Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/bj9nYk2PZFubbhbWzDxQbsHbdr8.roa
File: bj9nYk2PZFubbhbWzDxQbsHbdr8.roa (raw, json)
Hash identifier: D35QPjiZoY+tnneBFyZPjKuCNiUUKkgMIUFN7/fHHx8=
Subject key identifier: 6E:3F:67:62:4D:8F:64:5B:9B:6E:16:D6:CC:3C:50:6E:C1:DB:76:BF
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01979D93437C190737F0C95FAC5D23F2D413
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/bj9nYk2PZFubbhbWzDxQbsHbdr8.roa
Signing time: Mon 23 Jun 2025 16:16:03 +0000
ROA not before: Mon 23 Jun 2025 16:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8069
IP address blocks: 145.190.0.0/23 maxlen: 23
145.190.2.0/24 maxlen: 24
145.190.7.0/24 maxlen: 24
145.190.32.0/22 maxlen: 22
145.190.36.0/24 maxlen: 24
145.190.37.0/24 maxlen: 24
145.190.38.0/23 maxlen: 23
145.190.40.0/23 maxlen: 23
145.190.42.0/24 maxlen: 24
145.190.43.0/24 maxlen: 24
145.190.44.0/22 maxlen: 22
145.190.48.0/22 maxlen: 22
145.190.52.0/23 maxlen: 23
145.190.54.0/24 maxlen: 24
145.190.55.0/24 maxlen: 24
145.190.56.0/23 maxlen: 23
145.190.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9d:93:43:7c:19:07:37:f0:c9:5f:ac:5d:23:f2:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jun 23 16:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e3f67624d8f645b9b6e16d6cc3c506ec1db76bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:33:f3:a2:ec:a3:33:1c:d8:b0:03:e4:7b:
18:0d:80:4b:cd:ea:41:c7:a4:96:55:d4:9b:3b:b7:
4d:f1:dd:17:27:0a:4b:87:98:12:c1:0e:80:4e:26:
1d:fe:1e:e8:90:43:22:d8:fa:9a:8b:89:fb:a6:3d:
4b:e1:dc:e3:24:d9:df:21:a1:e2:c5:7a:9a:0c:e0:
a7:3c:74:8d:09:41:e1:b8:b6:f2:38:23:55:83:71:
72:22:4c:91:6e:18:aa:f4:76:cc:85:de:f5:87:4b:
0b:d3:c9:32:07:1a:02:6c:69:d5:a6:f8:f2:f3:76:
7a:0d:0d:8d:b7:26:51:d6:2b:cf:8f:d0:94:43:51:
20:c7:d7:74:05:e0:08:a1:2e:bf:fd:c1:8b:78:c3:
27:3c:16:8e:ef:d4:5c:df:5d:5e:ef:3f:5b:06:57:
fe:cf:fe:da:89:52:de:a3:82:99:21:67:44:4e:62:
e2:36:10:4a:97:bd:2d:34:9c:e2:c6:55:0f:aa:dd:
96:8e:d7:4c:50:c0:7d:aa:a9:d4:db:c8:55:76:95:
66:c9:01:3b:eb:c0:23:15:7b:fb:d1:7d:20:a3:3e:
ad:70:40:0b:15:34:a8:12:a3:df:c9:4f:af:c3:74:
1e:35:4a:3c:1d:1f:9a:75:90:27:5d:6b:ce:bb:16:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:67:62:4D:8F:64:5B:9B:6E:16:D6:CC:3C:50:6E:C1:DB:76:BF
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/bj9nYk2PZFubbhbWzDxQbsHbdr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.190.0.0-145.190.2.255
145.190.7.0/24
145.190.32.0-145.190.58.255
Signature Algorithm: sha256WithRSAEncryption
15:bc:bc:e1:7a:03:d1:69:84:2e:6f:f8:ba:54:6f:47:b5:ec:
ec:89:82:73:e1:b1:4d:ec:ec:d5:15:47:48:48:85:88:90:fd:
cc:aa:60:dd:d8:3b:39:1c:eb:07:26:80:f2:8d:d5:54:11:63:
96:b6:0d:f8:95:f3:b3:87:b0:db:98:7e:43:41:ae:2b:25:ea:
e8:5c:a3:89:c6:c6:44:83:54:13:ff:d1:62:5c:63:83:85:57:
aa:0a:5d:f7:03:cc:6a:76:48:aa:c1:c7:3f:e7:1e:6b:9f:df:
32:4a:82:1a:f0:a1:03:c5:d9:b9:3d:5b:7a:7a:58:e7:9a:dc:
8c:51:17:4c:58:44:bc:a5:df:a6:83:42:ed:57:8c:ef:d0:8f:
40:31:de:7b:82:3d:e7:df:e0:a9:48:86:82:5e:aa:46:04:96:
33:b7:76:5f:5b:a6:86:3d:27:47:ca:e5:3e:00:1d:63:56:d8:
7c:24:96:d0:d4:60:fb:a9:fc:9e:50:2b:38:a3:fa:6e:a7:e0:
58:6c:05:bf:50:69:82:f7:67:11:53:91:4f:6f:b8:29:56:5e:
84:38:78:0c:04:9e:a7:da:3c:57:a3:b7:60:6e:9d:04:41:a6:
89:cc:cb:ad:71:a8:84:89:7b:3d:4a:94:ed:5f:d2:bd:ff:37:
2e:73:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:46:54 2025 by rpki-client