Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u80i0qPl9Y7dqXOVK-YI40cNFAI.roa
File: u80i0qPl9Y7dqXOVK-YI40cNFAI.roa (raw, json)
Hash identifier: Hx/dCQomunpQkrah8wbEfEZY36DwoCwwaIDvxkr9gAA=
Subject key identifier: BB:CD:22:D2:A3:E5:F5:8E:DD:A9:73:95:2B:E6:08:E3:47:0D:14:02
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019753B8EF55DD16C4A325A698BBF0176D99
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u80i0qPl9Y7dqXOVK-YI40cNFAI.roa
Signing time: Mon 09 Jun 2025 08:05:18 +0000
ROA not before: Mon 09 Jun 2025 08:05:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208220
IP address blocks: 45.8.92.0/24 maxlen: 24
81.31.194.0/24 maxlen: 24
81.31.195.0/24 maxlen: 24
87.120.127.0/24 maxlen: 24
94.156.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b8:ef:55:dd:16:c4:a3:25:a6:98:bb:f0:17:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 9 08:05:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbcd22d2a3e5f58edda973952be608e3470d1402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:fa:85:58:2f:89:6a:4b:50:19:7a:f0:45:
c6:14:c6:83:3e:38:27:40:c9:fe:04:81:7f:a6:85:
ec:c2:b6:a6:08:3d:7f:0b:48:a1:26:a0:79:9a:23:
dc:20:63:72:5c:27:53:a9:e4:5c:68:9b:67:16:f0:
9e:5d:b2:e5:87:e2:52:7a:f6:bc:a0:af:54:8e:15:
3e:19:6f:53:5f:21:6c:70:12:29:e4:da:cb:e0:aa:
7f:20:09:45:ef:13:1f:b4:7e:9d:4a:4b:40:f2:28:
8b:16:e6:03:ba:67:0f:e9:db:33:86:e9:9b:d7:9e:
9e:c9:ea:4c:86:80:70:ea:94:c1:7a:d1:1d:15:08:
0a:d8:d6:e8:5c:39:b5:55:21:26:c2:26:2b:6e:c5:
4c:29:1e:00:9e:13:6a:c1:6c:c5:80:de:a6:02:00:
05:df:5b:a8:eb:7b:8b:c0:f5:2c:75:73:89:4f:0e:
e5:c4:f4:e8:6b:96:28:a6:d9:fc:ef:90:1e:e6:4c:
16:3d:0d:cd:4e:bf:dd:23:be:13:d5:9b:13:d9:33:
6c:76:1d:bd:15:b1:a0:6a:33:5d:17:bc:8c:f5:7f:
7e:3d:b4:7d:8a:21:fd:e4:12:da:ff:9a:ef:07:ae:
c8:af:50:13:be:c6:f9:13:8d:23:59:5d:de:4d:37:
75:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CD:22:D2:A3:E5:F5:8E:DD:A9:73:95:2B:E6:08:E3:47:0D:14:02
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u80i0qPl9Y7dqXOVK-YI40cNFAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.92.0/24
81.31.194.0/23
87.120.127.0/24
94.156.167.0/24
Signature Algorithm: sha256WithRSAEncryption
72:23:4a:14:78:95:81:c0:69:3a:3b:eb:73:dd:cf:c9:d7:dd:
05:dc:2c:f0:9f:38:19:b4:b2:bc:e1:72:4a:b0:84:e6:9f:64:
fd:38:8c:0d:c6:cf:00:2b:8c:58:d4:9d:16:57:3b:0b:ba:66:
a4:ca:b6:e6:bb:60:50:7b:85:51:f6:9b:d1:69:4f:55:a5:af:
55:f3:dc:ca:5f:d5:6b:ed:0e:ae:62:49:f3:1b:fe:7a:2b:91:
88:c1:09:d5:02:1f:43:ee:e3:84:e0:ec:ea:80:b8:0d:39:a5:
15:ab:a4:15:4d:75:da:81:23:d0:b3:b9:2e:b7:5f:b8:1c:8c:
fe:54:5e:8f:2a:db:69:23:a2:32:00:9c:4d:a9:b6:d7:90:ae:
ae:22:41:c9:b0:6c:67:01:2d:ce:d6:a8:d6:ee:6c:49:dd:92:
a8:1e:94:f2:dc:23:ac:6b:9a:f5:4b:f4:6d:42:5e:85:4c:5b:
40:73:3c:e8:72:b3:34:00:ed:da:1f:b2:49:6c:35:d7:4b:d4:
cc:49:e4:f3:a9:1b:d4:39:6f:0e:59:d3:9c:9f:b9:ac:d5:df:
f9:d6:7c:af:22:52:12:80:62:c3:ab:af:80:28:2b:cc:85:68:
87:64:cf:0e:d6:2d:24:22:fb:07:7e:79:31:2f:9a:ee:f9:ba:
82:61:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:51:40 2025 by rpki-client