Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vVy9Mxdsvfnr1vUZ0-8wK4FbgB0.roa
File: vVy9Mxdsvfnr1vUZ0-8wK4FbgB0.roa (raw, json)
Hash identifier: jxRXoh0wf+uALyoraEcw1RWqJaG6YYAjUQaSYyRezmw=
Subject key identifier: BD:5C:BD:33:17:6C:BD:F9:EB:D6:F5:19:D3:EF:30:2B:81:5B:80:1D
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 0196AEC508480D8E39B7D253FF9BE9245B64
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vVy9Mxdsvfnr1vUZ0-8wK4FbgB0.roa
Signing time: Thu 08 May 2025 07:21:10 +0000
ROA not before: Thu 08 May 2025 07:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.44.228.0/22 maxlen: 24
37.44.229.0/24 maxlen: 24
45.66.92.0/23 maxlen: 23
45.66.94.0/23 maxlen: 23
192.145.52.0/22 maxlen: 24
192.145.52.0/24 maxlen: 24
193.219.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:c5:08:48:0d:8e:39:b7:d2:53:ff:9b:e9:24:5b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: May 8 07:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd5cbd33176cbdf9ebd6f519d3ef302b815b801d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:14:df:65:01:ea:7d:96:5a:ef:f2:84:bb:15:
67:66:34:96:ef:4a:3e:8a:5d:1e:22:6a:c8:cd:d5:
a4:d5:12:cf:3b:b1:c3:33:6f:3d:3a:2d:70:ea:31:
96:4f:6e:3d:52:fb:20:1e:28:57:78:89:c4:fd:24:
7b:e4:07:58:67:2c:ef:27:22:7e:a6:c0:8a:b7:a9:
f8:ad:a9:62:ce:27:b2:65:c3:7c:96:7a:f7:2b:32:
54:fa:42:4b:63:de:47:7d:6b:25:4f:27:a2:15:de:
51:21:45:ce:fe:78:c0:f8:4f:56:3e:80:69:90:88:
a2:71:8e:77:64:fd:e9:63:40:94:9c:0d:20:6f:a2:
b2:76:0c:30:db:0a:9d:00:e3:24:b0:b2:d5:52:f8:
06:17:7a:59:02:3b:7b:5e:3e:86:61:e6:e6:a1:9a:
a8:2e:90:df:c9:bf:9e:23:2b:f1:a9:ab:8d:45:5e:
de:c9:0b:12:77:71:a9:49:bb:e1:12:b6:f4:dc:a1:
21:cf:13:9c:45:5f:83:84:41:e2:c8:e9:3c:4c:8d:
76:58:23:3f:b9:30:8c:2a:26:c5:9f:6e:e6:2a:87:
e1:99:de:08:ad:54:06:be:bd:39:fd:4d:f6:16:2d:
c3:d7:18:7e:cb:5f:5b:ab:4a:52:fa:9d:4a:8e:00:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5C:BD:33:17:6C:BD:F9:EB:D6:F5:19:D3:EF:30:2B:81:5B:80:1D
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/vVy9Mxdsvfnr1vUZ0-8wK4FbgB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
45.66.92.0/22
192.145.52.0/22
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c2:f7:9c:da:99:60:74:90:77:32:df:7b:77:6a:de:10:7f:
69:21:c7:90:cf:f9:da:f9:9f:19:19:d5:3c:d2:4e:cc:bf:63:
08:a4:45:a6:3f:20:bd:29:38:7c:d6:b4:91:b9:b2:25:84:a6:
8a:76:95:bf:48:94:b9:e6:2b:54:79:57:d2:ba:a4:47:3b:f9:
e6:0b:7b:45:48:98:56:75:7a:39:11:68:3f:a8:6e:ae:25:33:
7f:77:38:28:42:e2:8e:9c:d1:d9:bf:63:d5:7e:ee:69:ad:b7:
2f:a9:fa:87:3b:4b:fd:9a:51:de:7c:e5:46:6d:f9:83:05:b9:
fd:78:77:5c:87:e2:55:dc:e6:d5:0c:92:01:93:a7:66:c7:b3:
6f:21:90:67:e1:70:22:bc:bc:05:94:7a:d0:8e:9a:8e:0a:e3:
82:30:41:2d:c8:5f:21:ce:b9:2f:7b:20:87:fc:7a:58:36:ce:
1e:67:88:69:5a:ed:e2:a1:d5:d8:8c:40:98:16:11:ed:d4:7d:
88:a2:c1:a3:9d:f0:9d:a7:ac:3e:f9:97:8d:4d:52:cc:77:14:
01:20:49:94:c9:46:db:5e:78:7a:6b:da:d5:f0:72:58:2c:7e:
0e:8e:0c:37:dc:6e:83:c2:ba:e8:9e:b4:e9:ce:a7:fd:8f:02:
19:6a:1a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:07:42 2025 by rpki-client