Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/Dribm7v4eJGFRaCGtu-42niad5g.roa
File: Dribm7v4eJGFRaCGtu-42niad5g.roa (raw, json)
Hash identifier: COADFM31Atbne40gqBHSktN8SaWdLigZF/t1VPBNlag=
Subject key identifier: 0E:B8:9B:9B:BB:F8:78:91:85:45:A0:86:B6:EF:B8:DA:78:9A:77:98
Certificate issuer: /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial: 019883AB03701B937AD261D19BF46D27E4FB
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/Dribm7v4eJGFRaCGtu-42niad5g.roa
Signing time: Thu 07 Aug 2025 08:34:39 +0000
ROA not before: Thu 07 Aug 2025 08:34:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35546
IP address blocks: 80.241.144.0/21 maxlen: 21
80.241.144.0/24 maxlen: 24
80.241.145.0/24 maxlen: 24
80.241.146.0/24 maxlen: 24
80.241.147.0/24 maxlen: 24
80.241.153.0/24 maxlen: 24
80.241.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:ab:03:70:1b:93:7a:d2:61:d1:9b:f4:6d:27:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
Validity
Not Before: Aug 7 08:34:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eb89b9bbbf878918545a086b6efb8da789a7798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:fb:c3:62:50:50:43:a5:1c:20:92:10:c6:
fa:91:cb:bb:72:09:8d:1e:6f:a1:64:16:81:8a:96:
89:e2:3f:8b:88:8f:75:ed:bd:6b:c2:16:2a:72:b6:
ce:a3:00:79:a5:23:61:f4:2e:d7:70:c2:70:23:36:
4b:5b:12:73:a4:92:73:d5:94:88:31:97:fa:25:a9:
d6:de:aa:8e:8b:66:eb:ab:c8:cc:02:5e:14:62:20:
fd:cc:96:e7:21:87:e2:a0:76:43:0d:43:1e:e8:b6:
1a:ce:24:2c:be:55:0c:62:3e:03:a7:71:e7:8b:cb:
df:0d:dc:6b:cb:c2:f9:22:5b:d4:12:43:96:84:fc:
2a:cf:c9:ff:c4:72:43:3a:27:b4:16:f5:b3:2b:23:
e4:26:9e:16:2d:05:6f:75:ae:d9:5f:e3:1f:c4:16:
ed:c9:3b:a4:e3:d1:49:b0:ac:d7:da:2a:1b:75:d1:
b2:70:22:11:3c:68:89:29:d5:7c:d4:49:7e:74:e9:
e2:63:96:10:1d:71:4b:b3:5c:01:f4:f9:3e:a3:c3:
85:86:91:37:df:c9:84:68:70:17:82:dd:99:0b:14:
9a:b2:0a:03:dd:57:27:e0:df:3f:10:a9:a7:47:26:
b6:bf:99:9a:39:8d:c3:e1:ae:f4:f6:a2:27:16:6f:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:9B:9B:BB:F8:78:91:85:45:A0:86:B6:EF:B8:DA:78:9A:77:98
X509v3 Authority Key Identifier:
keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/Dribm7v4eJGFRaCGtu-42niad5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.241.144.0/21
80.241.153.0-80.241.154.255
Signature Algorithm: sha256WithRSAEncryption
77:1a:4e:6e:06:72:33:e5:ff:35:7b:b7:be:d0:11:8c:ca:7a:
05:a1:6a:b6:14:48:0d:ad:c7:09:06:b2:16:d5:c1:e2:ba:40:
01:db:00:b5:ac:af:3f:3a:b1:5e:df:fd:e0:a1:83:21:be:e0:
c6:1a:3e:42:83:41:61:07:ae:de:b0:b6:4c:c4:80:76:ab:0d:
b1:c1:26:61:96:c8:ba:86:d1:e6:0e:e7:42:bf:2d:25:bc:40:
81:c6:70:2b:69:ca:f9:9d:2d:db:8a:4a:27:c8:0e:c7:24:ae:
a3:45:fd:cb:f6:56:82:9a:0b:bf:72:1b:15:30:72:37:55:32:
ad:83:28:43:31:55:15:62:6d:46:5c:37:c3:21:f3:27:e2:df:
75:fb:00:b1:21:bd:3f:45:aa:b3:6e:34:62:03:f7:9c:7f:59:
42:42:d0:06:ef:f4:7c:b7:fd:6f:b3:22:e8:0a:f5:ac:7a:12:
9f:cd:d9:99:30:8a:03:e0:85:dd:21:20:83:e0:b2:a3:29:4a:
38:c0:52:42:4f:4f:b8:be:ab:67:d0:1d:ba:73:43:4c:a2:48:
a3:55:2e:c2:aa:09:96:4b:16:95:8b:65:c8:01:cf:23:7c:cd:
95:08:43:98:41:5d:65:6a:15:7f:6e:a3:bb:e4:ce:10:db:d2:
b4:25:fd:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:19 2025 by rpki-client