Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa
File: 1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa (raw, json)
Hash identifier: gjJx45guChbhy0m/xEIBSHB06+zn2ylMhRT3oYLGiWM=
Subject key identifier: F9:F5:3A:29:67:64:BB:3D:E2:47:B6:50:3A:90:71:47:6B:1E:74:8D
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0197818F3EF2782DC77FC036525DFB6AC59F
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa
Signing time: Wed 18 Jun 2025 05:42:17 +0000
ROA not before: Wed 18 Jun 2025 05:42:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14114
IP address blocks: 155.56.0.0/17 maxlen: 17
155.56.192.0/18 maxlen: 18
194.39.131.0/24 maxlen: 24
194.39.133.0/24 maxlen: 24
194.45.236.0/24 maxlen: 24
194.55.88.0/24 maxlen: 24
194.55.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:8f:3e:f2:78:2d:c7:7f:c0:36:52:5d:fb:6a:c5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jun 18 05:42:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f53a296764bb3de247b6503a9071476b1e748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:13:33:1e:a5:11:b5:49:fd:8c:89:bc:df:
04:a8:30:95:ce:54:43:3c:5d:25:9e:29:23:b9:f1:
bf:af:bd:d8:19:b5:6a:e5:21:09:f5:8b:8a:a3:9e:
f4:b2:9c:0d:d2:87:63:c9:4a:99:c0:1d:08:79:29:
8f:32:e9:eb:8c:7e:e3:7e:45:4a:48:26:33:16:5b:
2c:9d:3c:8b:ab:a6:8b:f1:60:53:ee:a8:f8:3d:a1:
1a:dc:e1:1b:d6:bf:8c:52:cf:89:08:28:73:fa:95:
35:72:ef:93:fe:00:14:cf:ed:26:6f:2a:1a:50:10:
d2:18:f9:9d:a3:a4:a4:52:d9:a8:5e:4d:9e:fe:ad:
3e:e0:51:07:e3:fa:39:8b:a6:6c:fe:e3:f4:4f:49:
f3:fd:2f:12:c0:4e:2c:53:ec:a8:76:e5:39:9c:8f:
ba:e8:68:69:df:9d:28:80:12:e3:df:00:80:ad:f2:
81:51:a3:a7:2f:3e:13:0a:c8:68:15:52:e4:2c:1f:
db:ba:29:e4:c8:68:11:6a:6f:41:3f:e9:9d:cc:38:
bd:70:ec:89:b5:a5:5e:6a:c6:90:8c:81:a5:2d:5e:
b0:17:a5:c6:12:f1:06:18:18:cf:69:7a:d5:aa:49:
62:16:b1:71:62:73:f6:2a:0b:d7:b0:9a:11:58:84:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F5:3A:29:67:64:BB:3D:E2:47:B6:50:3A:90:71:47:6B:1E:74:8D
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.56.0.0/17
155.56.192.0/18
194.39.131.0/24
194.39.133.0/24
194.45.236.0/24
194.55.88.0/24
194.55.90.0/24
Signature Algorithm: sha256WithRSAEncryption
96:31:81:33:48:f5:2e:ee:07:f6:dd:d6:3f:5d:d2:43:ee:0c:
35:28:4f:92:6a:35:42:bc:e5:79:da:a8:de:ac:da:6a:0e:3c:
9e:17:3d:cf:b4:f0:30:63:77:b8:66:ad:13:3d:94:3e:03:af:
a5:d7:f4:31:82:10:91:95:7b:16:e2:af:ee:bb:3c:8e:3e:4c:
ec:df:38:b3:79:d6:83:37:14:a9:a8:c3:de:d4:48:f3:1c:18:
4e:e2:16:a9:bd:80:1a:38:9a:44:7c:94:73:b0:9f:35:1b:6d:
51:5e:4a:af:07:ce:09:5d:b0:3e:b6:04:7e:01:d2:59:3f:2d:
f8:32:3c:46:91:5c:39:7b:00:08:9b:3a:24:c3:80:92:6f:a2:
15:e7:df:d0:fb:05:81:a3:a5:8d:45:35:5e:b3:09:31:c9:cf:
7f:6e:33:24:37:98:19:e1:b7:22:90:5f:40:f3:9c:92:ab:8b:
cb:41:fb:ef:3a:56:c1:ea:09:ad:25:bf:ff:e9:72:eb:68:71:
2b:d4:e8:64:6d:f1:41:65:d1:69:f7:1d:d5:85:d0:f3:d8:85:
ee:c6:05:96:08:90:d8:62:90:c5:05:1f:ba:04:1e:02:38:39:
cf:40:65:c5:b2:43:9d:dd:7f:7c:6d:79:fd:78:30:e3:24:46:
58:d7:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:34:01 2025 by rpki-client