Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VwkIFN2eOWXRK6bJHc_kcY_HK1w.roa
File: VwkIFN2eOWXRK6bJHc_kcY_HK1w.roa (raw, json)
Hash identifier: grd9gZQ5MILN4ARk3kO45EvrB27mVcoR9XBcTJaO74s=
Subject key identifier: 57:09:08:14:DD:9E:39:65:D1:2B:A6:C9:1D:CF:E4:71:8F:C7:2B:5C
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0197783C77BD3D96BB1E546650B12D51A62C
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VwkIFN2eOWXRK6bJHc_kcY_HK1w.roa
Signing time: Mon 16 Jun 2025 10:15:18 +0000
ROA not before: Mon 16 Jun 2025 10:15:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.50.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.29.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:3c:77:bd:3d:96:bb:1e:54:66:50:b1:2d:51:a6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jun 16 10:15:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57090814dd9e3965d12ba6c91dcfe4718fc72b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:67:5d:85:9e:46:50:76:c5:e5:69:1d:0f:
b1:8b:59:59:b4:62:74:18:8e:86:be:6a:d6:f3:53:
7b:27:c8:dd:d5:03:01:01:d7:a7:9e:eb:d1:46:29:
3b:2a:ff:3e:9e:2e:6b:04:a0:91:aa:79:c2:23:3d:
6d:a7:c4:9a:c9:fa:50:17:93:fb:3d:82:ac:57:a3:
a9:ba:13:9f:b3:45:41:09:fe:0a:de:3a:fb:07:9c:
81:d8:0a:ce:5a:7f:fa:fc:aa:16:55:be:ad:cb:7f:
ed:85:8a:b3:a7:c1:b8:9b:b7:25:b5:ab:89:23:e3:
41:3e:64:47:9c:87:a2:2e:8b:1b:b5:cf:b8:2a:91:
7e:7c:03:2a:60:58:ec:0f:c2:50:87:07:25:ed:75:
0f:0c:d2:3d:a7:43:50:f1:4e:a9:71:1d:72:95:4d:
b2:2f:fd:7e:7a:1a:46:bf:6a:71:b9:b9:50:39:54:
e6:9a:8a:5c:1d:3c:3d:37:ff:51:b3:17:96:3b:26:
bc:1d:eb:c0:a7:fb:51:e8:aa:9c:3a:94:fc:60:e7:
1a:e3:02:b4:e5:90:d2:71:cc:d9:16:68:db:5c:40:
13:aa:47:91:f4:ac:cb:85:08:96:9e:41:31:1a:78:
20:cc:d9:f4:f5:65:e5:6b:05:0a:c3:0e:51:b5:7a:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:09:08:14:DD:9E:39:65:D1:2B:A6:C9:1D:CF:E4:71:8F:C7:2B:5C
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VwkIFN2eOWXRK6bJHc_kcY_HK1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0-109.236.51.255
185.254.28.0/23
185.254.31.0/24
193.35.152.0/24
Signature Algorithm: sha256WithRSAEncryption
68:85:24:ef:09:21:28:43:09:06:1c:f0:2a:0d:ec:39:e0:96:
b0:83:9c:d5:01:76:0b:bf:83:99:ab:63:37:e3:aa:54:de:8b:
d6:06:7b:9f:60:e5:fd:f1:ca:66:cf:8b:c3:bf:ed:2a:c9:74:
d7:47:d3:dc:f5:d0:d0:7d:98:b5:46:a4:b3:1a:7a:c5:70:36:
84:c0:b9:b2:43:61:bb:39:55:d2:ae:d7:07:e4:2c:b6:e6:b7:
78:ee:6e:e9:f3:50:32:db:af:a4:7c:a9:6d:86:44:1b:d9:17:
88:78:1c:f6:49:2e:30:4e:ad:a7:03:d6:ee:ef:d8:12:a4:33:
b5:4a:5d:ab:12:54:e5:a2:6e:cf:17:b9:a8:d2:09:7a:2b:87:
67:4f:f8:35:2b:77:23:8c:25:35:14:b6:6d:bf:cc:ab:57:e8:
07:16:2e:19:40:77:4d:bd:fe:68:11:92:01:1b:33:a9:3c:df:
b2:0b:58:82:6d:f1:b6:8c:ce:02:e8:b6:e1:5e:27:ad:05:b5:
db:1c:86:23:3a:45:7b:ae:61:5c:88:a8:8b:8a:4a:62:5e:43:
a9:08:61:e8:c7:f1:c9:1c:f1:69:22:d7:52:75:b3:10:10:3f:
59:59:2d:3b:53:46:2f:cc:66:32:56:cc:9b:a7:c8:33:29:e0:
f0:a6:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:44:00 2025 by rpki-client