Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/Yj0n54L8_fk_2zjr-vMy1qCRN10.roa
File: Yj0n54L8_fk_2zjr-vMy1qCRN10.roa (raw, json)
Hash identifier: aTlJQzdo1sOuXv8c5qqCvTjajF7OpI+KohKsrPrW87I=
Subject key identifier: 62:3D:27:E7:82:FC:FD:F9:3F:DB:38:EB:FA:F3:32:D6:A0:91:37:5D
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 01977F0BA01AFB8E55A5ED032A88B1326923
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/Yj0n54L8_fk_2zjr-vMy1qCRN10.roa
Signing time: Tue 17 Jun 2025 17:59:17 +0000
ROA not before: Tue 17 Jun 2025 17:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57961
IP address blocks: 37.139.112.0/21 maxlen: 22
37.139.112.0/22 maxlen: 22
37.139.112.0/24 maxlen: 24
37.139.114.0/24 maxlen: 24
37.139.116.0/22 maxlen: 22
37.139.116.0/24 maxlen: 24
37.139.117.0/24 maxlen: 24
37.139.118.0/24 maxlen: 24
37.139.119.0/24 maxlen: 24
185.63.176.0/22 maxlen: 22
2a00:9f40::/32 maxlen: 32
2a00:9f40:1::/48 maxlen: 48
2a00:9f40:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0b:a0:1a:fb:8e:55:a5:ed:03:2a:88:b1:32:69:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: Jun 17 17:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=623d27e782fcfdf93fdb38ebfaf332d6a091375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:8d:75:06:5e:73:32:cd:34:5a:e4:95:53:
a7:07:f6:79:a4:c9:7a:69:bd:ac:bb:12:af:29:ab:
bd:21:36:27:a7:35:68:71:ea:4b:79:11:a5:b6:de:
df:af:85:d9:e4:5a:f8:09:23:69:9e:2e:27:3e:5e:
78:35:0f:26:a1:02:b2:f6:ab:e3:36:af:54:a2:c2:
08:41:24:6a:2b:0f:5b:a8:54:ae:9b:fb:b7:f6:82:
de:a9:fc:8f:48:8c:25:b6:06:18:ff:79:16:05:f4:
ac:21:ce:23:6f:46:ea:ce:3d:0a:a8:ec:51:50:c8:
9f:6f:e5:54:12:6f:e8:fb:1f:90:8e:28:5e:70:89:
b6:76:cd:02:c6:6f:f2:56:61:f5:d0:bb:eb:ce:cf:
94:ca:49:ac:73:07:cf:51:4b:8a:9f:3e:d4:7a:b3:
e7:cb:28:95:ab:1c:b9:3b:b2:dc:65:b8:55:9c:aa:
5b:14:b0:4d:e1:c9:e5:b1:87:37:45:cf:74:cf:1c:
d3:3b:1f:c4:80:30:7d:56:f4:bb:96:4d:5d:81:61:
c0:d3:b2:3c:aa:4b:87:bc:5c:4b:85:ef:52:e3:db:
49:3c:4a:78:41:33:88:22:53:be:05:82:93:2f:4a:
99:57:d9:4a:1d:d3:3c:8a:5b:2d:f1:9b:84:ff:4f:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:27:E7:82:FC:FD:F9:3F:DB:38:EB:FA:F3:32:D6:A0:91:37:5D
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/Yj0n54L8_fk_2zjr-vMy1qCRN10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.112.0/21
185.63.176.0/22
IPv6:
2a00:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
62:5e:51:ec:7f:57:88:b5:a5:74:00:53:c4:de:42:20:c2:36:
d5:4a:82:ae:3a:a2:99:8b:b5:bf:4e:bf:ed:52:6f:06:4e:c6:
47:46:04:c4:87:65:b9:5f:ef:06:e5:21:44:bb:8e:36:87:7e:
aa:0e:7b:d7:89:32:ea:cd:d0:0a:52:e9:de:92:eb:c5:76:79:
e1:cc:df:65:e0:7f:4c:6f:82:b8:47:4e:08:fc:54:b5:91:68:
16:f3:43:af:d6:7b:23:3a:04:55:28:6c:d4:0e:40:92:f1:19:
9f:79:7e:94:6e:d1:59:51:c9:9c:82:c4:68:23:ab:eb:fe:7b:
e8:7d:f6:67:94:7d:1d:36:e0:1c:e5:49:19:91:f8:79:7b:aa:
04:37:61:e4:96:0a:49:c7:28:d0:d2:11:18:96:49:98:e9:1d:
7e:00:43:c1:7f:f6:38:f3:e4:9b:70:4d:6c:a1:d6:fb:c2:d4:
dc:04:17:e3:7b:f3:d6:4c:c1:e4:9c:d3:15:f1:2d:26:d0:5b:
e8:be:a4:45:2e:cf:87:61:0a:61:8d:11:51:7b:71:67:62:31:
1e:b4:0a:87:48:e4:8e:ec:43:d5:aa:a6:51:25:cd:28:bf:cf:
4d:c7:f3:26:60:81:88:85:a7:fd:66:c0:f3:97:2f:8a:d9:d4:
60:26:3e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:46:04 2025 by rpki-client