Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/AqZiwYxbJJKU6sbeWYL6QjFjjCI.roa
File: AqZiwYxbJJKU6sbeWYL6QjFjjCI.roa (raw, json)
Hash identifier: Rp1l+EARGnu+3ML8br5NRV2qxEwQsfw/DKCrRjQMQbQ=
Subject key identifier: 02:A6:62:C1:8C:5B:24:92:94:EA:C6:DE:59:82:FA:42:31:63:8C:22
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 0197C597B3D08F602C73529A340FA8AFF4F0
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/AqZiwYxbJJKU6sbeWYL6QjFjjCI.roa
Signing time: Tue 01 Jul 2025 10:45:42 +0000
ROA not before: Tue 01 Jul 2025 10:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43668
IP address blocks: 94.131.221.0/24 maxlen: 24
185.218.200.0/24 maxlen: 24
185.255.236.0/24 maxlen: 24
185.255.237.0/24 maxlen: 24
185.255.238.0/24 maxlen: 24
185.255.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:97:b3:d0:8f:60:2c:73:52:9a:34:0f:a8:af:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jul 1 10:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02a662c18c5b249294eac6de5982fa4231638c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:61:d0:59:58:d1:43:83:70:6c:64:6e:03:
de:59:ef:76:fe:31:b8:58:48:a2:96:40:a1:1a:c3:
6b:7b:81:8e:6a:4c:9d:9a:5e:69:1f:93:91:11:d3:
d8:cd:dd:b3:49:86:27:a7:a1:b3:a0:c2:a1:b3:e6:
3b:96:49:5b:84:a9:e3:a2:bc:11:09:22:83:e2:08:
e3:9d:38:17:5e:4d:4b:a6:13:32:a7:50:61:f7:b6:
eb:6c:48:a3:bd:45:a9:7f:24:cb:5c:c3:5d:48:c7:
72:c7:f7:d8:56:11:2b:d5:30:2d:ea:27:65:3e:34:
c0:74:7c:96:5c:e9:7a:93:30:1a:8f:bc:ca:0d:f9:
51:dd:bc:02:88:21:ca:34:7e:a4:6c:07:f4:7f:64:
12:20:cc:e8:38:da:67:5b:1b:60:8f:95:9c:25:26:
d7:3f:19:23:de:45:5e:2c:1d:71:57:6a:79:93:80:
5a:56:7d:18:36:e5:a2:9f:90:2d:5d:86:1a:a3:91:
86:98:06:ff:0e:8c:cd:15:34:42:06:46:70:b2:54:
9a:cf:bc:97:d2:82:f2:c3:29:31:82:f2:fc:93:16:
e4:7a:3a:4e:a3:6f:b6:c4:1c:c6:cb:df:d1:6f:af:
8a:42:42:32:d6:28:88:7a:8b:54:f1:30:5d:45:99:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A6:62:C1:8C:5B:24:92:94:EA:C6:DE:59:82:FA:42:31:63:8C:22
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/AqZiwYxbJJKU6sbeWYL6QjFjjCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.221.0/24
185.218.200.0/24
185.255.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:ea:f4:2a:3d:b1:6e:a0:09:ae:73:33:87:ee:e8:32:95:ee:
21:21:fc:8e:73:d3:88:77:56:96:1b:f1:29:54:13:6b:67:92:
09:dc:35:c6:3b:8d:db:ed:80:12:7a:73:d9:b6:f3:4f:ef:63:
a6:98:ad:18:96:31:dc:4c:5f:42:ff:74:48:1f:0f:c5:e0:c5:
3a:fe:f1:13:b7:95:73:64:7b:7e:a1:8a:58:14:ee:72:09:19:
a8:70:4f:d5:6f:bd:98:31:12:94:1b:75:17:81:5d:3c:f9:69:
f8:aa:1e:0b:e0:50:cd:40:c8:46:c8:ac:1f:83:f4:41:a1:c8:
71:e9:4b:58:8c:36:bd:56:e3:04:8a:ec:ab:74:94:cb:61:21:
b4:0f:b1:a4:5d:c2:81:a6:5c:b4:02:b2:0b:19:aa:22:2b:26:
91:d4:a5:9f:24:2a:f3:ee:85:da:5a:a0:4a:03:a8:ba:16:56:
93:90:b3:a2:5f:34:82:20:f2:15:fb:a2:c9:78:e8:a9:f5:7d:
b2:b8:d7:e2:e1:6b:57:cf:d9:8a:1e:ab:d2:b1:31:13:59:a0:
46:2d:8c:9e:6f:be:8d:68:92:96:02:10:df:d6:e2:f5:c9:79:
52:ae:0d:95:83:d2:5b:da:50:84:6c:e2:6b:f3:42:29:43:74:
59:dd:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:30:53 2025 by rpki-client