Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/u6xu47lVBeiaVoqPvGYlS6YjDew.roa
File: u6xu47lVBeiaVoqPvGYlS6YjDew.roa (raw, json)
Hash identifier: p7fpG3+8AWzUR9kpIen8iYWVMZw+1gNSlLayfWtcmgA=
Subject key identifier: BB:AC:6E:E3:B9:55:05:E8:9A:56:8A:8F:BC:66:25:4B:A6:23:0D:EC
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0197CF4E450304541A97739D688D8F9E0279
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/u6xu47lVBeiaVoqPvGYlS6YjDew.roa
Signing time: Thu 03 Jul 2025 08:01:42 +0000
ROA not before: Thu 03 Jul 2025 08:01:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216341
IP address blocks: 80.64.19.0/24 maxlen: 24
185.39.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 08:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:4e:45:03:04:54:1a:97:73:9d:68:8d:8f:9e:02:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 3 08:01:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbac6ee3b95505e89a568a8fbc66254ba6230dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:5d:b1:a8:c8:1f:70:41:73:46:63:5c:44:
5f:f2:cc:67:bf:a1:9c:03:00:24:72:a1:30:82:c4:
c2:c1:e9:e7:27:09:02:b7:05:fc:78:d5:14:cd:67:
91:63:10:ea:ab:04:0b:07:d2:f3:c4:2f:41:8c:76:
2d:be:2b:fb:80:e2:3d:b8:d7:0e:cf:f1:8d:9f:9d:
dd:8d:b0:f9:a2:d0:f9:29:f0:b2:92:09:73:cd:fc:
95:87:76:ea:ff:68:b3:62:1d:0c:6a:9f:23:f4:99:
a5:44:dd:ea:19:36:bd:95:c3:a8:91:dd:e5:24:a8:
95:9d:b6:ab:51:17:29:14:e2:a7:d5:07:ce:36:3a:
37:37:49:b0:9f:da:6a:7f:62:f8:2f:c9:71:46:0c:
30:eb:1d:d8:54:57:14:09:bb:69:86:b3:2c:70:23:
32:40:17:52:5a:59:62:fc:b4:61:4c:51:ec:7c:2e:
19:84:0c:ef:df:0c:44:6a:34:83:88:3d:3b:2b:ea:
85:e4:01:4e:b4:21:f6:43:2d:fb:25:64:05:c6:16:
b7:7f:ba:30:da:20:f7:0b:34:6f:63:b8:f1:d7:54:
73:64:14:5b:6b:33:47:7d:ac:e8:42:29:12:17:78:
f1:c7:cb:04:0a:c8:3b:ae:d7:81:48:35:c8:12:58:
41:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AC:6E:E3:B9:55:05:E8:9A:56:8A:8F:BC:66:25:4B:A6:23:0D:EC
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/u6xu47lVBeiaVoqPvGYlS6YjDew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.19.0/24
185.39.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:3e:71:87:28:80:e1:ff:f5:c0:3b:47:31:97:cd:46:63:ba:
f4:1d:16:24:d4:82:3c:a4:24:78:fe:6f:fa:17:0c:59:c5:f0:
2e:b0:f4:fa:69:1b:e9:c8:5e:a1:d6:7a:3a:4b:ad:81:1c:5b:
2f:d3:06:a2:49:7f:76:51:b1:68:06:1a:cc:a9:8f:39:62:0e:
02:68:b0:ef:3d:25:2d:58:29:83:79:4a:dd:a7:2c:1e:6b:5d:
bf:34:f2:8d:43:26:80:34:44:22:8f:0e:a8:80:53:1e:20:7c:
59:77:93:8d:5f:b4:7b:ca:3d:47:bc:19:dd:1d:b2:09:64:a0:
14:6e:31:8a:dd:75:16:4e:94:91:7b:e3:b8:a8:3f:d5:cc:bb:
f3:4d:61:9d:23:35:27:9c:32:26:cd:f5:81:e5:a4:97:8a:c2:
e3:7c:4b:9e:de:ad:c1:60:3f:43:c5:76:81:da:9a:0b:f9:ce:
29:f8:55:f3:c3:84:54:aa:f5:d1:38:76:07:cc:01:d8:14:e8:
c6:45:10:c0:82:01:03:a6:39:b3:27:03:f8:7e:15:61:a5:81:
bb:13:d2:07:85:36:89:fa:a3:b1:b2:a3:7a:56:3b:02:c0:3c:
57:83:93:ee:99:35:fc:8b:ef:2f:a3:55:31:63:66:f6:ce:58:
0a:8a:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:24:19 2025 by rpki-client