Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/ORUKVv-_YEE36efG4PfU64aXADU.roa
File: ORUKVv-_YEE36efG4PfU64aXADU.roa (raw, json)
Hash identifier: P7K9L7N2y9KzP1ISJt3hhdr+c/QQc0uQ0hv2NGWf2tY=
Subject key identifier: 39:15:0A:56:FF:BF:60:41:37:E9:E7:C6:E0:F7:D4:EB:86:97:00:35
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 0198AF047F068BF7EC1D035EFCB79B664010
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/ORUKVv-_YEE36efG4PfU64aXADU.roa
Signing time: Fri 15 Aug 2025 18:36:04 +0000
ROA not before: Fri 15 Aug 2025 18:36:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 185.240.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:af:04:7f:06:8b:f7:ec:1d:03:5e:fc:b7:9b:66:40:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Aug 15 18:36:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39150a56ffbf604137e9e7c6e0f7d4eb86970035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:29:7f:3a:e4:b1:f5:11:0a:7a:17:7a:8c:
e2:24:d0:e6:59:06:57:7e:f6:14:fa:17:fb:e0:2e:
68:20:bc:9f:d2:70:b2:cc:7f:d7:3e:09:1d:3d:dd:
40:35:13:01:a6:75:87:83:1d:9a:7b:f3:8f:87:0f:
19:88:a8:ff:1a:c9:8a:ea:27:28:57:4e:8d:fb:f9:
16:ba:a8:84:90:e2:ca:9e:b7:8b:a4:84:52:ea:93:
64:35:73:f9:59:ac:c2:8d:aa:d1:c8:0e:95:c6:11:
70:fe:9a:47:01:03:18:fa:d3:c5:29:5a:b6:c2:6e:
a5:49:65:20:27:76:03:11:58:74:75:29:3d:af:49:
22:99:58:1a:d4:88:a1:80:d2:1f:3f:cc:22:36:93:
86:38:a1:b3:b2:16:e4:ab:09:83:05:ff:bb:6e:cd:
31:a2:dd:c4:fb:dc:cc:01:2c:8b:3f:94:2b:e8:a0:
0e:33:6b:2c:d3:f5:a8:1d:04:e6:fe:cd:4b:7a:b1:
62:f7:2b:11:fc:39:d2:e6:f6:0d:34:65:b2:18:9e:
43:8d:8c:09:43:f8:f6:9b:8f:b4:b9:bb:76:e0:1c:
46:49:26:d7:9e:4b:77:a1:1f:5e:53:18:72:f7:1c:
6c:33:75:97:9f:6c:45:ba:ef:09:0b:d0:17:62:29:
c8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:15:0A:56:FF:BF:60:41:37:E9:E7:C6:E0:F7:D4:EB:86:97:00:35
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/ORUKVv-_YEE36efG4PfU64aXADU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:a2:6a:54:cf:61:86:cb:10:44:ec:0f:d0:09:14:e8:cf:31:
b7:30:41:39:ca:fc:67:15:61:f5:aa:c2:e9:a4:b9:21:39:6d:
bb:46:f8:f2:6b:11:2e:94:54:fb:0a:cf:13:ca:21:b1:bf:15:
ac:51:ee:d9:2f:28:cc:12:ce:ec:b3:32:9a:f2:a8:3f:35:64:
18:96:63:29:b6:cb:a4:f5:ea:53:3d:08:61:a4:bf:31:23:77:
a9:f2:97:7c:6a:2c:cd:ce:b0:2d:1b:cb:e6:89:bd:18:69:46:
8b:d7:ee:a6:3a:47:63:5d:5e:90:a7:c2:d5:14:b4:03:6f:92:
4a:88:dd:3e:e3:50:cc:71:2f:34:68:d6:53:0b:2f:76:80:d3:
64:d0:a7:f4:a0:fc:74:ce:f5:b3:eb:6a:bc:e4:dc:78:2d:e5:
64:c4:cd:90:06:ca:ea:58:d9:42:71:f6:a4:b0:46:c5:c5:8a:
e3:e3:6c:cf:7a:2a:12:e4:5c:8d:9d:87:72:10:6b:19:b2:28:
20:30:a9:e1:61:ab:3d:95:e7:62:f8:5d:ca:0f:bc:ea:a1:bf:
e5:e8:ba:01:4f:b0:72:cf:b6:1d:94:80:1a:2d:0d:86:9f:9e:
14:a4:9e:ce:98:a6:a6:d2:2e:a1:00:7b:6e:cc:d3:16:d8:f1:
8a:d0:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:53 2025 by rpki-client