Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/dhJ1RACMalns3KWMnrERrY8elus.roa
File: dhJ1RACMalns3KWMnrERrY8elus.roa (raw, json)
Hash identifier: KN4UOM7cl+3YJuxepZbXK+ohK3xSecFS5RbymOVHGoo=
Subject key identifier: 76:12:75:44:00:8C:6A:59:EC:DC:A5:8C:9E:B1:11:AD:8F:1E:96:EB
Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial: 01978E327ED7AFA4D52FCB8105D4CC2E3B77
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/dhJ1RACMalns3KWMnrERrY8elus.roa
Signing time: Fri 20 Jun 2025 16:36:03 +0000
ROA not before: Fri 20 Jun 2025 16:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398465
IP address blocks: 86.54.20.0/24 maxlen: 24
86.54.228.0/24 maxlen: 24
86.54.235.0/24 maxlen: 24
86.54.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:32:7e:d7:af:a4:d5:2f:cb:81:05:d4:cc:2e:3b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Validity
Not Before: Jun 20 16:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76127544008c6a59ecdca58c9eb111ad8f1e96eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:87:5b:46:e5:3a:91:b5:67:72:91:45:6d:
3a:f7:e7:6b:bf:0d:d8:3d:94:1a:28:78:a8:1e:0f:
30:e1:3e:b0:b1:b7:62:60:a3:0b:61:c6:41:17:6f:
f2:ec:35:0b:c5:cb:c9:2b:73:32:85:1f:52:e8:74:
20:3b:85:81:b1:d0:01:1a:43:a6:ed:68:18:45:2a:
71:93:e3:d7:a6:4b:8d:48:60:a3:38:6a:c8:d1:17:
d8:46:f2:22:99:0f:10:50:5a:ad:c2:48:67:20:8e:
ff:d4:90:4c:9c:4a:e0:d5:56:b8:80:fa:25:89:f1:
96:59:5b:b6:72:a3:40:1d:4f:c9:22:26:45:5c:b4:
ed:b8:88:ad:cb:73:ee:6b:31:79:f6:e9:fd:dc:be:
77:6f:93:75:88:0c:6c:4d:bc:e2:0f:3e:b6:b2:ad:
1f:d2:ba:05:d2:3b:d1:1d:89:6f:78:ac:a3:ea:2d:
d4:00:d4:5d:0e:d0:90:60:88:14:bb:9e:ef:53:4a:
c7:9d:ad:4e:55:bf:7c:7a:96:73:d0:bc:af:f4:a4:
b8:e3:17:69:4b:49:27:78:8a:b9:27:99:70:67:74:
d6:c2:e1:b9:d3:3b:96:88:f8:52:73:ee:06:87:49:
87:86:ec:f8:ec:62:19:1f:18:a2:19:df:33:46:80:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:12:75:44:00:8C:6A:59:EC:DC:A5:8C:9E:B1:11:AD:8F:1E:96:EB
X509v3 Authority Key Identifier:
keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/dhJ1RACMalns3KWMnrERrY8elus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.20.0/24
86.54.228.0/24
86.54.235.0/24
86.54.249.0/24
Signature Algorithm: sha256WithRSAEncryption
79:07:a3:5a:6c:d0:90:b3:39:51:05:c9:f2:a9:22:11:62:57:
d4:b4:b3:fd:bc:b6:57:26:3a:90:b8:74:67:82:4f:98:75:07:
8f:5b:4b:db:42:20:c1:8b:64:c1:81:8b:c6:a3:97:5a:6e:b9:
b9:41:10:37:5f:a5:4f:43:f0:fd:37:90:e4:01:b0:2f:71:02:
46:4b:cc:e5:42:fd:20:a4:ef:bf:fd:8c:22:dd:c7:a4:a0:12:
38:3b:93:ff:d2:4a:74:d2:d4:4d:3c:c3:64:84:bd:a5:ff:14:
e3:74:20:d8:72:be:a9:79:bf:09:94:99:9a:e0:19:ad:b6:c4:
a6:6b:62:36:e0:63:c1:09:7c:f1:0a:43:c6:b7:a6:75:37:92:
ff:61:d4:d6:87:43:58:58:b5:4f:29:c2:28:c4:79:44:a8:38:
a4:1f:ea:c7:de:ad:b0:3d:7e:6a:b7:eb:d6:33:b3:c9:15:8c:
52:84:ee:d8:6a:6c:18:b6:54:93:e9:da:ba:79:e4:c1:79:e4:
74:3a:4d:08:36:c6:81:c1:98:6b:c0:04:a4:0f:ac:b0:14:c4:
2e:b7:f7:15:dc:97:10:59:03:bf:10:eb:12:99:1b:c9:67:f6:
b7:1a:2f:1a:86:d1:e0:14:af:cf:e7:11:91:d3:8d:7a:e3:51:
c5:a1:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:53:07 2025 by rpki-client