Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/yWwaX-C9O2Mkit2E4nlnb9d56-8.roa
File: yWwaX-C9O2Mkit2E4nlnb9d56-8.roa (raw, json)
Hash identifier: sDT2KmFAHGk7K/2LRL7JWVshbJE2mKFleisnOgV9U7k=
Subject key identifier: C9:6C:1A:5F:E0:BD:3B:63:24:8A:DD:84:E2:79:67:6F:D7:79:EB:EF
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 0196A06CD9EECAE0C278E3730CAE0CF7B729
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/yWwaX-C9O2Mkit2E4nlnb9d56-8.roa
Signing time: Mon 05 May 2025 12:30:10 +0000
ROA not before: Mon 05 May 2025 12:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
216.252.182.0/24 maxlen: 24
216.252.183.0/24 maxlen: 24
216.252.185.0/24 maxlen: 24
216.252.186.0/24 maxlen: 24
216.252.189.0/24 maxlen: 24
216.252.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:6c:d9:ee:ca:e0:c2:78:e3:73:0c:ae:0c:f7:b7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: May 5 12:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c96c1a5fe0bd3b63248add84e279676fd779ebef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:21:f0:5a:33:40:ea:29:02:ad:a3:8f:21:
62:6c:01:8c:34:ce:1d:9f:8b:50:92:0e:01:85:b6:
fb:75:3d:3c:04:32:c2:03:cb:5a:b4:fb:f5:b7:fe:
ab:1f:3e:03:9e:a7:a2:7f:ed:f6:96:9e:f3:0f:7f:
4f:f1:b2:6e:c0:c2:77:d8:55:ad:e6:7d:ec:46:3d:
12:d9:9a:a1:b5:e3:4d:09:0a:2b:fd:26:d7:93:7a:
35:e9:b9:71:51:a8:56:2d:dd:30:9e:3e:a8:a5:45:
45:8b:8f:2b:c7:fe:10:9e:4b:ce:05:65:40:3c:0a:
12:22:69:bb:06:18:07:3e:be:4c:4a:1c:bb:a1:2e:
be:2f:73:99:08:99:82:46:db:78:89:3e:4f:b6:1b:
33:9e:13:1c:2a:2d:ed:5f:c0:c3:d3:93:65:29:7c:
6b:a1:68:b8:49:e3:f8:2b:a5:70:40:60:55:41:de:
36:48:e2:e5:e1:75:cd:5f:79:e3:91:9e:3f:af:2d:
e5:a8:9a:a6:00:83:76:7b:58:1b:be:52:4d:2b:fc:
2c:40:c9:6b:ea:91:dd:ac:b5:14:49:17:e7:ec:72:
32:aa:fc:4a:d9:ce:60:ab:92:c3:fc:c3:09:79:bf:
18:65:b5:a0:3a:97:7e:d4:80:72:d0:92:55:80:7c:
8f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:1A:5F:E0:BD:3B:63:24:8A:DD:84:E2:79:67:6F:D7:79:EB:EF
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/yWwaX-C9O2Mkit2E4nlnb9d56-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/23
85.255.19.0-85.255.21.255
85.255.23.0-85.255.31.255
185.114.120.0/22
209.206.0.0/19
216.252.177.0-216.252.180.255
216.252.182.0/23
216.252.185.0-216.252.186.255
216.252.189.0-216.252.190.255
Signature Algorithm: sha256WithRSAEncryption
3b:6d:bb:67:0f:d7:e6:6a:cd:4e:a8:cb:88:38:ca:2c:9c:a6:
1e:13:1f:ae:3c:01:bc:6c:88:f4:bc:c2:9f:6d:54:99:4c:5d:
1a:76:e8:78:f9:12:b3:1a:73:a9:a1:be:36:10:2e:f5:7b:73:
b1:43:30:aa:b0:88:cd:5b:5d:bf:a8:35:dd:0c:6e:54:a6:25:
4d:ef:ea:e0:e4:4d:6c:14:e0:2c:45:2c:93:c9:fe:2c:6e:dd:
2a:c4:d6:c2:bc:f2:7d:37:b3:b2:f4:07:fb:12:18:b4:24:f4:
91:b5:fb:7a:f8:bc:5f:bc:85:28:8d:c0:1d:c5:6b:2f:22:99:
f3:12:08:e2:60:4d:fe:0a:22:43:7b:71:b8:31:7a:11:cd:4b:
ba:ea:1f:2e:06:b9:4c:a0:1f:62:ec:74:94:bf:67:80:b2:1c:
ee:3e:84:68:41:d2:0a:df:33:f9:2c:89:5d:e4:d4:49:40:c6:
8d:f8:bb:1b:e1:2b:6a:b1:fa:2e:24:aa:c8:fd:cd:7d:4e:a1:
bc:23:f1:8a:9c:ff:58:8a:a8:31:d8:8d:a6:96:d3:5a:f8:4e:
d8:bc:f2:b2:13:af:42:c0:c1:f9:8e:20:8b:cb:00:ab:f6:28:
d5:01:18:a4:f5:7c:9d:20:74:4a:5b:f2:6c:4c:88:dc:91:c9:
48:be:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:58:55 2025 by rpki-client