Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/CcwLvjGeQXyXQnaJpj6YyosTcMg.roa
File: CcwLvjGeQXyXQnaJpj6YyosTcMg.roa (raw, json)
Hash identifier: 1bzw8ev+Aeq3rTfFEXQzj88XSRZ9dYDMAOUCxZdm2PE=
Subject key identifier: 09:CC:0B:BE:31:9E:41:7C:97:42:76:89:A6:3E:98:CA:8B:13:70:C8
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 0198A72DF87ED1F9A0F268702A96ED17B929
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/CcwLvjGeQXyXQnaJpj6YyosTcMg.roa
Signing time: Thu 14 Aug 2025 06:04:24 +0000
ROA not before: Thu 14 Aug 2025 06:04:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60325
IP address blocks: 185.75.49.0/24 maxlen: 24
185.75.50.0/24 maxlen: 24
185.75.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a7:2d:f8:7e:d1:f9:a0:f2:68:70:2a:96:ed:17:b9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Aug 14 06:04:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09cc0bbe319e417c97427689a63e98ca8b1370c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:bc:a2:74:98:87:69:99:01:34:c8:74:93:
31:6f:c9:f2:3b:c2:b7:f7:e1:c7:a9:1f:b3:17:b9:
dd:1e:69:b0:31:b5:fb:84:c4:4b:e7:ba:b9:ff:d6:
68:a0:e2:cb:c2:1e:b0:26:bb:cd:91:86:89:29:69:
2a:05:bc:86:55:e6:92:14:eb:ea:29:59:f3:72:6f:
eb:a0:aa:2f:13:af:ef:7d:29:9f:8a:72:65:d5:9f:
93:ba:48:0b:e6:5c:de:50:34:6f:75:c0:c6:2b:8f:
cb:63:3c:53:32:8c:1d:98:cb:84:b1:c5:43:a9:84:
e5:69:e1:68:a7:74:4d:4c:fe:88:39:5e:ac:1b:43:
ea:79:6b:86:7a:69:b0:9b:2f:5b:02:4b:db:30:b3:
28:d4:2a:9a:80:66:0e:a5:c1:6c:cd:56:50:0c:67:
2e:ba:f2:fa:64:26:9a:cb:e1:97:51:e2:7f:71:41:
f5:b5:df:5c:dd:f4:ce:9b:cc:88:fb:fe:52:1a:bf:
bc:c8:73:e8:25:9b:d1:ad:eb:1d:0e:95:09:c0:fd:
cb:e2:66:dd:df:52:5b:07:79:00:5d:1b:40:5f:9f:
0f:28:fa:56:9a:fe:62:36:d4:02:c4:f1:83:e1:3e:
e6:db:df:94:d4:05:35:c4:49:50:f8:06:0d:0f:ec:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:0B:BE:31:9E:41:7C:97:42:76:89:A6:3E:98:CA:8B:13:70:C8
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/CcwLvjGeQXyXQnaJpj6YyosTcMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.49.0-185.75.51.255
Signature Algorithm: sha256WithRSAEncryption
a6:3f:04:a9:07:10:b7:20:b8:19:4f:1c:0a:ed:ae:ab:64:f4:
5e:df:bf:e2:2b:74:0e:4b:d8:6b:81:d5:93:e5:12:e4:d5:42:
c5:fd:99:46:b9:75:90:0f:cf:2f:04:10:b7:6e:d1:04:0a:d7:
76:0c:ff:a5:a1:84:d5:b6:ca:aa:24:9c:26:d4:65:30:9b:40:
b1:cb:6c:3a:22:ce:a3:38:86:9c:f4:31:5b:77:c7:19:3d:d8:
f0:b4:18:2c:d1:86:ef:32:27:23:28:5e:f4:34:40:c4:83:34:
3b:01:c9:ee:23:d0:41:20:be:d5:c0:f8:4f:28:19:a0:aa:dd:
52:e6:96:74:c9:99:18:31:59:c7:21:e9:a0:d3:4f:27:b4:19:
a2:40:0c:e8:5a:0d:b1:d8:a6:ee:99:11:7a:62:6b:80:3f:82:
b5:a2:af:6b:fa:61:cd:d8:eb:33:fd:10:f8:5f:0c:37:ad:92:
8b:eb:1c:0c:34:36:ef:90:c3:f3:a0:22:d2:16:d3:83:96:82:
0d:05:df:7c:30:6d:3c:74:3f:13:3b:ab:50:24:18:07:2a:c9:
a6:e8:90:bf:b6:41:b3:a6:be:44:02:21:b4:36:76:4a:02:23:
9c:aa:2e:ed:87:ae:6a:b0:7c:26:8c:f0:e7:01:ac:b0:18:32:
38:a7:5d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:54:40 2025 by rpki-client