Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/1-6txeQs5g_33zuSjTCgOD4iIjGM.roa
File: 1-6txeQs5g_33zuSjTCgOD4iIjGM.roa (raw, json)
Hash identifier: 0QhFC81+fO/ZdvCBfNNwnivS3ThqNHOEWwldyX4zRQQ=
Subject key identifier: FB:AB:71:79:0B:39:83:FD:F7:CE:E4:A3:4C:28:0E:0F:88:88:8C:63
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 01977DEEE55FB776368CCC3B5F7DA26B37EC
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/1-6txeQs5g_33zuSjTCgOD4iIjGM.roa
Signing time: Tue 17 Jun 2025 12:48:17 +0000
ROA not before: Tue 17 Jun 2025 12:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50411
IP address blocks: 37.130.8.0/22 maxlen: 22
37.130.12.0/23 maxlen: 23
37.130.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:ee:e5:5f:b7:76:36:8c:cc:3b:5f:7d:a2:6b:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Jun 17 12:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbab71790b3983fdf7cee4a34c280e0f88888c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:17:b4:d0:cc:9d:66:6e:de:68:aa:d2:92:
12:87:a3:5b:00:34:e5:46:f7:96:47:92:69:1c:b4:
59:41:8d:85:4f:2b:51:29:11:f3:ce:77:87:ba:51:
8d:d1:e9:da:a8:35:d9:a7:f3:b0:7b:4c:56:62:52:
2e:61:36:b1:e0:b3:02:1b:ee:84:d8:48:7d:c3:c4:
23:dd:e4:10:56:5d:ce:9f:ba:6f:fc:fb:41:9f:e8:
5d:cb:1c:c8:74:16:a8:9c:93:1b:f7:c9:9c:d6:e2:
f1:38:92:e5:14:fb:0b:5e:75:76:89:7b:89:1b:d5:
67:bc:c9:af:cb:ea:0b:e1:0a:39:e3:88:1c:04:6e:
59:7f:95:ad:13:de:bc:a4:8e:b0:6e:17:64:88:36:
7a:63:57:d8:0a:96:e6:ac:ea:b0:41:9c:8e:15:3b:
9d:e9:39:d9:c6:2c:96:c7:22:eb:fd:69:44:b5:10:
03:f7:9e:03:8a:5d:2c:68:60:f2:60:df:83:de:25:
30:d4:1d:ed:2b:11:8a:78:fb:ae:2d:72:77:ae:75:
fa:5d:56:1e:ad:d1:6a:2e:bb:b9:f2:bc:f8:cc:fb:
a4:86:ee:5c:e9:75:1c:1b:3e:00:67:28:ee:c8:81:
a0:88:58:66:99:71:eb:0c:3f:d6:79:41:e3:64:75:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AB:71:79:0B:39:83:FD:F7:CE:E4:A3:4C:28:0E:0F:88:88:8C:63
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/1-6txeQs5g_33zuSjTCgOD4iIjGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.8.0-37.130.14.255
Signature Algorithm: sha256WithRSAEncryption
4b:72:fc:9d:13:5c:1b:77:d0:09:b7:7a:2f:91:c9:04:e6:ad:
12:79:42:e0:4a:79:b0:b2:6d:8c:63:33:aa:5d:45:3f:bb:82:
66:0e:38:5e:c3:35:1f:65:70:a3:6e:73:ec:d6:46:18:72:9a:
49:67:e4:95:63:63:c2:c9:78:c2:23:c8:8a:6b:80:39:3e:54:
04:72:00:e9:cb:ac:14:04:0e:81:15:2e:c4:c1:f6:5b:67:f9:
56:18:8b:0c:d9:3c:6a:20:5b:e0:8f:1e:18:60:64:5e:aa:e3:
91:84:fc:c6:15:ea:be:be:a3:8f:5d:21:ca:c6:89:a9:72:ed:
3e:95:90:a2:5e:6e:2f:ba:a3:43:a8:61:ea:e3:3f:db:53:aa:
43:80:01:e1:d7:9f:e8:be:2a:90:5d:94:77:fe:1d:b4:c6:af:
36:ea:eb:d9:4d:91:7a:2f:da:2d:49:76:4e:0d:c5:c4:0e:dc:
28:32:d9:cd:8f:2a:42:73:8c:8c:81:fa:3b:c5:4a:27:22:52:
95:79:d5:11:77:bc:df:e6:cf:b7:eb:69:50:0c:fd:06:ab:e7:
aa:dd:38:f5:54:84:22:05:a6:8c:2b:52:f4:56:b0:ab:e3:b4:
69:6f:d7:f0:2e:41:80:43:01:d0:94:4c:19:13:11:56:52:74:
9f:fa:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:31:11 2025 by rpki-client