Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa
File: iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa (raw, json)
Hash identifier: KntVVQ+l5TkxKddv8L7Y42R3lMc8nIp6SRc9XJjEO0c=
Subject key identifier: 8A:E6:5C:2C:FD:B0:09:8C:F6:64:BB:C5:18:B5:CD:91:41:1A:0C:72
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 0198E181E94FA1B2921093A2ABA001171CDF
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa
Signing time: Mon 25 Aug 2025 13:54:04 +0000
ROA not before: Mon 25 Aug 2025 13:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43458
IP address blocks: 185.17.248.0/24 maxlen: 24
213.159.136.0/24 maxlen: 24
213.159.137.0/24 maxlen: 24
213.159.138.0/24 maxlen: 24
2a0a:d7c0:724::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e1:81:e9:4f:a1:b2:92:10:93:a2:ab:a0:01:17:1c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Aug 25 13:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ae65c2cfdb0098cf664bbc518b5cd91411a0c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:10:b8:59:47:0d:2b:fe:86:3e:fc:c2:b8:
6e:19:84:f7:10:ee:79:e9:44:ca:68:dc:ce:93:71:
0e:e2:5e:d7:4f:57:35:52:68:a6:7c:4e:dd:31:31:
fb:70:94:fb:d5:ba:20:ab:cc:f1:f2:6e:c9:57:ea:
69:fa:3a:57:c0:11:94:c4:80:b2:29:60:14:ad:e9:
cc:2a:be:a4:d9:85:9d:be:bb:73:77:41:d8:5c:28:
25:fd:9b:f4:d6:67:b4:39:be:d5:61:02:fb:7d:6e:
84:0f:12:07:db:76:3a:3a:42:60:e7:67:05:fa:60:
c0:c5:39:50:a5:22:3d:33:51:8b:87:21:26:fc:25:
c4:a1:90:f7:17:45:bf:31:45:39:af:b9:80:84:e4:
c7:60:2c:4d:05:50:14:6b:77:0a:27:d0:a1:19:bf:
8a:fc:c3:3f:da:ad:e4:55:2e:e2:8f:a0:ae:3a:45:
b5:17:39:58:02:22:d9:dc:d5:a3:2e:0e:be:0e:b2:
4d:3b:54:f2:f7:ac:53:5e:e8:c3:d4:c4:d1:dc:d2:
1b:0c:af:a0:7a:0c:0b:5c:9e:8b:3e:0f:6f:22:d1:
18:a9:0b:8f:da:7a:a1:eb:85:a2:36:e2:99:8f:f5:
d1:80:56:8d:76:a4:7f:1e:f9:d1:74:df:54:c0:48:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E6:5C:2C:FD:B0:09:8C:F6:64:BB:C5:18:B5:CD:91:41:1A:0C:72
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.248.0/24
213.159.136.0-213.159.138.255
IPv6:
2a0a:d7c0:724::/48
Signature Algorithm: sha256WithRSAEncryption
06:ad:c8:27:96:a1:6a:e9:7a:9f:99:7f:d7:91:81:54:4c:e5:
8f:33:ce:a1:4e:3a:2d:0a:94:c7:38:d8:86:73:d3:53:53:54:
10:1a:3c:79:4d:c2:5f:b0:12:06:41:f5:5e:6a:ee:46:ff:51:
58:af:16:fe:95:f9:80:e0:6b:56:dd:72:fd:a6:54:8f:4e:16:
c2:09:c8:30:ac:73:c6:9a:75:2a:0d:3e:ff:3a:fa:6d:13:fa:
d4:6d:55:c6:c2:93:c3:97:e2:65:d3:1a:c9:d5:cb:0d:9d:db:
a5:e5:9c:b6:e8:03:8c:f9:99:f7:02:f7:7d:fd:11:f1:a0:f5:
2e:00:af:c6:9f:55:93:e4:c4:0f:b2:40:34:6b:91:e4:d5:81:
8b:70:88:52:05:46:95:78:de:4e:d1:d8:01:80:22:c8:21:1c:
68:00:8c:19:13:9d:20:e7:ef:28:68:18:9d:bf:ff:3a:bc:5c:
e2:94:b4:ab:c3:b3:45:46:13:91:53:0a:ff:09:f2:b3:c6:3c:
13:0c:0b:64:66:cc:5f:05:0f:66:0b:1a:0c:37:1e:0b:83:c1:
bc:2e:3c:a5:af:3b:35:55:3c:16:79:c4:41:e3:4b:ae:fe:28:
2e:95:af:66:20:90:db:ce:ed:cd:39:f3:f8:ad:7d:5d:41:1e:
b8:f7:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:07 2025 by rpki-client