Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/95EMcqjIsM9QeVWiI1F103-6l7Y.roa
File: 95EMcqjIsM9QeVWiI1F103-6l7Y.roa (raw, json)
Hash identifier: gu1FSS8hVzJF6G+fxoX4QZ/buhSiBu7AZC9ypB19V18=
Subject key identifier: F7:91:0C:72:A8:C8:B0:CF:50:79:55:A2:23:51:75:D3:7F:BA:97:B6
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 0197C08633B2EBEAB827741CE500EB3BE2FE
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/95EMcqjIsM9QeVWiI1F103-6l7Y.roa
Signing time: Mon 30 Jun 2025 11:08:29 +0000
ROA not before: Mon 30 Jun 2025 11:08:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 139.156.0.0/16 maxlen: 16
145.54.0.0/16 maxlen: 16
151.184.0.0/16 maxlen: 16
195.190.224.0/19 maxlen: 19
213.162.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:86:33:b2:eb:ea:b8:27:74:1c:e5:00:eb:3b:e2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jun 30 11:08:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7910c72a8c8b0cf507955a2235175d37fba97b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:f2:4f:e5:a6:2e:98:28:07:56:6a:a1:11:
39:a1:68:c9:e5:2a:6d:0d:d5:bf:d8:39:93:80:cf:
8c:5a:da:4f:f1:94:09:bb:d9:ac:14:08:14:25:bd:
f3:cd:f6:cd:1a:b7:33:ec:1f:6a:a1:8d:20:d7:74:
20:94:d9:bd:ea:e4:3e:0b:14:fa:77:7c:57:da:bf:
40:27:03:2f:8b:3b:b5:f5:34:c6:84:97:c1:d5:0b:
fc:2b:f4:5b:1b:b9:19:1c:e1:4a:53:06:e5:dc:8e:
41:11:f5:0f:aa:40:86:c0:5c:fc:82:f7:fd:85:60:
99:be:83:2f:db:05:8c:74:d8:09:4f:b6:d9:42:db:
ab:f2:63:9f:4f:79:ca:0b:b8:a6:bc:11:5b:40:e6:
55:8c:e1:98:d1:ea:85:2d:32:5a:1a:46:e3:f9:b3:
6d:62:dc:a6:36:bb:ea:4f:64:28:cc:1b:94:e2:93:
a7:e5:10:d6:a3:47:9d:d9:30:64:ff:92:50:ec:59:
2c:ad:9d:7c:63:1e:40:54:f8:70:b3:52:b1:f4:cd:
60:fc:3b:82:76:16:f6:be:b8:a6:34:ea:32:df:52:
5b:ed:ae:e1:ef:ce:95:ee:0f:31:e5:0b:8c:72:a5:
d0:39:b3:5b:31:24:63:82:3b:c0:b6:d1:8b:c1:be:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:0C:72:A8:C8:B0:CF:50:79:55:A2:23:51:75:D3:7F:BA:97:B6
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/95EMcqjIsM9QeVWiI1F103-6l7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.156.0.0/16
145.54.0.0/16
151.184.0.0/16
195.190.224.0/19
213.162.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:4f:7b:ea:bf:78:8f:6f:b1:62:e6:57:fe:f7:64:90:ff:a8:
e0:ac:32:eb:99:02:52:d6:00:d4:3a:71:d2:ad:60:af:ba:4e:
7d:ff:ce:3a:a4:b8:37:5e:de:ff:71:e6:d6:df:11:7e:8b:7f:
93:ad:ca:07:37:2f:d7:43:24:73:af:8c:2d:41:cf:28:4d:d2:
41:f1:ad:cf:5a:f9:8b:ec:58:ad:07:67:38:be:fe:d9:65:02:
a1:f7:9f:32:4b:2d:b4:af:c6:58:ea:c9:1d:65:fd:a1:e6:c2:
7f:bd:7c:ed:87:9a:9d:eb:d7:b8:d3:04:34:1f:f0:7b:69:8c:
fa:0e:9d:04:e9:7e:c4:9d:d2:28:fc:26:40:e1:71:4b:5e:55:
9d:5b:05:48:80:95:9d:b8:13:fe:4b:cc:0c:ef:91:c4:f4:2d:
bd:af:9e:f6:90:c7:6a:98:03:f5:09:1e:36:10:4d:1f:51:a5:
a5:3b:74:03:4e:3a:84:11:18:64:71:95:1f:1a:d7:1e:de:1c:
31:bd:27:a6:54:e3:de:ab:2d:c4:d5:84:d4:63:f9:dd:4d:57:
7a:30:e2:92:23:85:d1:52:0d:60:c9:1c:e8:8d:0d:39:50:3a:
ac:b7:47:8c:06:e5:8b:47:71:c9:db:6c:39:da:8a:ff:e5:24:
87:5a:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:11:45 2025 by rpki-client