Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa
File: cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa (raw, json)
Hash identifier: Xi+GnpcIV9drKvTmQHNYIPB6evWNG3aHkh9CmwgJtg0=
Subject key identifier: 70:12:90:7B:53:68:E9:67:FE:07:71:66:2D:FA:57:18:D7:1C:FC:8F
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0197B06ADCA5ED1F308A87AA5475ED94B286
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa
Signing time: Fri 27 Jun 2025 08:04:42 +0000
ROA not before: Fri 27 Jun 2025 08:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209604
IP address blocks: 5.10.223.0/24 maxlen: 24
185.23.237.0/24 maxlen: 24
185.23.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:6a:dc:a5:ed:1f:30:8a:87:aa:54:75:ed:94:b2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jun 27 08:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7012907b5368e967fe0771662dfa5718d71cfc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:01:ec:02:98:90:0a:52:43:0e:af:2f:b6:
d5:e1:0c:25:09:2f:6d:23:a3:e7:d5:97:07:a6:61:
86:bb:28:13:e5:50:32:18:39:ce:e6:4f:4a:2f:52:
d7:54:76:1c:03:53:c9:7f:54:7d:2c:d4:fb:9b:51:
b1:e1:08:ac:f5:18:03:b8:cb:82:91:80:3d:de:09:
99:ef:ad:33:7d:75:de:6b:26:48:a3:64:88:09:a5:
62:62:bb:db:ba:08:45:a5:f9:ae:a7:08:f3:40:d6:
2f:23:1e:99:a5:59:28:b4:56:3d:87:34:e6:84:6a:
97:8f:32:03:66:c4:bf:3f:9b:34:76:b7:a7:d2:77:
7f:5f:08:a0:4d:4f:a9:4f:41:e4:b2:54:8a:f9:62:
16:1f:1d:4d:dd:eb:90:ec:21:de:1e:a4:43:e1:47:
85:3a:4e:85:d3:8f:12:91:11:de:8e:d8:56:f8:a7:
a3:cf:0d:11:1c:52:1a:b8:b1:f5:b3:81:4b:d8:fa:
82:fb:f3:04:0e:fd:ba:52:e3:0f:0e:d8:c5:be:3b:
cf:de:d5:3a:17:20:49:74:f9:57:1e:90:a0:de:60:
4e:41:f2:5b:bd:57:54:ed:92:df:88:ad:52:10:23:
f1:72:9f:6b:d9:87:d0:3d:14:8f:3a:53:f4:b0:ac:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:90:7B:53:68:E9:67:FE:07:71:66:2D:FA:57:18:D7:1C:FC:8F
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/cBKQe1No6Wf-B3FmLfpXGNcc_I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.223.0/24
185.23.237.0/24
185.23.239.0/24
Signature Algorithm: sha256WithRSAEncryption
96:5f:2c:f9:b5:d4:32:45:6b:ff:49:b8:5c:8c:fd:09:5a:15:
c6:ce:26:2a:65:c0:5c:22:17:9c:a4:7a:93:91:49:27:00:82:
dd:bc:f2:b8:c5:86:46:c0:41:a2:12:43:0e:e1:c1:1d:fe:94:
3d:6e:52:fc:2a:4e:9e:87:9b:35:d8:d1:3a:f2:b4:25:6e:f7:
f6:d1:8a:92:36:45:af:be:1c:cc:8f:aa:86:10:d5:b2:54:65:
a8:b6:e8:b6:81:03:dc:2f:ae:a1:96:3c:ff:80:8f:c6:93:a1:
a7:6c:66:2c:64:d5:62:15:ec:da:26:3b:51:e4:01:66:aa:ca:
91:a0:41:07:32:1d:5d:a8:79:c8:da:63:82:17:15:e3:2f:37:
a0:e9:22:60:e4:36:67:76:34:18:11:cd:b5:6b:b9:1f:25:52:
f6:33:cd:25:1b:0b:1e:06:79:d5:30:94:75:38:11:e3:12:24:
cc:95:4d:74:3f:a7:be:28:53:c2:11:ff:14:1b:dd:fe:43:7f:
a6:3d:c7:d7:7c:f1:82:51:7b:51:db:2d:64:75:a4:10:14:86:
7f:2f:a5:bc:a8:d2:b9:47:f5:d6:76:42:e4:61:a8:af:32:b2:
14:fe:91:3d:36:4b:6d:4a:08:05:9a:6d:3b:d7:82:ca:c1:4d:
c3:6d:40:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:07:34 2025 by rpki-client