b4:a6:
af:a7:92:e3:80:50:60:2f:57:fb:e4:47:01:e0:f0:
28:51:6b:b1:aa:c0:59:91:bf:73:94:6d:b0:2f:83:
1c:9c:b2:9a:75:9a:5f:1d:2a:80:6c:76:41:11:d4:
63:da:f2:4e:e3:db:0d:d5:f1:75:a2:52:dc:ad:67:
71:01:1c:66:2f:6e:b5:1f:73:00:1a:99:6b:97:11:
e8:4e:0a:75:c1:40:78:95:6d:e2:51:63:f6:a0:1b:
ab:ab:bc:aa:5c:36:f8:78:d4:af:d6:47:fd:70:11:
cf:34:19:e7:b1:51:45:90:c0:cc:75:d7:2d:cd:ce:
b4:b5:6f:dc:c0:a7:fe:c7:f2:18:a5:de:e9:51:8a:
d7:99:c7:8b:d7:cf:3a:df:99:bc:b8:57:a2:22:e8:
e0:c6:59:a1:34:39:8d:0d:26:29:d8:44:d5:57:5f:
0e:2c:74:90:55:58:04:97:55:eb:53:12:c8:3c:b0:
f5:67:4f:e3:26:de:19:85:2e:f0:3e:82:40:31:49:
28:03:49:82:c2:fb:aa:1d:54:76:5e:41:8e:87:0a:
14:11:41:f4:26:f6:2a:d8:6e:66:b5:dc:58:98:0f:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:FA:87:60:67:3D:AF:43:86:15:FE:18:5C:B7:70:03:DE:25:FE
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/0U76h2BnPa9DhhX-GFy3cAPeJf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.52.0/23
Signature Algorithm: sha256WithRSAEncryption
26:55:37:1e:c8:62:4a:20:97:90:78:aa:81:93:80:ba:10:dd:
5c:24:5a:50:ad:a9:9d:14:ed:f1:56:45:f2:2c:d6:a7:e3:f5:
d3:2c:b1:8a:00:47:8d:17:c3:e9:57:d9:64:74:81:13:f4:37:
a0:a4:eb:9a:d3:e8:09:0f:a6:63:84:f2:cd:81:60:24:40:ce:
b0:71:41:c8:d3:31:df:43:bb:a2:7f:44:fc:88:2b:f7:03:6e:
fc:bc:b5:de:14:9e:b9:40:23:f5:2c:8a:64:70:fd:ff:0f:0e:
22:07:4e:b5:38:8a:f3:ef:2c:95:e7:9f:34:14:ea:d5:af:f0:
ac:94:94:5b:63:c1:d9:2e:ce:0b:43:e2:67:bc:b0:f1:69:73:
69:25:2f:29:e3:60:2b:01:73:f3:36:d1:20:37:43:e1:e6:51:
ab:39:93:ac:e5:92:29:5d:51:13:76:d0:40:72:62:4b:82:45:
b3:ba:e0:07:8e:d1:17:60:87:e0:7d:05:14:b8:07:04:b3:da:
ab:b9:b7:9b:52:0d:c6:9a:d6:ae:ba:9e:c0:90:83:5c:02:e0:
e4:11:2c:4e:4e:e2:46:24:a6:21:0f:5c:2a:07:c9:bd:9d:23:
66:02:e9:b6:87:e8:71:30:a4:74:fb:cd:e4:37:a7:9c:e4:57:
58:8c:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:41 2025 by rpki-client