Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/VN6ruZTI56QmR2wi54zgOy2r-_8.roa
File: VN6ruZTI56QmR2wi54zgOy2r-_8.roa (raw, json)
Hash identifier: v4iITGHNA3f/jqtvJNkH6LEwD8ta5N38AwWHG7bdtFM=
Subject key identifier: 54:DE:AB:B9:94:C8:E7:A4:26:47:6C:22:E7:8C:E0:3B:2D:AB:FB:FF
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0197FF18DE2E452F36B1A4425B977F699F10
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/VN6ruZTI56QmR2wi54zgOy2r-_8.roa
Signing time: Sat 12 Jul 2025 14:45:09 +0000
ROA not before: Sat 12 Jul 2025 14:45:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 85.239.148.0/24 maxlen: 24
85.239.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ff:18:de:2e:45:2f:36:b1:a4:42:5b:97:7f:69:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 12 14:45:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54deabb994c8e7a426476c22e78ce03b2dabfbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:d2:00:4b:67:8f:22:f7:0f:67:3c:2e:fb:
6a:8a:9a:71:3c:65:ea:da:11:6c:50:82:90:ac:fe:
87:d2:dc:d3:83:db:0a:2b:53:9a:7c:5a:7f:67:d8:
d5:dd:1a:d3:06:11:2d:82:49:2a:3d:90:48:6d:00:
81:cd:94:c0:cf:34:82:f5:36:65:88:5a:59:df:1a:
d4:2c:f0:f6:2f:43:de:0c:12:98:66:dc:56:bb:33:
26:61:40:79:9e:71:dd:22:81:9c:52:28:44:db:60:
1b:2b:75:4c:81:aa:73:5f:8d:12:c3:dd:1b:77:ea:
bb:fc:4b:16:52:35:4f:04:96:07:6e:0f:cb:f1:42:
16:eb:73:aa:d6:9a:6d:35:34:be:71:0a:7c:7c:30:
e3:96:2c:e9:65:24:78:bb:cd:d7:de:0c:ec:a4:14:
93:40:c2:f4:7f:5e:43:bd:74:72:bb:f4:6e:20:b1:
93:be:21:59:56:00:c3:4d:ae:2c:91:ca:2c:18:02:
f8:23:42:c9:c4:50:d4:03:3c:77:22:bb:ff:3c:76:
63:c6:16:36:2d:3a:4a:fb:1a:d5:7f:2e:f3:14:5c:
6c:25:52:05:e6:60:27:55:88:f4:da:2c:23:45:02:
46:66:e7:c7:1b:41:2d:1d:40:34:fd:d6:f7:96:79:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DE:AB:B9:94:C8:E7:A4:26:47:6C:22:E7:8C:E0:3B:2D:AB:FB:FF
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/VN6ruZTI56QmR2wi54zgOy2r-_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/24
85.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9d:6b:0a:06:8c:84:95:bf:33:b7:59:90:75:a3:35:8a:83:
22:d9:f0:e4:43:df:bb:c7:1c:05:ab:67:e0:f8:e2:55:34:97:
06:92:9b:c3:fc:e4:b1:b0:4c:32:40:c5:d8:56:26:0d:52:aa:
85:d5:33:e1:9c:43:5f:e3:8e:97:86:16:15:5a:08:cf:bb:ee:
0e:3a:c4:3c:66:09:eb:84:90:ef:a4:26:a8:28:4b:1b:b6:ce:
2a:86:3f:de:bc:ef:7b:35:be:3e:a4:82:08:52:13:74:cc:b2:
b8:12:4f:c5:64:92:46:88:d7:cb:40:bb:ec:76:14:7b:8b:39:
5b:95:d2:41:ac:20:d7:21:74:33:dc:0b:de:66:45:80:97:be:
56:d6:78:e0:e2:80:4b:68:06:f0:fe:4b:b7:4a:ce:89:2d:68:
2b:13:38:81:bf:e4:b8:1e:74:0d:2d:a8:ca:e1:9a:eb:7f:42:
ba:16:db:fd:33:7c:15:1a:1c:8b:4a:ff:87:04:43:c7:f1:c8:
06:87:7d:af:cd:ad:91:fd:33:09:eb:41:7d:2a:87:f5:2f:37:
30:90:24:fd:63:d6:08:47:70:1d:84:5f:42:28:af:40:2d:71:
0d:4b:35:e8:b8:6c:71:50:34:8a:f5:67:3b:24:ee:79:6f:44:
fb:51:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:18 2025 by rpki-client