Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ff6PjCKYxksSpT1f0K8hi0k7er8.roa
File: Ff6PjCKYxksSpT1f0K8hi0k7er8.roa (raw, json)
Hash identifier: VflQNvUfdCGYwmZ2tB2YKnhTx72Pgu7vVHPUvzvijoU=
Subject key identifier: 15:FE:8F:8C:22:98:C6:4B:12:A5:3D:5F:D0:AF:21:8B:49:3B:7A:BF
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01975650B03F4626379E5BF44F29FFD003BB
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ff6PjCKYxksSpT1f0K8hi0k7er8.roa
Signing time: Mon 09 Jun 2025 20:10:17 +0000
ROA not before: Mon 09 Jun 2025 20:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 2.58.168.0/24 maxlen: 24
2.58.169.0/24 maxlen: 24
77.242.150.0/24 maxlen: 24
77.242.156.0/24 maxlen: 24
77.242.158.0/24 maxlen: 24
83.137.159.0/24 maxlen: 24
88.151.57.0/24 maxlen: 24
88.151.58.0/24 maxlen: 24
88.209.217.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
92.52.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:50:b0:3f:46:26:37:9e:5b:f4:4f:29:ff:d0:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 9 20:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15fe8f8c2298c64b12a53d5fd0af218b493b7abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:e1:a0:01:87:aa:00:b9:54:23:31:ea:a2:
4d:8b:de:42:b1:1e:62:5e:c6:24:38:64:84:c6:10:
50:8d:91:9d:86:ce:87:7c:c1:cd:06:03:01:60:4b:
83:25:21:4d:26:02:05:21:c5:40:5d:b2:02:b3:0f:
ef:3a:73:9c:28:87:73:90:71:8f:4a:c3:f9:1e:e0:
25:38:73:32:b1:74:93:b8:b5:e3:19:be:28:7c:19:
c3:dd:df:36:03:0b:80:b8:96:98:4e:ba:ae:70:2b:
29:73:d6:51:95:a6:39:c3:15:d8:72:16:69:0e:51:
a4:82:5b:bb:1d:08:de:37:2b:e0:c6:3b:82:e4:c2:
26:04:68:72:0d:23:94:70:b2:fa:f3:d8:8b:0c:cd:
f3:0c:e4:c3:49:ca:58:b5:e2:87:1d:e7:78:3f:41:
45:c6:e9:be:95:ba:3d:41:d8:54:08:7f:21:7b:bd:
64:36:74:53:5e:25:1a:b5:be:14:6d:00:3f:df:33:
28:6b:e5:8a:ab:59:0a:b3:97:9e:ee:37:03:f9:44:
85:3b:56:e8:71:8a:08:71:76:55:1d:3a:91:85:0c:
72:90:21:aa:c1:9b:03:b2:c3:26:af:fb:26:c1:fd:
59:b2:58:34:73:81:2e:ef:c2:18:db:5c:e7:64:93:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FE:8F:8C:22:98:C6:4B:12:A5:3D:5F:D0:AF:21:8B:49:3B:7A:BF
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Ff6PjCKYxksSpT1f0K8hi0k7er8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.168.0/23
77.242.150.0/24
77.242.156.0/24
77.242.158.0/24
83.137.159.0/24
88.151.57.0-88.151.58.255
88.209.217.0/24
88.209.226.0/24
92.52.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9f:f8:be:18:59:40:0b:95:7e:a8:0b:e5:4b:a6:e0:fb:46:
7c:e2:92:1a:16:bb:f7:66:10:e4:bb:55:43:3c:32:7f:0d:a4:
ba:17:f2:a3:dd:48:d7:1b:85:f4:a8:39:95:cc:95:8e:03:a2:
45:7a:48:94:ef:0a:b1:f1:02:3b:86:ed:bc:32:dd:53:a4:1a:
c7:0f:12:5f:58:fd:5b:ff:6b:c5:33:36:3c:42:6b:04:4d:35:
9b:5a:61:19:51:03:9d:84:a5:1f:7a:97:4e:9d:ce:6a:b8:b4:
e6:25:48:51:46:64:20:86:7a:58:b3:ab:e7:a7:fd:38:da:30:
73:23:b5:b3:6d:98:17:75:02:e9:ae:42:26:b1:8b:97:69:50:
b4:5e:48:be:b6:4a:f0:df:7f:51:b5:0f:cf:d4:34:a7:7a:1c:
02:18:01:fe:c6:8e:71:a8:09:61:aa:63:ab:d2:e4:d2:e5:6b:
8a:78:88:d2:a4:16:de:28:28:95:1a:29:5b:58:30:03:08:19:
69:4c:6b:66:8c:ff:e9:aa:4a:67:fd:e0:ac:bc:95:ad:05:a6:
94:d1:33:8d:2e:54:2c:6b:3a:44:33:45:d8:46:f8:ce:0f:64:
67:24:9f:a4:c9:2f:c8:9f:0c:69:bc:ac:36:4a:b5:b7:10:e4:
30:11:8e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:23:39 2025 by rpki-client