Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/vYN3fYbPSffdlZL2ecCWPRuF_iU.roa
File: vYN3fYbPSffdlZL2ecCWPRuF_iU.roa (raw, json)
Hash identifier: f7zca1Xa7343zBsVvDmSCYRZch2YTDhkeKKqt6AwzpE=
Subject key identifier: BD:83:77:7D:86:CF:49:F7:DD:95:92:F6:79:C0:96:3D:1B:85:FE:25
Certificate issuer: /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial: 0197A1E3F3C1A8EE028625D85F395F5053B7
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/vYN3fYbPSffdlZL2ecCWPRuF_iU.roa
Signing time: Tue 24 Jun 2025 12:22:40 +0000
ROA not before: Tue 24 Jun 2025 12:22:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203944
IP address blocks: 185.118.216.0/22 maxlen: 22
185.118.216.0/23 maxlen: 23
185.118.217.0/24 maxlen: 24
185.118.218.0/23 maxlen: 23
185.118.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:e3:f3:c1:a8:ee:02:86:25:d8:5f:39:5f:50:53:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Validity
Not Before: Jun 24 12:22:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd83777d86cf49f7dd9592f679c0963d1b85fe25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:ae:0d:9f:ba:6b:5f:69:52:05:86:5c:c1:
3e:93:e4:9a:d8:e3:f6:9a:e7:ec:23:3d:95:ae:cb:
72:71:24:59:29:86:a9:f5:18:0c:70:16:a8:5b:1f:
09:b2:5c:c7:1f:91:12:73:3a:e6:cc:ce:7b:27:6b:
f8:d6:35:26:4b:ed:41:da:94:03:76:19:42:26:9b:
ad:5b:65:1a:ec:da:96:f2:61:2e:1d:32:81:d1:80:
e5:a0:2b:e5:e2:5f:90:ca:c9:de:be:ed:a9:28:d7:
55:51:a1:31:c5:7b:03:4a:f4:4f:b3:ae:b8:cc:4e:
31:5f:11:19:2a:2d:4a:19:4f:89:c1:9c:14:4d:5e:
e9:ef:d9:6f:fa:94:02:07:80:f3:e5:f9:02:07:d6:
bb:9e:40:19:ac:6d:a5:ad:95:c4:c6:15:db:82:48:
c3:1f:88:79:c5:8f:bf:ee:bb:57:36:b5:2d:b8:9b:
77:e4:50:93:52:37:e2:33:d3:56:fe:04:82:6a:16:
91:50:5e:52:fb:a1:d7:5e:33:38:44:57:be:14:a3:
0d:22:88:c7:90:6a:fc:a6:b7:0e:de:c8:1f:c2:59:
98:61:ee:87:9a:6b:73:c6:b0:58:18:02:9a:4c:cc:
2e:77:9a:66:97:e1:56:1c:95:8a:71:d2:e4:6a:15:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:83:77:7D:86:CF:49:F7:DD:95:92:F6:79:C0:96:3D:1B:85:FE:25
X509v3 Authority Key Identifier:
keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/vYN3fYbPSffdlZL2ecCWPRuF_iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:5c:2f:b2:3c:e8:72:00:82:77:b7:e3:e3:a6:92:5d:ec:64:
4f:64:d2:e4:9f:f8:51:d7:8e:5d:ff:99:8d:e0:92:63:e4:06:
3f:e7:cb:57:a2:6a:83:b9:28:39:e8:4d:9c:e5:76:9c:82:c3:
08:cd:02:eb:ef:be:03:3e:f2:c9:04:09:0d:b3:22:ae:87:bb:
d2:ce:47:c6:47:a9:34:e9:30:9b:96:c4:72:19:5b:b8:d9:44:
78:64:1a:2e:8a:ca:4b:89:b2:06:08:72:dd:fc:44:e2:d2:b9:
d4:9d:d0:7d:88:c3:b4:4b:d8:3a:85:b3:df:8e:ea:fc:64:ed:
b3:17:02:ed:45:b6:21:8f:26:24:79:75:ef:1f:7a:c2:cf:66:
0f:26:2a:e6:b9:f1:0e:3e:4a:c2:b9:64:ca:f5:52:da:44:42:
9c:e5:33:3d:5a:ff:e1:ee:d0:16:f9:5f:b0:81:e8:23:17:eb:
b4:4e:b7:94:19:00:5e:3a:12:82:b4:ad:c1:c8:b2:36:4a:4d:
22:7b:31:0f:f4:1a:c0:c1:a1:b2:04:c6:91:ae:4a:1e:ba:a6:
33:22:02:51:0d:b2:e2:b7:97:43:c3:36:3f:3d:8a:7b:5a:72:
65:34:3e:86:21:a9:8d:d6:58:f4:14:cb:07:17:47:ea:f9:c5:
8a:45:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:54:26 2025 by rpki-client