Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/szTswhDYGFZLNq2gmPhOGNU3JHY.roa
File: szTswhDYGFZLNq2gmPhOGNU3JHY.roa (raw, json)
Hash identifier: mz4tdadkMvHnGNpBkk3KejTx0a499gLsvzCSSSwliEU=
Subject key identifier: B3:34:EC:C2:10:D8:18:56:4B:36:AD:A0:98:F8:4E:18:D5:37:24:76
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 01977A5D33E8B64F15D4C3E93E3299BCDB1D
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/szTswhDYGFZLNq2gmPhOGNU3JHY.roa
Signing time: Mon 16 Jun 2025 20:10:17 +0000
ROA not before: Mon 16 Jun 2025 20:10:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 79.110.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:5d:33:e8:b6:4f:15:d4:c3:e9:3e:32:99:bc:db:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Jun 16 20:10:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b334ecc210d818564b36ada098f84e18d5372476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:12:10:17:64:93:a3:ea:bd:a7:22:8f:a2:
d3:53:a1:70:9b:37:82:a2:67:8e:e6:43:9a:11:4e:
35:27:ef:60:fd:d7:4a:df:ff:07:98:92:b4:d2:23:
3c:4e:fb:ce:e7:43:a2:93:20:1a:fb:84:0d:ab:b8:
58:ed:31:4d:57:bf:83:18:60:8e:8a:6d:03:ed:aa:
07:a3:ce:16:e9:c3:56:70:39:d4:dd:58:14:49:52:
51:da:7d:ef:ae:00:ae:77:7f:9b:48:a0:9a:6b:b7:
ec:35:41:ef:90:36:fb:6d:ba:65:56:79:39:ab:02:
98:5a:26:a0:e4:66:7b:bf:85:52:56:97:b4:5c:ba:
01:61:52:bf:0b:c2:5e:61:01:37:01:61:fc:b2:58:
5e:38:35:f1:bb:11:91:ce:ba:2e:2f:10:83:16:23:
2e:ad:9b:18:b2:75:76:2b:93:65:ce:38:2a:4a:88:
89:28:2b:87:e6:6f:d3:6a:ea:b2:72:87:0f:7c:e4:
a2:63:30:eb:96:e5:f2:a3:af:40:a2:cc:26:0e:e4:
46:34:97:e5:38:cb:fa:12:37:b3:b9:e6:48:d4:3f:
14:c1:53:3f:8b:6f:6f:f9:03:94:fd:74:f4:11:3a:
04:b7:91:f3:e2:63:fc:e1:66:5a:f0:31:f1:96:bc:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:34:EC:C2:10:D8:18:56:4B:36:AD:A0:98:F8:4E:18:D5:37:24:76
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/szTswhDYGFZLNq2gmPhOGNU3JHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:1f:44:09:6a:d5:83:14:7b:73:f9:44:09:a2:7c:ee:15:65:
ee:9b:3a:0f:19:fc:7b:3c:6b:b6:d5:a2:f9:12:2d:59:62:1d:
74:ab:01:0f:7f:e6:51:50:5a:06:02:b3:64:ff:13:9c:a7:5a:
1b:61:6f:af:cd:68:8d:bf:83:7c:fe:2b:85:97:20:b0:74:27:
5c:5b:9d:41:a8:49:75:56:9e:6a:bb:c3:c6:d3:d7:29:84:d8:
18:6b:dc:4d:f8:59:6c:1b:d1:c6:8d:27:94:2e:e5:1d:05:44:
24:39:70:4a:90:71:49:4d:36:6d:4e:c7:dc:95:fa:13:70:80:
36:80:a3:bc:41:30:d4:29:0e:08:30:4e:28:21:66:4a:02:d3:
9e:ae:75:de:5f:10:2d:b3:03:6d:da:f0:f7:c8:58:72:38:39:
da:d9:30:e4:d9:f9:2a:ca:a5:af:03:02:5e:54:68:dd:d5:de:
7f:1c:ab:90:51:13:84:9a:60:5d:27:33:55:5e:7e:c3:3a:20:
66:b4:82:5f:59:92:b2:12:cd:12:19:9f:1c:2a:37:a6:87:4d:
0a:e8:30:08:0b:37:fd:4c:40:24:8b:81:f8:5b:c9:a9:fc:c1:
66:ab:74:b8:df:55:0c:40:28:40:49:b1:be:b2:f7:10:5e:bc:
d2:a5:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:21:55 2025 by rpki-client