Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/0YFrK6qX5oK4oz56JrHQD13FS0g.roa
File: 0YFrK6qX5oK4oz56JrHQD13FS0g.roa (raw, json)
Hash identifier: 2tfLb6Tn0cvmd2+fqOkkBuAviLh+tji+ZUyN/qd72mA=
Subject key identifier: D1:81:6B:2B:AA:97:E6:82:B8:A3:3E:7A:26:B1:D0:0F:5D:C5:4B:48
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01979B527ABC49DFA050BB440779F2986FF6
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/0YFrK6qX5oK4oz56JrHQD13FS0g.roa
Signing time: Mon 23 Jun 2025 05:46:03 +0000
ROA not before: Mon 23 Jun 2025 05:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49505
IP address blocks: 185.232.18.0/24 maxlen: 24
185.232.19.0/24 maxlen: 24
185.246.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:52:7a:bc:49:df:a0:50:bb:44:07:79:f2:98:6f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jun 23 05:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1816b2baa97e682b8a33e7a26b1d00f5dc54b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:44:11:17:0a:d3:12:87:87:ce:11:1d:ff:
36:dc:fb:c4:91:15:02:fd:15:45:8f:6c:27:0c:a4:
91:54:e7:1d:a5:d5:d3:66:e3:f9:e5:af:f2:c0:24:
e3:1a:4d:c3:bd:b5:fc:f7:50:10:06:a2:29:2a:4f:
11:48:fc:a9:8d:4d:7b:b1:a2:d0:09:11:28:83:fc:
03:5a:c9:da:b6:f7:31:3e:3f:20:94:dc:e9:d1:92:
fd:0c:f2:b0:0f:cf:1f:05:cb:64:e0:9c:d0:e6:99:
45:bc:0d:39:64:c7:d2:27:be:48:9e:29:8f:02:63:
cb:8e:c1:c5:77:f5:3d:60:01:b1:c4:d6:99:9f:df:
54:be:06:b2:c1:2c:2a:c9:d7:72:27:e2:52:ed:fa:
f0:e9:18:f4:0a:7a:23:8e:52:39:fe:e9:59:9e:d4:
f9:c0:35:66:4c:e2:15:99:1a:ca:a4:12:79:5c:2f:
bd:09:c4:32:15:2c:39:55:ce:14:c9:12:65:8d:d7:
61:09:06:3e:62:0d:69:39:67:69:68:52:ba:7d:16:
06:02:5c:35:ac:23:9c:86:46:67:ff:8c:cd:c2:df:
63:08:db:59:97:c4:c4:64:ce:cf:00:83:29:2a:19:
9f:c4:28:a4:a4:73:34:ff:5b:fa:b6:96:94:33:e5:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:6B:2B:AA:97:E6:82:B8:A3:3E:7A:26:B1:D0:0F:5D:C5:4B:48
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/0YFrK6qX5oK4oz56JrHQD13FS0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.18.0/23
185.246.216.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4c:d4:b1:a9:bb:67:6b:4e:ba:7d:a7:22:8e:1a:c6:ed:44:
13:a6:b1:2a:21:e7:f2:5f:69:01:23:21:dc:bf:26:58:19:a3:
7c:2b:0a:5f:a9:b0:51:d3:1b:f9:0f:40:27:00:dc:e8:70:da:
27:c5:9d:32:1c:54:4c:7b:92:89:ae:e2:50:b8:13:27:e0:b4:
19:91:73:a4:75:ed:b4:d6:71:cb:ec:c7:bb:4d:e2:a2:20:bd:
65:c3:b4:00:08:11:c2:98:20:eb:ca:6c:06:b9:2a:51:1b:b7:
3a:92:f7:6c:f5:6f:9d:b6:b1:c7:84:7e:69:a5:a5:f1:c2:78:
a6:52:2c:53:19:f2:c4:27:59:40:85:51:9a:bc:4a:10:12:85:
04:fd:7f:30:cf:aa:01:cf:a2:af:38:0f:9c:8f:e3:0c:f5:e6:
31:a4:42:b4:a4:80:ed:11:f0:fe:71:01:eb:1b:a5:bb:78:39:
3d:e4:35:99:78:e9:ac:42:36:04:ef:1e:5f:5b:4e:51:6e:f9:
e2:27:43:52:cf:3c:d4:c4:f8:fa:fa:35:57:d5:bd:56:53:00:
b1:b8:1a:03:b6:44:ab:28:0b:44:96:20:66:33:90:35:9a:b8:
b1:82:a6:fe:5c:2d:fb:1b:96:05:82:45:5a:f7:e4:05:26:83:
9c:6f:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:41:21 2025 by rpki-client