Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/rZbO86eytPEeDbetTKr54j6r3Z8.roa
File: rZbO86eytPEeDbetTKr54j6r3Z8.roa (raw, json)
Hash identifier: 5exZuL7jEPQWQmctjdNF8XDDonlOlxCAx0iHOR3SFFc=
Subject key identifier: AD:96:CE:F3:A7:B2:B4:F1:1E:0D:B7:AD:4C:AA:F9:E2:3E:AB:DD:9F
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 0198EB80CF5059058F98F46C3C1E14A81C2D
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/rZbO86eytPEeDbetTKr54j6r3Z8.roa
Signing time: Wed 27 Aug 2025 12:29:04 +0000
ROA not before: Wed 27 Aug 2025 12:29:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 185.153.236.0/24 maxlen: 24
185.153.239.0/24 maxlen: 24
188.29.252.0/24 maxlen: 24
188.29.253.0/24 maxlen: 24
188.29.254.0/24 maxlen: 24
188.29.255.0/24 maxlen: 24
188.31.248.0/23 maxlen: 23
188.31.251.0/24 maxlen: 24
2a04:4a42:d100::/40 maxlen: 40
2a04:4a42:e100::/40 maxlen: 40
2a04:4a45:f::/48 maxlen: 48
2a04:4a47:215::/48 maxlen: 48
2a04:4a47:415::/48 maxlen: 48
2a04:4a47:4200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:80:cf:50:59:05:8f:98:f4:6c:3c:1e:14:a8:1c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Aug 27 12:29:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad96cef3a7b2b4f11e0db7ad4caaf9e23eabdd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:7a:66:0f:c1:6f:31:e4:bd:88:85:b3:7e:
f7:16:11:2d:27:64:6c:20:ac:b5:1e:7f:87:9b:73:
6b:fa:c7:03:8c:f6:70:54:dc:8e:19:b5:6c:dc:9a:
b2:f6:aa:87:3d:04:2d:ce:27:37:f8:39:b3:4f:f0:
94:bf:be:ef:95:fc:75:7d:5f:42:48:4b:3a:cf:5c:
62:d4:b8:06:ea:85:65:5e:e6:b6:17:99:cf:e4:89:
45:66:5a:d8:6e:af:77:2c:47:5d:37:ab:5e:4b:b6:
e8:1d:b2:bf:a4:df:a0:99:3e:26:f1:07:dc:1c:d7:
01:ab:c9:a8:05:79:01:32:dd:44:fe:61:16:e8:e9:
53:e2:97:97:81:65:27:c3:a1:a6:9e:16:99:ba:4a:
12:14:70:b3:7a:3c:90:8b:d7:c5:94:0e:58:61:d3:
7e:4f:6b:0b:ef:49:18:78:46:f2:ee:41:8d:99:86:
39:eb:60:cc:d5:9d:54:ef:9e:72:19:91:f4:1c:aa:
67:d6:18:99:71:7f:35:f7:59:1a:bf:0c:2b:be:6a:
5b:3e:a4:17:3c:6c:0e:af:3b:4e:ea:8d:16:ad:62:
8f:18:32:8b:10:b8:5d:55:61:f8:41:fe:b0:cc:31:
5b:02:8e:c7:90:61:b1:1e:32:c1:97:ca:c6:9e:59:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:CE:F3:A7:B2:B4:F1:1E:0D:B7:AD:4C:AA:F9:E2:3E:AB:DD:9F
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/rZbO86eytPEeDbetTKr54j6r3Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.236.0/24
185.153.239.0/24
188.29.252.0/22
188.31.248.0/23
188.31.251.0/24
IPv6:
2a04:4a42:d100::/40
2a04:4a42:e100::/40
2a04:4a45:f::/48
2a04:4a47:215::/48
2a04:4a47:415::/48
2a04:4a47:4200::/40
Signature Algorithm: sha256WithRSAEncryption
a0:52:a7:ff:22:59:d8:08:c5:19:59:c3:51:35:e5:0f:1f:91:
fb:6d:fa:7f:91:cc:5e:50:af:f8:f1:76:de:dc:3c:15:25:e3:
90:af:79:8a:5c:26:0f:9f:30:4c:06:ed:bc:c6:3a:f4:da:3a:
2c:9d:86:18:ca:71:04:60:ee:ba:09:77:73:81:77:ed:f1:a3:
03:ab:c1:eb:70:13:f9:30:6a:dd:46:3c:2b:03:af:1b:c8:c3:
55:05:c5:10:42:bf:ec:ea:49:e6:02:9e:2a:76:5f:e0:4a:9f:
45:40:ef:2b:71:2b:cb:08:f9:fe:be:98:c4:34:82:c0:55:de:
ba:03:af:04:0d:7f:1e:cf:6b:a3:d0:e9:b0:ba:bc:f6:37:ac:
5b:a4:b0:a2:d0:53:28:4e:fa:63:33:23:78:7a:86:3b:65:93:
35:d8:42:1c:f7:18:ac:d7:ab:0d:1b:db:ca:e2:1f:3d:53:ae:
13:a4:80:49:c8:d5:70:96:98:f3:bf:db:5f:a6:da:bc:75:8a:
0c:53:ca:72:20:2a:18:03:e8:73:b7:d2:20:d5:05:e9:a5:2e:
8d:a7:11:2c:b1:6b:2b:ac:ef:52:77:18:ec:5c:18:79:62:5f:
6b:7b:c6:1f:66:8a:12:40:1c:e4:da:cf:cb:c8:35:e6:1d:08:
a6:1d:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:55:05 2025 by rpki-client