Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xd4lH-t2vz8r0J4RhKWtM8aOEng.roa
File: xd4lH-t2vz8r0J4RhKWtM8aOEng.roa (raw, json)
Hash identifier: BOj73nEuKp1ju1U0MF+h1ddeyKwLffkb98HCB4AJRt4=
Subject key identifier: C5:DE:25:1F:EB:76:BF:3F:2B:D0:9E:11:84:A5:AD:33:C6:8E:12:78
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019758F2C1C3FC92B83D4A60C42B37BD9D48
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xd4lH-t2vz8r0J4RhKWtM8aOEng.roa
Signing time: Tue 10 Jun 2025 08:26:33 +0000
ROA not before: Tue 10 Jun 2025 08:26:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:f2:c1:c3:fc:92:b8:3d:4a:60:c4:2b:37:bd:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 10 08:26:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5de251feb76bf3f2bd09e1184a5ad33c68e1278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:81:07:8a:5e:89:bf:fb:14:19:7b:90:46:
8f:cb:ad:ce:fb:07:e9:a4:ee:5c:76:6c:65:5c:a7:
b6:c0:04:b2:9a:43:db:65:8e:2f:a5:83:70:0f:b8:
48:b9:63:ec:09:9d:ac:44:f6:94:18:d7:c1:85:86:
91:25:e3:d0:03:b3:3b:c2:63:75:e4:7f:37:3b:08:
2e:60:d5:d2:00:1f:86:87:d2:79:e1:93:ed:d5:d3:
73:d8:19:7e:5d:af:6e:9b:52:1e:16:15:b6:e1:cb:
6f:99:b9:27:ef:d8:cc:6b:dd:df:0b:b8:73:56:e9:
14:5b:8c:4d:fe:28:6d:f4:d1:6b:7a:b9:04:43:a9:
ec:5f:1a:40:4b:bc:e3:38:d8:94:d9:05:af:eb:2c:
13:c7:51:d8:e9:ad:84:55:ee:b8:6e:29:bd:2a:99:
5a:25:ef:06:bd:ec:f9:16:d4:90:ee:d1:9e:c1:57:
48:e3:d6:f4:8e:5e:49:1d:4b:a3:47:32:a4:00:70:
e9:19:63:61:d1:02:4c:bf:ef:8b:48:84:df:b6:2e:
bc:14:aa:97:e5:c1:c0:09:ff:66:f2:7d:f7:ce:0f:
79:da:5e:f4:20:7b:52:91:fb:f9:d9:e6:ce:bc:39:
c7:aa:8d:0b:7d:77:15:ee:ae:a1:b5:9b:6a:3e:93:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:25:1F:EB:76:BF:3F:2B:D0:9E:11:84:A5:AD:33:C6:8E:12:78
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xd4lH-t2vz8r0J4RhKWtM8aOEng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0/23
193.124.17.0/24
194.58.56.0/24
194.58.154.0/23
194.87.1.0/24
194.87.51.0/24
194.87.122.0/24
194.87.233.0/24
194.87.255.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d8:19:f8:05:e5:ba:1f:bd:a6:cc:0c:27:8a:03:b1:4b:98:
17:f2:13:49:60:4b:b0:d1:f9:07:f7:a4:c8:d7:83:15:12:e1:
fd:04:89:21:48:9b:c7:16:9e:f5:e4:21:a1:d3:28:77:11:42:
0b:12:04:79:da:39:03:3f:a9:7b:ec:db:c8:4a:28:fa:a7:98:
3f:c4:ae:e9:54:84:f8:63:3e:fb:26:67:2b:f6:08:bf:a6:53:
65:1c:6f:64:b7:83:04:4b:17:5a:cf:94:18:d5:ec:6c:42:8b:
58:cd:1d:a1:1a:75:77:b8:52:e7:82:34:32:64:84:01:1a:f7:
f4:a9:a0:39:7b:39:b4:0a:f9:bf:6d:73:02:75:ac:a9:39:7d:
56:de:a3:ce:62:3f:67:8e:ff:55:04:a5:b0:a9:ca:35:a1:70:
e8:15:32:41:b7:86:53:87:b7:64:e2:65:ee:e9:56:ae:8a:f4:
17:dc:d8:65:34:aa:94:15:e7:5d:06:e2:59:92:a3:e7:78:70:
d5:84:f2:d5:2f:89:de:ff:7a:a1:9d:40:b9:2d:3f:13:9f:87:
39:a5:6c:aa:0e:f3:5c:cc:b2:ac:23:0a:84:84:66:d9:ca:0c:
30:d9:52:66:d2:f6:72:8e:7e:c2:2d:28:90:6f:5f:84:72:91:
33:a1:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:23 2025 by rpki-client