Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/6v0nzfvGeTgWbd7HMB1o0jugKV4.roa
File: 6v0nzfvGeTgWbd7HMB1o0jugKV4.roa (raw, json)
Hash identifier: FIng+1902A4Yeb0hTmwd9v/HruvnzrDdoUL01BIRQaM=
Subject key identifier: EA:FD:27:CD:FB:C6:79:38:16:6D:DE:C7:30:1D:68:D2:3B:A0:29:5E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019779250174CDECEF6411E2B1275380FBB3
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/6v0nzfvGeTgWbd7HMB1o0jugKV4.roa
Signing time: Mon 16 Jun 2025 14:29:17 +0000
ROA not before: Mon 16 Jun 2025 14:29:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208972
IP address blocks: 46.235.14.0/24 maxlen: 24
178.210.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:25:01:74:cd:ec:ef:64:11:e2:b1:27:53:80:fb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Jun 16 14:29:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eafd27cdfbc67938166ddec7301d68d23ba0295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:28:dd:9c:09:e9:6d:db:5b:ad:20:5d:4d:
14:bf:76:7c:fa:f6:51:22:2d:1d:b6:fb:69:6a:67:
bd:dc:ec:0e:23:3b:9e:89:c7:33:bf:58:f4:bc:76:
e7:bc:f2:45:22:ae:80:9b:99:28:73:64:b9:ff:4c:
d7:9b:a3:11:1f:60:a4:cb:ef:54:bc:2b:5c:c3:da:
47:36:35:72:f7:5a:41:bc:5f:7e:d7:b5:a4:94:34:
25:b7:9f:e0:fc:c4:25:04:21:80:11:46:c4:02:17:
1d:90:43:1e:a5:1e:a1:8d:52:71:da:a4:b2:02:25:
ea:f6:05:ed:29:bf:7c:2a:74:d2:d2:71:12:c1:09:
34:4a:9c:03:f7:97:68:13:b0:71:75:9c:ef:d6:00:
5d:d5:8c:78:92:36:f7:23:66:e3:a6:5e:d7:2c:fa:
78:06:28:56:b6:d9:39:21:59:37:c4:07:20:06:87:
c4:7d:38:66:ad:f4:24:a5:f2:75:02:1c:f3:ba:90:
7b:49:14:9e:eb:ec:30:c2:3d:e3:22:3e:eb:1c:2e:
01:f3:b4:2b:d1:f0:4d:52:1a:31:41:81:62:4e:1f:
11:20:b4:d3:7f:eb:f4:3c:50:b6:da:36:a9:9c:98:
5a:46:18:51:05:4e:de:b2:2f:5a:fa:b6:30:07:fa:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FD:27:CD:FB:C6:79:38:16:6D:DE:C7:30:1D:68:D2:3B:A0:29:5E
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/6v0nzfvGeTgWbd7HMB1o0jugKV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.14.0/24
178.210.180.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b8:ce:8e:e9:93:22:e6:d4:46:93:29:25:a8:5c:f9:8e:ac:
f3:69:63:4b:20:0a:da:72:e3:6b:a4:74:ab:6c:2d:21:b4:b5:
66:1c:b4:8b:1a:be:08:99:03:b0:76:7b:04:b9:c3:17:9d:05:
8a:9d:26:cb:b0:0f:9e:0c:a7:49:34:9d:25:6d:99:f2:e5:7b:
fe:b5:14:49:ed:ea:16:49:6e:09:16:79:62:83:45:50:7d:3c:
3b:e1:0e:8c:ad:ea:6e:50:59:ba:1e:75:f5:c2:60:33:46:34:
69:85:b2:0c:d4:58:26:6e:fb:6a:58:8c:2d:25:a4:1f:2d:92:
06:5a:bc:f8:e9:92:97:27:31:25:dd:23:f2:08:a1:7f:06:cf:
97:f3:0a:38:71:30:96:b7:2a:cb:4e:99:19:5a:55:92:6b:eb:
9d:6e:80:f5:36:5a:00:44:37:e6:89:a3:b3:62:17:77:ac:bd:
ce:47:a5:d2:67:50:6d:76:a2:f4:a4:4f:9c:b3:2f:a6:76:e7:
e5:ab:c3:a1:2a:86:8b:df:e8:60:f2:e1:e0:08:df:55:80:5b:
89:f6:27:fa:95:1e:69:86:ca:c3:8f:2d:8c:ba:94:b1:7e:5e:
8e:c5:b2:66:cd:63:ab:88:53:4d:f7:c0:88:a7:38:2c:bd:6b:
66:0a:81:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:40:32 2025 by rpki-client