Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IDj0zv0fJ99jT6hbjGXGSp1Oryg.roa
File: IDj0zv0fJ99jT6hbjGXGSp1Oryg.roa (raw, json)
Hash identifier: 6eXgAKKCge36hmi7rE7iNY85Mm9Qr5K81JuvQ8CMJpw=
Subject key identifier: 20:38:F4:CE:FD:1F:27:DF:63:4F:A8:5B:8C:65:C6:4A:9D:4E:AF:28
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019792F33C2D387CE3D06F35D8FDD8995F3D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IDj0zv0fJ99jT6hbjGXGSp1Oryg.roa
Signing time: Sat 21 Jun 2025 14:45:03 +0000
ROA not before: Sat 21 Jun 2025 14:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6863
IP address blocks: 37.157.16.0/21 maxlen: 21
46.226.96.0/21 maxlen: 21
82.149.192.0/19 maxlen: 19
86.111.0.0/19 maxlen: 19
94.143.32.0/21 maxlen: 21
195.90.128.0/18 maxlen: 18
195.90.160.0/19 maxlen: 19
195.96.160.0/19 maxlen: 19
212.5.160.0/19 maxlen: 19
213.145.40.0/24 maxlen: 24
217.14.240.0/21 maxlen: 21
217.171.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:f3:3c:2d:38:7c:e3:d0:6f:35:d8:fd:d8:99:5f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 21 14:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2038f4cefd1f27df634fa85b8c65c64a9d4eaf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:f4:56:82:3e:a0:33:24:1d:ba:db:6b:10:
eb:8d:64:fe:74:5f:f1:97:b0:aa:eb:c8:ec:d7:d8:
b2:2c:db:ba:a3:67:f1:c3:10:8f:70:2b:dd:b7:65:
d7:3f:2c:a0:27:a6:0f:02:58:7c:c1:4d:44:7d:77:
c2:6b:e3:71:a4:5c:4e:46:5b:ec:28:2c:75:16:a2:
fb:2d:bd:ea:d7:ed:2d:f7:8a:7d:f6:ec:d6:02:96:
8a:cb:ab:16:c3:50:08:43:bd:90:af:a8:60:38:1c:
55:95:85:d1:52:be:0c:57:82:dc:d8:a4:86:aa:71:
ad:52:fe:30:a7:ac:10:8c:c1:0d:a3:a9:35:28:ed:
0c:77:9b:04:15:3b:4d:24:01:c8:b5:41:95:05:d8:
07:2d:6b:7e:77:14:37:0d:94:d4:49:32:44:68:18:
ee:76:ef:bd:5c:cb:25:94:1b:3d:e3:e1:0b:7a:7b:
9f:4d:a7:4a:85:23:1f:82:12:84:49:97:88:e3:49:
f2:18:22:66:f1:cb:48:5b:8a:38:07:f7:a8:f7:3d:
e6:e7:81:b4:3b:22:34:ac:57:04:a9:89:12:72:63:
44:52:66:dd:d9:1c:e3:d0:07:46:b2:0c:2d:51:aa:
21:02:68:45:8f:90:42:95:7d:d9:1c:b8:56:b0:6b:
b0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:38:F4:CE:FD:1F:27:DF:63:4F:A8:5B:8C:65:C6:4A:9D:4E:AF:28
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IDj0zv0fJ99jT6hbjGXGSp1Oryg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.16.0/21
46.226.96.0/21
82.149.192.0/19
86.111.0.0/19
94.143.32.0/21
195.90.128.0/18
195.96.160.0/19
212.5.160.0/19
213.145.40.0/24
217.14.240.0/21
217.171.0.0/20
Signature Algorithm: sha256WithRSAEncryption
98:3b:93:06:a0:61:10:62:6e:5e:dc:3d:12:16:93:84:b4:01:
3e:34:6b:0c:bf:c6:56:d1:c8:a6:42:0e:a5:c1:cb:bb:9a:c7:
d3:55:9a:b7:bd:86:d9:37:ee:3b:8c:2d:71:e5:d1:ef:73:f6:
df:28:4a:9a:6e:a2:25:8c:0e:49:0c:ca:61:e7:6f:1d:39:66:
7c:ba:7f:ae:24:74:66:c5:4d:0c:f6:d1:2c:e9:ab:2b:50:4f:
fe:46:78:5e:51:1e:51:92:2b:d1:13:c8:74:9f:a3:dd:7d:6e:
c0:1e:32:34:f8:de:96:e0:39:73:bb:5d:7e:7c:f3:3d:b2:07:
0f:60:82:36:cd:6f:d9:15:35:30:d0:a5:e6:f7:83:d2:9d:4a:
4d:40:5b:ad:93:04:53:d8:bb:f2:7e:bd:1c:d1:90:bc:99:dd:
1b:41:ae:78:e0:51:83:08:65:60:27:7e:80:d0:69:33:ac:a5:
4a:bf:35:11:4a:17:40:49:2e:34:19:a0:3b:a9:83:8f:5c:2f:
76:d9:41:23:8b:fc:4f:1b:43:61:4f:bc:d4:8d:72:83:cb:87:
32:59:a8:c7:14:7d:9d:a9:30:f0:99:14:53:80:41:1a:4d:d2:
e8:87:76:15:5d:41:90:9a:05:f0:1d:12:14:33:6d:34:b0:0c:
58:71:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:26:50 2025 by rpki-client