Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/mymZli3UgN23Q4eNCz97luUR3Sg.roa
File: mymZli3UgN23Q4eNCz97luUR3Sg.roa (raw, json)
Hash identifier: YtHMeEsyOm5sL5w/XLjSE0mR7dUBebGS1UpdTxgG+ys=
Subject key identifier: 9B:29:99:96:2D:D4:80:DD:B7:43:87:8D:0B:3F:7B:96:E5:11:DD:28
Certificate issuer: /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial: 01977E0081392FE6410E1AA381ED6F7D1348
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/mymZli3UgN23Q4eNCz97luUR3Sg.roa
Signing time: Tue 17 Jun 2025 13:07:31 +0000
ROA not before: Tue 17 Jun 2025 13:07:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 31.220.14.0/24 maxlen: 24
45.12.52.0/23 maxlen: 23
45.12.91.0/24 maxlen: 24
185.238.249.0/24 maxlen: 24
185.238.251.0/24 maxlen: 24
193.9.45.0/24 maxlen: 24
2a14:640:2::/48 maxlen: 48
2a14:640:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:00:81:39:2f:e6:41:0e:1a:a3:81:ed:6f:7d:13:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Validity
Not Before: Jun 17 13:07:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b2999962dd480ddb743878d0b3f7b96e511dd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:d8:72:89:5e:36:d5:32:fc:a6:44:8b:69:
79:f5:7c:1e:37:a3:5b:03:2f:43:d8:90:2f:d8:9f:
13:39:b7:f4:cc:8c:c0:6b:12:3b:82:fd:40:49:0b:
85:69:f1:b7:1f:95:b1:4e:aa:45:5f:37:b6:e4:c6:
51:00:f9:4e:58:2c:24:1d:5a:20:83:72:c1:c0:14:
ca:80:02:b7:4e:cc:5b:e4:4c:2b:02:ac:f2:e6:41:
a9:c0:d7:ae:a1:14:e6:41:50:47:72:24:7c:26:9c:
80:bd:b0:20:33:f8:22:c9:db:5f:59:95:e5:f7:3d:
34:11:ea:31:ac:fa:18:fb:9a:a1:fb:1b:b2:49:d4:
1a:c6:69:7d:39:81:44:3a:0f:9d:53:c4:90:a3:b6:
c1:4a:69:94:5c:32:de:5d:cd:a5:e2:3b:ba:04:58:
3a:6a:81:17:e8:b1:ff:87:6c:a8:d0:71:ed:f5:76:
4a:8b:07:c3:9a:04:e9:1d:86:37:ba:61:d9:da:d5:
cf:8e:e1:ea:61:a4:db:a7:9d:93:29:6f:60:e7:b9:
7d:ca:5a:a2:97:b7:09:cb:b7:05:0b:51:e6:41:05:
1b:98:6d:8e:c9:a6:71:78:1d:bc:20:9f:87:3f:fe:
7e:5f:f6:7a:12:05:e3:16:23:1a:c4:67:e3:8b:c8:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:29:99:96:2D:D4:80:DD:B7:43:87:8D:0B:3F:7B:96:E5:11:DD:28
X509v3 Authority Key Identifier:
keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/mymZli3UgN23Q4eNCz97luUR3Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.14.0/24
45.12.52.0/23
45.12.91.0/24
185.238.249.0/24
185.238.251.0/24
193.9.45.0/24
IPv6:
2a14:640:2::/48
2a14:640:4::/48
Signature Algorithm: sha256WithRSAEncryption
47:b6:e7:df:1c:94:06:31:95:ca:51:b7:27:ca:62:a0:5f:57:
79:fc:4f:1b:fd:81:3d:b3:e8:94:fe:78:3c:f6:5e:8b:eb:1b:
48:2e:33:3f:0f:62:b8:7b:0b:10:d9:ae:81:83:1d:66:ee:99:
5e:6b:91:cb:27:41:d2:22:f0:2c:1a:f5:96:68:9b:53:95:8e:
df:40:12:93:74:08:ef:dc:e4:1f:5d:86:c2:d8:3c:bf:fb:e8:
95:41:fe:87:1d:40:d8:ff:c3:ca:ee:ee:3f:33:3f:22:fa:71:
cb:bb:50:96:b1:3d:4b:79:a6:3d:a8:dd:7b:05:e7:23:5a:f9:
3c:86:b1:a9:6a:d7:d6:46:eb:80:48:b8:f3:4c:e1:42:26:b2:
d5:e7:50:93:55:58:7e:88:36:c9:65:aa:fa:2f:a2:31:a7:fa:
79:d2:76:3d:fd:bc:66:11:ce:64:7c:dc:af:1b:1a:07:0a:0d:
7e:a9:21:ab:c9:f3:b2:ad:fa:45:a6:5b:79:fe:67:5d:89:c4:
4b:47:95:43:61:25:23:d3:8b:6f:df:4f:31:a5:0f:ab:b2:b8:
2b:22:41:10:50:11:26:ae:41:69:a3:84:23:42:63:23:e0:7e:
a8:74:59:ec:a3:49:e1:a4:cc:48:09:12:d0:ab:7c:f7:4f:fd:
aa:4f:4e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:17 2025 by rpki-client