Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f3aUKR01sJo_dAaHsTzQF6S0zKc.roa
File: f3aUKR01sJo_dAaHsTzQF6S0zKc.roa (raw, json)
Hash identifier: jWB0v95yvyZNG3l09dYOqXg5vX+meYs9CeQDvWd7dco=
Subject key identifier: 7F:76:94:29:1D:35:B0:9A:3F:74:06:87:B1:3C:D0:17:A4:B4:CC:A7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0197AB8B00C7621E104C4084498B4A3E4677
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f3aUKR01sJo_dAaHsTzQF6S0zKc.roa
Signing time: Thu 26 Jun 2025 09:21:43 +0000
ROA not before: Thu 26 Jun 2025 09:21:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 185.206.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:8b:00:c7:62:1e:10:4c:40:84:49:8b:4a:3e:46:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 26 09:21:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7694291d35b09a3f740687b13cd017a4b4cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:0e:3d:bc:18:2a:c2:ed:a6:57:78:70:95:
0a:31:f1:e8:6f:ff:d1:58:41:77:37:c0:7f:6b:d0:
6c:54:c3:6d:5e:a6:f8:4b:1b:8c:ac:86:ef:88:f3:
15:32:54:1c:9f:f0:34:1b:14:74:0a:ac:c0:00:d6:
6c:81:99:20:43:3e:93:c5:13:f8:b5:83:e5:91:1a:
2a:5f:91:f5:25:7d:81:65:64:ef:f5:14:33:22:57:
a0:a7:a8:00:78:1b:dc:68:6f:fb:b7:a0:b1:ad:94:
77:e6:98:ba:2b:d8:99:08:ef:99:8c:1a:52:63:62:
a2:dd:c0:28:ea:3a:78:31:9f:eb:3e:d1:5f:e2:25:
f8:eb:a1:dc:5b:5e:67:9b:92:e1:73:6a:4f:53:df:
e7:85:19:fe:51:79:bb:1a:ae:2a:d4:5d:14:8b:f2:
3f:19:b6:a2:26:b4:97:a8:b4:9b:da:c3:c8:ec:23:
b9:67:bb:b4:fb:86:14:e0:66:aa:4b:a1:2e:78:e2:
cc:d9:04:11:1b:fc:ed:93:fc:d2:c6:ad:b0:4e:d1:
cb:60:8a:46:d6:79:41:68:0d:26:79:b5:b5:fb:db:
e2:43:04:0d:96:ed:9d:c8:6b:6c:46:b0:3f:2a:f7:
d8:9c:2d:9c:5c:6c:f7:db:f4:dc:a7:8b:53:b7:6b:
a1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:94:29:1D:35:B0:9A:3F:74:06:87:B1:3C:D0:17:A4:B4:CC:A7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/f3aUKR01sJo_dAaHsTzQF6S0zKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e8:a8:77:67:b6:6c:46:2f:2c:8f:e3:9d:6c:4e:d1:5f:d2:
7e:2b:4f:eb:d5:65:df:ac:88:67:e2:9c:86:7d:70:66:89:ff:
cc:e1:11:e5:6c:68:90:e9:d6:fc:98:94:65:25:a8:ec:93:76:
f1:5f:44:da:b5:6b:30:2d:d2:df:44:11:21:03:91:ba:f5:30:
ef:0f:0f:63:59:1f:f3:cc:be:a1:7f:e4:5b:d1:3c:18:8e:5b:
ce:f6:01:30:8e:f4:d0:79:46:f3:a5:b6:53:2e:f9:76:9a:c2:
6e:06:2d:fd:cc:ca:d6:59:f7:b1:4c:24:0d:3b:45:c0:b9:4c:
2e:da:c8:3b:0a:00:08:8b:50:b5:25:d4:8d:e7:6c:40:9d:cc:
2d:f5:5c:e9:82:d1:58:40:08:ca:c8:ea:0f:b0:a2:25:2b:06:
8d:84:f7:22:50:d2:96:9f:aa:d7:fb:fe:10:98:dd:e8:fb:3d:
15:74:82:44:85:5f:b7:75:3c:7e:cc:fe:ca:5b:99:c1:f5:d7:
33:88:af:96:c9:7d:4a:a0:5f:3e:bd:51:2d:33:2e:e6:b7:4a:
43:2b:1a:20:44:b3:ea:a1:4d:42:a3:03:5e:1c:84:c7:20:e5:
f5:34:7a:2c:c3:5a:1c:e6:53:bb:91:a0:8c:80:e1:5a:5b:5b:
8f:e6:b3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:30:02 2025 by rpki-client