Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/eNfRzs95ahcd3LJk8uVowaCd7S4.roa
File: eNfRzs95ahcd3LJk8uVowaCd7S4.roa (raw, json)
Hash identifier: wgdNPBCeoUQHjuiFJNd/i3AoX70ks55TaRaokJ6+k8o=
Subject key identifier: 78:D7:D1:CE:CF:79:6A:17:1D:DC:B2:64:F2:E5:68:C1:A0:9D:ED:2E
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019792F7D12EF1715FC6E25E042FF75A7719
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/eNfRzs95ahcd3LJk8uVowaCd7S4.roa
Signing time: Sat 21 Jun 2025 14:50:03 +0000
ROA not before: Sat 21 Jun 2025 14:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8249
IP address blocks: 185.35.120.0/22 maxlen: 22
195.144.192.0/20 maxlen: 20
195.144.208.0/22 maxlen: 22
195.144.214.0/23 maxlen: 23
195.144.216.0/23 maxlen: 23
195.144.218.0/24 maxlen: 24
195.144.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:92:f7:d1:2e:f1:71:5f:c6:e2:5e:04:2f:f7:5a:77:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jun 21 14:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d7d1cecf796a171ddcb264f2e568c1a09ded2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:f4:75:d9:da:a2:1f:1b:1f:1f:bc:e7:92:
78:8d:7c:dc:ca:e1:12:5f:88:89:2d:ca:3d:2c:35:
67:89:58:c7:3b:0a:28:c4:28:2a:60:33:0c:2a:04:
18:43:e7:c9:b2:78:7d:1c:07:45:0b:4b:ad:2e:8f:
4f:f8:a1:77:b8:53:d7:47:43:bc:db:a5:33:dd:46:
30:91:9a:37:9c:c6:5a:9f:d7:9a:9c:4a:96:eb:bb:
e5:a8:8b:32:78:11:8a:12:3d:b2:4e:03:9d:11:bf:
1d:c0:36:30:70:c2:fa:4c:6d:b7:14:b1:d7:ae:4e:
29:63:f3:05:00:0c:2a:cc:c0:de:e7:8b:85:20:51:
f0:bb:8b:36:c8:7a:06:d1:a7:11:76:00:94:72:40:
ba:63:5a:1d:19:a8:2c:a2:1a:c6:d9:79:03:a0:ce:
e1:d2:3e:95:e2:0a:22:b1:83:8f:81:cf:08:38:25:
bb:5e:d3:16:d4:ab:89:41:61:57:4a:03:08:c5:9b:
75:68:7f:97:77:ce:f2:bd:13:d8:1b:b3:67:6b:73:
e5:0a:be:e1:a8:77:13:d1:36:13:ff:be:6f:fd:8b:
45:37:9e:ff:bb:f5:be:a8:8d:db:eb:20:d0:81:85:
e2:fb:2e:ca:b5:5d:41:18:18:4a:db:c5:ee:00:4b:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D7:D1:CE:CF:79:6A:17:1D:DC:B2:64:F2:E5:68:C1:A0:9D:ED:2E
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/eNfRzs95ahcd3LJk8uVowaCd7S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.120.0/22
195.144.192.0-195.144.211.255
195.144.214.0-195.144.218.255
195.144.220.0/22
Signature Algorithm: sha256WithRSAEncryption
33:c9:39:52:0b:65:38:d4:3f:6f:b7:b3:5e:77:d3:92:03:da:
40:20:c0:01:b4:f1:2d:43:90:c1:0a:62:ef:16:3e:ef:54:e9:
b1:f8:a8:96:ae:78:9f:66:11:20:92:22:61:e1:c4:4a:48:f8:
29:52:38:25:ac:df:cc:af:f0:d0:cd:ae:d5:5e:d4:81:ff:36:
c8:b0:55:11:5a:b9:3d:41:74:08:68:bd:d9:ca:c4:e5:f5:6b:
7c:6e:1a:46:fe:1d:68:af:52:b2:17:16:8d:97:c2:44:cc:26:
ea:b8:b7:b6:e7:4b:92:6e:cd:96:2a:53:9b:47:8b:5a:98:0a:
b1:af:b5:e9:91:b3:d3:47:ce:05:eb:b7:78:2f:46:4c:3e:a9:
b8:5d:45:bc:9a:78:d1:61:95:10:de:6b:60:d0:25:a7:14:13:
ab:8c:b7:dc:96:73:9d:5a:49:b7:f5:77:e9:40:da:13:05:24:
e4:0a:5b:7d:12:f0:7a:73:6e:1e:2d:79:2e:19:de:dd:c4:e4:
9b:6e:21:84:10:79:5b:47:ed:7f:86:14:43:ea:d2:f9:0e:aa:
5f:88:52:d4:3f:d6:e6:63:1c:0d:3f:0d:59:e9:b5:cb:86:3b:
8b:74:df:46:72:ea:73:04:bf:53:4a:8c:c9:83:01:f4:51:50:
a9:f2:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:27:03 2025 by rpki-client