Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bE9kgfXS22s-qC3X49f25cxOdds.roa
File: bE9kgfXS22s-qC3X49f25cxOdds.roa (raw, json)
Hash identifier: ZP+UJoGgnUyOOoMzOo18bo/Y/vgHp4KQ3k3vFRIUz1U=
Subject key identifier: 6C:4F:64:81:F5:D2:DB:6B:3E:A8:2D:D7:E3:D7:F6:E5:CC:4E:75:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019759EB8A44D54E8CC936D123B3EB3081FE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bE9kgfXS22s-qC3X49f25cxOdds.roa
Signing time: Tue 10 Jun 2025 12:58:18 +0000
ROA not before: Tue 10 Jun 2025 12:58:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.92.0/23 maxlen: 23
195.133.195.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:eb:8a:44:d5:4e:8c:c9:36:d1:23:b3:eb:30:81:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 10 12:58:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c4f6481f5d2db6b3ea82dd7e3d7f6e5cc4e75db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:e9:84:e2:7e:7d:3e:91:d6:b5:02:3c:28:
43:5b:0f:ca:14:58:0a:89:8f:26:f3:09:0d:ec:12:
a8:86:0e:e0:ef:fe:aa:ac:ac:3f:7d:62:e9:47:e0:
a0:55:ba:a2:e3:01:f1:86:6b:dd:83:eb:fb:24:18:
e1:e1:6d:ed:aa:b7:7a:a9:a9:f2:37:52:3c:45:d5:
ab:57:23:4d:af:e2:f4:52:c1:f6:d1:5f:60:54:20:
66:c5:56:05:2c:2a:1b:6f:91:a1:59:e6:fe:e6:77:
40:5f:d4:61:fd:f3:95:0e:ee:ae:83:d9:ba:ee:06:
c7:d7:5b:4a:ea:42:4a:f9:c7:0b:59:23:b8:58:ff:
03:79:a2:81:fb:ce:41:bf:13:45:1b:72:c3:b2:60:
86:ba:a3:9e:34:5f:16:59:29:08:b0:b2:f7:d3:18:
8e:73:55:7c:aa:54:4e:c6:05:78:03:05:b1:ee:cc:
0a:47:46:58:d2:63:fc:6c:61:fc:03:4a:97:49:ef:
69:a5:96:df:ee:e6:71:f3:8b:4a:d6:8d:d1:1b:56:
9c:18:eb:1d:c8:b7:fd:7c:17:12:87:ad:3a:47:cf:
7a:3d:80:dd:11:5a:25:6c:fb:74:67:5d:13:a5:44:
3a:7f:0c:bb:9a:17:e4:35:9d:60:68:4a:eb:65:f7:
f1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4F:64:81:F5:D2:DB:6B:3E:A8:2D:D7:E3:D7:F6:E5:CC:4E:75:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bE9kgfXS22s-qC3X49f25cxOdds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
194.58.155.0/24
194.87.53.0/24
194.87.119.0/24
194.87.169.0/24
194.87.179.0/24
194.87.228.0/24
194.135.24.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0/23
195.133.50.0/23
195.133.92.0/23
195.133.195.0/24
212.192.241.0/24
212.193.0.0/24
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
37:48:a0:4c:76:93:a3:34:0a:d8:c0:47:c9:94:b5:5e:b5:26:
50:65:bf:1a:d8:1f:42:03:0f:fb:2a:9e:4f:91:9d:0f:34:08:
5f:66:fa:29:89:1d:68:ac:fb:0f:7a:20:d2:b3:36:f3:7b:e1:
7d:c1:f0:a2:b2:98:c5:da:e9:56:5f:66:53:57:bd:f5:9d:77:
a5:c8:7a:5d:ff:95:20:7a:0f:5b:6f:49:c1:c1:0d:2d:22:88:
69:35:8e:cd:a1:2b:10:30:8c:ba:ab:72:ea:f8:14:5d:25:b2:
f6:17:6a:1c:38:bd:44:e5:97:eb:f6:bf:3b:db:57:c1:88:43:
b9:71:05:d0:3e:f5:3a:6b:ac:08:a1:b2:04:2b:d5:e1:fb:49:
e0:19:5d:af:79:2b:16:86:9b:c9:66:83:05:89:29:d4:90:f9:
45:83:61:11:37:49:00:c4:82:76:cc:a8:d6:5e:8d:21:07:8c:
e1:7d:ba:77:55:5e:7a:c1:e2:30:62:7c:d4:ce:4d:41:1c:9f:
07:7e:12:c9:ed:cf:15:44:a2:d3:2c:98:73:13:d8:90:d6:8e:
67:c2:2d:ad:21:2e:44:d6:5f:15:b6:30:e6:63:3e:07:87:d5:
bd:fc:f8:af:b5:6a:b2:01:b5:5c:b7:1a:80:67:90:0b:7b:98:
30:93:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:42 2025 by rpki-client