Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/kVfwRWpWGCdaLYKlxXAo9BahOeE.roa
File: kVfwRWpWGCdaLYKlxXAo9BahOeE.roa (raw, json)
Hash identifier: vJQJdP1v5Z/klqHzrnnFxsprM10eWpnFqcs7vy+a6nU=
Subject key identifier: 91:57:F0:45:6A:56:18:27:5A:2D:82:A5:C5:70:28:F4:16:A1:39:E1
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 0196A5D177941E4A6BFE74CE510E974314C5
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/kVfwRWpWGCdaLYKlxXAo9BahOeE.roa
Signing time: Tue 06 May 2025 13:38:10 +0000
ROA not before: Tue 06 May 2025 13:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35179
IP address blocks: 79.110.192.0/20 maxlen: 24
83.168.64.0/22 maxlen: 22
83.168.71.0/24 maxlen: 24
83.168.72.0/21 maxlen: 24
83.168.80.0/21 maxlen: 21
83.168.88.0/22 maxlen: 22
83.168.96.0/23 maxlen: 24
83.168.100.0/22 maxlen: 24
83.168.104.0/24 maxlen: 24
83.168.108.0/23 maxlen: 23
83.168.114.0/23 maxlen: 23
83.168.116.0/23 maxlen: 23
83.168.120.0/23 maxlen: 23
83.168.126.0/23 maxlen: 23
185.49.29.0/24 maxlen: 24
185.49.30.0/23 maxlen: 23
193.239.56.0/22 maxlen: 24
2a01:96e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:d1:77:94:1e:4a:6b:fe:74:ce:51:0e:97:43:14:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: May 6 13:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9157f0456a5618275a2d82a5c57028f416a139e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:35:c2:74:39:6b:df:0d:5e:82:fd:7a:e8:
a4:6d:49:8c:62:5b:c1:db:37:c1:02:25:25:fb:02:
06:08:17:c4:20:2b:77:a5:a5:2f:d7:0e:0b:e0:9e:
95:8e:18:23:32:c4:fd:1d:35:6a:23:db:68:1c:34:
4b:48:07:35:e4:91:ae:23:e6:b5:49:2b:12:9a:e1:
04:b2:cf:4c:92:0d:f0:2f:05:62:ca:a7:70:7b:0a:
84:7c:f2:27:1a:50:8a:5f:e6:b6:d5:83:e5:cb:75:
34:83:1f:67:5b:11:e5:15:67:5e:2b:4f:b7:ed:46:
14:c1:08:49:2a:c1:2c:6a:cd:d2:b7:1f:46:b8:2a:
17:3c:c6:bb:cd:7d:a4:b0:12:ba:75:71:e9:07:b8:
bc:c5:64:0f:d7:1f:72:ce:53:0e:b6:8d:01:86:9e:
02:54:97:89:c3:6a:ff:5d:85:17:b7:64:0b:9c:9d:
e4:ca:4e:81:16:55:2f:44:a5:9c:2f:98:b8:d9:5b:
47:27:fa:4f:7f:87:c2:0a:cd:cb:27:79:be:43:d7:
49:ae:2d:b5:e2:2c:c3:c7:01:93:5d:be:cd:8e:a4:
1f:0f:2f:e0:ca:65:c7:59:b5:61:f6:e5:d1:ec:de:
26:c0:92:e1:3f:05:df:33:1f:84:06:9b:3f:a4:00:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:57:F0:45:6A:56:18:27:5A:2D:82:A5:C5:70:28:F4:16:A1:39:E1
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/kVfwRWpWGCdaLYKlxXAo9BahOeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.192.0/20
83.168.64.0/22
83.168.71.0-83.168.91.255
83.168.96.0/23
83.168.100.0-83.168.104.255
83.168.108.0/23
83.168.114.0-83.168.117.255
83.168.120.0/23
83.168.126.0/23
185.49.29.0-185.49.31.255
193.239.56.0/22
IPv6:
2a01:96e0::/32
Signature Algorithm: sha256WithRSAEncryption
65:9d:f1:e4:96:b8:88:7e:01:45:dd:aa:a6:59:60:d7:d1:87:
f2:b4:31:ea:85:91:bf:84:33:78:cd:a3:03:e8:56:76:3f:d0:
ac:33:4d:f4:07:92:25:2a:35:1a:4a:8d:1c:93:07:ff:a7:e9:
9e:67:a3:6a:cc:28:75:0d:3b:50:f0:50:8f:e6:ac:1b:a2:d3:
73:90:b6:93:0d:65:10:d0:ca:9c:50:90:76:08:5d:13:70:71:
1f:ff:09:a5:e7:b1:e4:62:d6:df:c1:0d:e2:f5:be:48:60:ac:
69:0f:22:12:b6:50:88:42:f9:e7:d9:67:12:83:13:b4:80:63:
ee:76:b8:bf:3a:5d:c1:a5:a8:bb:73:e5:a6:32:fb:d9:dc:64:
0c:14:42:b1:c5:7e:6a:21:73:ce:cd:25:5b:20:7e:7a:85:bc:
9c:97:fb:20:2c:06:4b:ff:10:ab:86:22:94:90:20:90:47:53:
d4:2c:6e:92:31:09:63:5a:6c:cc:4c:06:52:15:30:b0:67:09:
2c:38:80:64:f9:3c:a4:5f:92:78:8e:f9:9d:33:a0:56:c3:ce:
b4:48:b8:01:98:46:d2:b6:3d:35:45:c0:69:87:d0:ae:6d:ac:
64:00:bc:f9:a8:60:0a:83:d5:70:a5:63:64:41:50:24:ba:fe:
d6:78:c0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:54:18 2025 by rpki-client