Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pev6WdAolhkZJZE7YPk9mycmCWw.roa
File: pev6WdAolhkZJZE7YPk9mycmCWw.roa (raw, json)
Hash identifier: yHAc7OUe5sZnXrsOPmlFqRPJ2xi1ycyIWVWX6wCExNs=
Subject key identifier: A5:EB:FA:59:D0:28:96:19:19:25:91:3B:60:F9:3D:9B:27:26:09:6C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0197872E3CACB61941179839CB9344248E8C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pev6WdAolhkZJZE7YPk9mycmCWw.roa
Signing time: Thu 19 Jun 2025 07:54:03 +0000
ROA not before: Thu 19 Jun 2025 07:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 84.32.136.0/22 maxlen: 24
88.216.20.0/24 maxlen: 24
88.216.21.0/24 maxlen: 24
88.216.103.0/24 maxlen: 24
88.216.185.0/24 maxlen: 24
88.216.212.0/24 maxlen: 24
88.216.213.0/24 maxlen: 24
88.216.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:2e:3c:ac:b6:19:41:17:98:39:cb:93:44:24:8e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 19 07:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5ebfa59d02896191925913b60f93d9b2726096c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:14:ed:d0:40:5d:15:45:94:b3:1c:c1:43:
8f:e0:0d:22:58:85:e1:63:1e:33:04:f6:aa:6b:25:
39:f7:9f:5f:8e:da:29:d6:f5:cc:81:9c:1d:21:15:
d6:8d:e5:77:b6:0b:e8:06:0a:02:7a:a8:40:4b:05:
e9:fe:01:0a:08:9a:bc:11:7a:c2:71:b2:56:66:87:
aa:44:2c:fe:b7:a5:dc:63:8f:5d:95:6c:f2:96:7a:
7b:e2:93:c2:49:78:20:ff:f3:72:8e:47:be:91:9a:
d6:65:3c:38:00:61:e6:54:68:38:3a:24:a5:6f:90:
5e:19:c0:9d:12:06:e1:2c:78:64:f6:62:f1:83:cf:
54:8f:44:a2:8b:e9:d2:f6:fb:bd:1a:44:65:d8:e3:
12:6c:bc:28:4f:82:f5:74:19:04:d5:79:49:70:de:
d5:c7:96:f0:ed:59:09:94:b4:e7:ff:27:be:31:d3:
7d:29:a7:92:94:63:07:94:8c:30:37:44:8f:23:a9:
b3:07:a3:59:6b:db:67:9b:e2:b8:c4:0f:41:67:7e:
b1:a3:83:62:03:21:da:53:bf:b4:ca:be:75:67:d9:
09:81:02:2f:a6:e9:6c:ee:be:5a:68:c7:fc:bd:1a:
fb:72:30:7a:bc:e1:e3:dc:7b:57:ee:d9:ee:4b:56:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EB:FA:59:D0:28:96:19:19:25:91:3B:60:F9:3D:9B:27:26:09:6C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/pev6WdAolhkZJZE7YPk9mycmCWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.136.0/22
88.216.20.0/23
88.216.103.0/24
88.216.185.0/24
88.216.212.0/23
88.216.248.0/22
Signature Algorithm: sha256WithRSAEncryption
50:95:97:39:40:79:bf:0c:5b:b5:98:2e:65:c9:1b:12:91:7f:
81:02:b6:d7:5e:a0:46:bf:cf:0f:0f:29:f0:a3:1c:58:e0:da:
f2:9c:25:80:7e:d1:af:cc:0a:f1:c4:6f:cb:01:d0:a7:df:cc:
fb:70:b1:66:29:dd:dd:99:7f:0e:1f:7e:2a:41:7a:ff:58:38:
57:7f:ab:59:9d:18:67:c5:bf:44:a2:f5:77:63:28:0c:aa:b5:
93:60:ee:2f:84:85:e6:cd:39:e0:ee:c9:97:72:fb:9c:8c:d5:
b4:b1:a9:29:cd:06:07:43:00:78:d9:39:84:4d:1a:e0:66:01:
18:eb:8c:9f:65:9c:35:69:44:d8:78:3c:de:cd:6d:98:cf:17:
1b:83:1c:6e:cb:88:c9:64:c8:37:7f:35:29:63:af:c6:4a:26:
bc:9e:58:02:4e:ad:88:24:fa:46:c9:15:20:5f:3f:9d:68:f9:
7f:11:3d:cb:98:cb:09:15:f0:1f:e7:a0:55:39:a4:2e:be:73:
3c:a8:59:a7:5f:cb:a8:3f:e1:13:00:84:0d:2e:8a:cc:cd:75:
43:45:50:ba:16:9b:01:ed:25:43:4f:a1:6b:57:7a:e2:71:44:
b1:e3:4b:76:27:85:97:c0:f8:ec:18:da:5f:d2:cf:10:7d:a9:
40:d4:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:23:59 2025 by rpki-client