Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/spUV2G_w7LexkppF_8NXsddCzgg.roa
File: spUV2G_w7LexkppF_8NXsddCzgg.roa (raw, json)
Hash identifier: xQa6b3SJCPpD4G7b0ZQmHLdIcSdDt4YZdrIuM2arjjg=
Subject key identifier: B2:95:15:D8:6F:F0:EC:B7:B1:92:9A:45:FF:C3:57:B1:D7:42:CE:08
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01977BFA1B684BF40A45D223AB672B33D211
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/spUV2G_w7LexkppF_8NXsddCzgg.roa
Signing time: Tue 17 Jun 2025 03:41:17 +0000
ROA not before: Tue 17 Jun 2025 03:41:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 84.55.1.0/24 maxlen: 24
84.55.3.0/24 maxlen: 24
84.55.9.0/24 maxlen: 24
84.55.10.0/24 maxlen: 24
84.55.18.0/24 maxlen: 24
88.223.16.0/24 maxlen: 24
88.223.17.0/24 maxlen: 24
88.223.18.0/24 maxlen: 24
88.223.19.0/24 maxlen: 24
88.223.20.0/24 maxlen: 24
88.223.21.0/24 maxlen: 24
88.223.22.0/24 maxlen: 24
88.223.23.0/24 maxlen: 24
88.223.170.0/24 maxlen: 24
88.223.171.0/24 maxlen: 24
88.223.174.0/24 maxlen: 24
88.223.175.0/24 maxlen: 24
95.173.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:fa:1b:68:4b:f4:0a:45:d2:23:ab:67:2b:33:d2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 17 03:41:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b29515d86ff0ecb7b1929a45ffc357b1d742ce08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:60:cc:3f:74:45:dd:72:54:e7:79:91:6a:
6e:cf:e8:a6:f9:b8:37:e5:fa:39:7c:36:e1:4f:c3:
dd:5e:7b:20:dd:bc:d2:07:62:76:3f:c2:fb:3b:cd:
9b:46:d2:ef:ba:ef:62:dd:ad:fe:9a:82:3b:28:0f:
5f:8c:cd:3a:4a:0c:e8:bd:27:b5:13:36:6d:48:bc:
27:e7:84:bb:f9:59:7b:3c:4f:a5:84:34:2a:2d:4b:
c5:a3:b3:fb:12:8e:03:6c:03:ec:ba:db:21:35:9a:
c8:53:dd:48:89:74:55:f5:80:b9:b0:2a:98:f2:f4:
6d:9e:c7:1d:25:ab:bf:d3:bc:e9:a4:8c:24:52:31:
f8:bb:91:a1:6d:ce:50:bf:f9:2e:48:2c:43:f3:0e:
1e:46:bc:15:ef:11:50:ec:33:c1:86:54:67:3f:f8:
ea:f1:fd:1b:14:ea:de:2a:df:e7:30:01:9c:ce:02:
c8:ec:48:43:bb:08:16:94:02:7f:27:ad:fd:03:e7:
36:51:c5:7d:22:fb:07:99:35:b4:9e:90:6d:fb:e4:
64:72:92:8a:e8:48:17:03:fb:c5:76:71:89:59:13:
12:41:2a:24:b9:a8:94:80:bd:4a:ab:5e:12:a6:3d:
22:51:1f:6d:ec:52:cf:cf:b7:01:a3:da:13:be:32:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:95:15:D8:6F:F0:EC:B7:B1:92:9A:45:FF:C3:57:B1:D7:42:CE:08
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/spUV2G_w7LexkppF_8NXsddCzgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.1.0/24
84.55.3.0/24
84.55.9.0-84.55.10.255
84.55.18.0/24
88.223.16.0/21
88.223.170.0/23
88.223.174.0/23
95.173.63.0/24
Signature Algorithm: sha256WithRSAEncryption
45:25:69:79:21:09:46:48:99:e0:1e:73:6e:3d:89:24:04:61:
b9:f6:d0:fb:19:28:e7:72:d6:61:ae:f8:31:65:ee:db:23:b5:
71:ff:df:22:a0:a2:b7:d2:6c:f0:25:dc:c5:13:70:08:b1:cc:
67:aa:0b:61:7c:4a:03:3e:70:3d:75:a4:a1:57:2a:5a:ad:3d:
53:88:40:79:3d:6c:80:45:7a:48:11:f8:de:7a:5e:58:bb:c5:
59:a4:4a:57:51:6a:d7:c6:0a:c9:5a:a8:95:c5:04:6e:17:2a:
8a:82:15:f2:27:33:d2:a0:59:3d:1c:a4:80:b3:e1:51:df:43:
77:e3:78:dc:09:94:a8:86:a1:35:a1:67:d4:5d:d1:a7:3b:33:
36:5d:55:cc:4c:a8:21:b1:4d:8e:f2:e8:0f:18:85:10:78:90:
40:bd:2d:98:20:c3:3d:b9:5b:60:b2:a1:ac:09:b8:af:d4:13:
05:be:7d:aa:8c:0f:ac:8a:f2:d0:47:e9:ff:af:57:ea:84:4f:
f2:a1:16:22:21:5b:bf:36:dd:8e:9f:2e:91:5d:e8:12:33:9c:
98:35:a1:94:43:40:eb:ce:f4:3b:4b:10:b8:a1:5a:c1:64:7d:
44:9c:4f:f2:b9:27:10:43:30:13:6a:48:e6:89:36:19:50:88:
0d:26:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:05 2025 by rpki-client