Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iTfUbOhSTvXM-ZEVZsoQhtNMw-c.roa
File: iTfUbOhSTvXM-ZEVZsoQhtNMw-c.roa (raw, json)
Hash identifier: 7Mt97kbNCOygThzy6VQe9uXhz7ovnqbzxLz54mqnukY=
Subject key identifier: 89:37:D4:6C:E8:52:4E:F5:CC:F9:91:15:66:CA:10:86:D3:4C:C3:E7
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0197A69D5E8DFE6E44B8DE097DEBBA047D1E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iTfUbOhSTvXM-ZEVZsoQhtNMw-c.roa
Signing time: Wed 25 Jun 2025 10:23:40 +0000
ROA not before: Wed 25 Jun 2025 10:23:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43160
IP address blocks: 185.28.51.0/24 maxlen: 24
185.244.229.0/24 maxlen: 24
185.244.230.0/24 maxlen: 24
185.244.231.0/24 maxlen: 24
185.246.13.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:9d:5e:8d:fe:6e:44:b8:de:09:7d:eb:ba:04:7d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 25 10:23:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8937d46ce8524ef5ccf9911566ca1086d34cc3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:2d:b4:56:96:53:7d:98:bf:05:ed:a3:ba:
0a:de:1e:a4:fd:a2:53:60:e5:8e:d4:89:23:d2:61:
c5:05:e6:d0:88:04:19:27:ac:81:b2:82:59:0c:ea:
f4:76:e3:80:e5:12:75:13:0e:11:bc:de:41:9f:76:
fa:56:d4:0e:d6:0e:85:99:63:a0:08:35:a8:2d:81:
71:47:c4:10:4b:a7:2e:2f:d6:f2:9c:e0:ee:1a:b8:
b3:da:55:68:c8:28:8c:c1:5f:66:9d:f4:30:36:c7:
15:86:c3:68:4b:c0:9d:eb:3c:90:05:ae:83:f3:94:
14:ad:b8:8e:31:be:35:9d:ce:ec:9a:d1:b5:c9:91:
e9:96:6f:ac:26:04:cd:8c:08:e5:1a:36:94:0a:12:
1d:27:b7:70:83:12:5c:f3:e0:f4:ed:e9:57:fc:24:
1b:1d:a0:be:5f:1f:4e:b4:92:3f:8c:79:e6:85:93:
9c:70:7e:78:92:22:d6:62:fb:6e:14:fc:73:b3:5f:
9a:51:ec:93:14:b5:59:4e:f2:80:79:8f:b1:2a:b2:
ac:ab:4e:c4:dd:67:73:44:f1:3b:6b:e7:73:33:ba:
1a:46:9c:88:1a:b8:55:98:9d:29:c5:c0:0e:8d:68:
1d:55:b7:56:e7:89:01:6e:40:f0:a8:2f:bb:3b:63:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:37:D4:6C:E8:52:4E:F5:CC:F9:91:15:66:CA:10:86:D3:4C:C3:E7
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/iTfUbOhSTvXM-ZEVZsoQhtNMw-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.51.0/24
185.244.229.0-185.244.231.255
185.246.13.0/24
185.246.15.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a3:b7:3a:c8:c7:7d:b3:d2:5f:0b:33:b4:b9:02:cc:84:7d:
d2:cc:1f:9e:09:d6:92:54:ef:4c:25:66:43:97:ab:7a:8d:f7:
2a:98:eb:12:79:15:cd:7b:72:b3:5d:d3:e4:80:79:9c:59:d5:
b5:bd:86:ac:5d:ca:9a:a6:99:90:2f:36:c5:17:63:56:28:26:
9a:aa:d6:43:d7:70:2d:3d:70:5f:bf:92:da:6c:b8:4c:2c:ed:
f5:c4:36:79:1f:47:a6:70:55:f1:14:8a:d2:05:23:60:ce:26:
45:08:6f:72:8f:6b:87:c4:53:a5:9f:89:54:e3:67:6c:29:40:
78:27:41:09:fc:5e:2b:25:b4:03:b7:7c:16:17:00:70:7a:84:
0a:f3:26:19:36:0f:f4:5c:a2:64:c6:3f:58:f5:0c:26:1d:d8:
b0:36:96:99:fd:83:a7:6a:fc:eb:7d:5f:ee:96:90:40:57:19:
51:ce:45:9a:5a:ec:2e:fd:35:2d:d7:56:f7:db:18:3c:50:b5:
1c:5e:73:01:a9:a0:51:bc:27:4e:65:13:c7:f4:31:54:86:0f:
ef:94:6d:48:ea:9e:84:e0:8e:8b:fd:40:14:9c:9c:95:62:d2:
31:dc:b0:91:41:1a:f4:bb:85:6b:d8:65:63:c6:ee:75:39:e8:
df:33:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:01:50 2025 by rpki-client