Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/c2TjwRQaGUi5-pT-i6SWvc8MX1M.roa
File: c2TjwRQaGUi5-pT-i6SWvc8MX1M.roa (raw, json)
Hash identifier: z5hUG5XWsSa9xjiKSlRQxeEHwLzXHv+CPdkcBFY2vg0=
Subject key identifier: 73:64:E3:C1:14:1A:19:48:B9:FA:94:FE:8B:A4:96:BD:CF:0C:5F:53
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019774D138F52D4FC61AC7C0C1C9057CA42D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/c2TjwRQaGUi5-pT-i6SWvc8MX1M.roa
Signing time: Sun 15 Jun 2025 18:19:17 +0000
ROA not before: Sun 15 Jun 2025 18:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 14.102.234.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:d1:38:f5:2d:4f:c6:1a:c7:c0:c1:c9:05:7c:a4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 15 18:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7364e3c1141a1948b9fa94fe8ba496bdcf0c5f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:fc:f0:b2:f3:a2:72:c3:53:c2:91:08:59:
e4:2d:96:31:ab:81:3f:5f:b7:33:86:34:32:c4:b7:
2d:77:28:a1:f5:c4:ae:a4:f0:07:37:45:5d:25:be:
3d:97:5b:95:cf:e8:87:8a:7f:61:cf:3d:78:f3:24:
36:e3:95:f9:45:b9:c3:83:9d:b2:71:a4:b2:0f:59:
4e:6d:19:e4:3c:b3:ac:a8:55:d1:be:d0:79:8c:ca:
40:59:ef:d4:12:93:50:7b:5a:7c:d0:5c:fa:58:a1:
3e:98:6d:da:74:9f:a8:41:18:65:80:0e:f7:ac:bd:
6b:92:c7:e4:5b:fd:18:ad:79:72:29:d0:58:44:84:
7e:aa:64:93:ff:80:d4:0b:f0:7a:36:c4:c4:d6:c5:
5e:da:39:0d:9f:35:76:3b:da:bb:69:3e:1f:96:67:
ed:ef:fb:b2:6e:ae:cd:53:20:02:22:a7:1b:59:2c:
1b:b7:8e:29:8b:81:c8:51:14:9b:6b:78:4d:cc:62:
f4:a0:3f:b0:31:44:20:21:41:dc:c1:54:61:3e:ee:
34:32:6c:a4:1c:2e:96:e2:31:b3:40:f6:ea:7a:05:
07:f5:fd:d9:90:1a:b6:49:08:98:31:4b:6c:b7:09:
a7:9f:6d:cb:e8:71:69:e9:56:a3:41:d5:ba:94:9d:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:E3:C1:14:1A:19:48:B9:FA:94:FE:8B:A4:96:BD:CF:0C:5F:53
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/c2TjwRQaGUi5-pT-i6SWvc8MX1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
74.112.152.0/22
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
11:85:29:04:0e:29:35:fa:c6:1d:f0:ba:73:c5:59:ca:4d:13:
84:8a:c4:31:15:7e:fd:65:ec:3a:23:e6:d9:20:fd:f0:8a:eb:
c2:9c:fa:66:22:9e:76:10:2f:e0:60:73:4a:04:48:6e:27:a6:
59:ca:ef:d3:50:da:5a:f2:73:43:53:15:6a:d2:44:9d:a8:d2:
34:f1:3b:f4:69:91:35:c9:3e:36:52:6d:d8:f4:2a:0e:d5:9e:
5b:c9:89:c1:08:ad:77:65:51:7c:63:75:58:ad:6e:7c:24:3d:
e7:b7:2a:fd:8d:bc:ba:67:ad:de:fb:4b:77:ea:9a:31:88:02:
35:cc:ee:55:4c:8e:86:f9:c7:2e:86:6c:23:33:a1:1c:39:21:
60:b9:f7:15:18:99:63:f7:73:e7:c5:04:fa:ac:c9:28:89:e6:
3b:c8:54:6d:d4:fd:9b:49:77:51:99:bb:ca:15:ed:6b:e2:7d:
27:f7:30:23:c7:e4:75:dd:ed:1c:92:18:05:2f:f4:80:60:89:
a6:65:f2:ff:21:44:c5:3a:ba:96:75:4d:d8:a5:8a:8d:3c:c0:
df:d0:a7:ce:fb:4e:f6:74:b4:da:fc:0a:c9:1a:c7:47:a5:9d:
26:e6:ed:91:76:a0:6d:0d:ab:5a:2b:c9:51:d5:e9:d8:8e:34:
40:87:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:26:37 2025 by rpki-client