Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa
File: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (raw, json)
Hash identifier: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=
Subject key identifier: 4B:2F:FB:17:02:4B:E1:DD:0D:09:91:5B:A4:AB:73:19:58:4C:D8:05
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0197A2058C85D807F48DBDEB3EBDE2D2B6EC
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa
Signing time: Tue 24 Jun 2025 12:59:22 +0000
ROA not before: Tue 24 Jun 2025 12:59:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39238
IP address blocks: 91.195.125.0/24 maxlen: 24
91.229.112.0/23 maxlen: 23
185.202.0.0/24 maxlen: 24
185.202.1.0/24 maxlen: 24
185.202.2.0/24 maxlen: 24
185.202.3.0/24 maxlen: 24
193.9.17.0/24 maxlen: 24
213.108.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:05:8c:85:d8:07:f4:8d:bd:eb:3e:bd:e2:d2:b6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jun 24 12:59:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b2ffb17024be1dd0d09915ba4ab7319584cd805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:41:d8:b6:ce:53:21:9a:2c:ba:f1:2c:31:
34:28:7e:57:5b:17:e4:90:ae:4a:2f:08:98:3a:49:
eb:f1:5a:06:02:ca:59:cd:fa:fb:09:7c:68:d0:48:
c1:66:e2:f1:34:5b:a8:56:20:3d:a1:bc:2f:5f:24:
3a:44:3a:de:f0:87:b4:59:9a:e0:45:e5:7c:43:a1:
15:a7:48:ff:38:60:c8:b2:3d:7b:c2:40:2d:e9:ab:
44:2d:ad:e1:e0:59:9e:34:7e:3b:10:a5:02:a6:77:
75:88:a8:22:ce:89:9b:c7:0a:a2:cb:be:2d:89:99:
ff:7e:47:74:44:4e:4e:52:2a:4b:9b:5a:99:fb:c2:
23:73:bf:4c:58:fb:b3:14:7c:db:28:ee:52:35:b4:
99:31:7f:e0:24:11:fa:28:27:ce:1a:5e:dc:d3:01:
a5:91:a7:73:b1:e7:5c:d2:34:aa:9a:c6:62:d5:fc:
da:3e:5e:a3:66:bf:81:f7:ff:cf:96:5b:dd:cd:a4:
99:93:51:89:ec:ff:53:47:42:34:41:0d:e4:4a:fd:
e4:e4:7c:b2:41:4b:14:b0:29:e3:97:b7:b4:a2:d6:
48:3c:57:08:cf:aa:30:50:0a:9d:c6:dc:71:38:66:
5d:21:0d:e5:5f:da:19:fe:25:e4:6f:75:9e:68:7e:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:FB:17:02:4B:E1:DD:0D:09:91:5B:A4:AB:73:19:58:4C:D8:05
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.125.0/24
91.229.112.0/23
185.202.0.0/22
193.9.17.0/24
213.108.133.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ef:fe:3b:e1:04:02:57:62:f1:e5:12:0a:ff:54:0c:3c:1b:
cd:0f:1e:ed:cd:bd:27:3f:b1:dd:3e:8a:ec:20:07:8c:27:00:
95:69:df:d8:3f:50:91:f0:2b:46:7d:38:82:a3:5e:ae:6c:4d:
b1:c1:b4:d8:5b:75:15:bc:07:dc:ea:08:b3:ec:e9:13:5e:03:
64:34:cf:0d:9e:cd:0a:fd:b9:19:3b:c6:47:33:97:55:02:de:
72:c8:ee:d9:8b:d1:76:14:64:3e:94:8b:22:23:84:71:19:2f:
e5:fd:4e:d0:56:7a:e9:60:f4:df:23:ea:e8:9f:3e:0d:53:5d:
19:c3:b9:e4:7b:41:3e:58:b3:4c:c8:a2:2a:ac:4d:90:bf:a3:
00:14:d8:37:52:0b:93:47:63:13:d3:af:4d:9b:d3:1d:c0:83:
6d:6a:75:20:5e:a8:3f:35:09:c0:b9:ac:4c:e7:10:a5:36:6b:
16:13:7c:a9:fd:9e:71:71:de:7d:d1:18:02:5f:4f:6e:61:4f:
3f:66:e9:15:6a:7c:1d:22:9f:64:81:26:af:b4:4b:00:ba:66:
3b:25:32:75:18:08:ec:d0:bb:8d:f2:a5:fa:cd:3a:f7:7f:20:
3e:aa:1b:f0:1f:83:21:62:91:1e:31:b2:cf:c0:bf:68:1c:76:
ac:b7:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:26:45 2025 by rpki-client