Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0WLoeeaG18a-BN7hn2hSJ5JZXCY.roa
File: 0WLoeeaG18a-BN7hn2hSJ5JZXCY.roa (raw, json)
Hash identifier: S6SrbVKTqbdbshaXJV4jhsubDvihKF+BEBmd3K1eJyU=
Subject key identifier: D1:62:E8:79:E6:86:D7:C6:BE:04:DE:E1:9F:68:52:27:92:59:5C:26
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01975476716764ED157AA34AA33F5D97EA92
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0WLoeeaG18a-BN7hn2hSJ5JZXCY.roa
Signing time: Mon 09 Jun 2025 11:32:17 +0000
ROA not before: Mon 09 Jun 2025 11:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 79.135.128.0/19 maxlen: 22
80.254.208.0/20 maxlen: 22
80.254.208.0/22 maxlen: 22
80.254.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:76:71:67:64:ed:15:7a:a3:4a:a3:3f:5d:97:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 9 11:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d162e879e686d7c6be04dee19f68522792595c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:f4:95:f0:54:6d:30:c5:89:fe:e7:98:36:
ef:67:95:5a:f5:f1:d5:73:b3:8d:d7:21:58:ac:92:
3e:aa:eb:b5:30:8f:74:fa:20:25:21:58:c3:fb:66:
3f:ee:68:7a:b7:93:5a:86:de:f3:70:6d:bf:c4:76:
14:30:27:db:3f:c8:0b:d4:27:13:1c:1e:cd:69:6f:
54:c0:f3:24:b5:a6:96:11:d6:03:ca:a0:ca:e0:69:
88:82:76:7a:9c:60:2a:98:b6:43:21:6c:7d:20:22:
25:2b:6d:ce:8d:7f:21:14:9e:62:44:bd:98:b7:b6:
8b:52:80:f3:4b:6d:32:95:7a:e6:db:05:50:fa:b4:
41:a6:ac:ce:4a:0a:db:7c:98:4c:5a:13:23:06:05:
f7:01:93:7c:43:9f:65:da:3a:13:e1:81:8b:f8:a9:
6e:36:70:59:7e:7d:84:b0:02:fe:33:a5:44:78:ff:
60:7c:d7:64:cc:fd:db:1d:53:69:fc:b6:0b:70:a1:
ec:ea:33:86:d5:04:17:f9:26:d3:b4:b9:00:fc:76:
aa:72:f9:07:2a:0a:47:7e:96:dc:86:f3:61:b7:7d:
6f:72:53:32:10:45:ca:71:6e:5d:f4:04:cf:5a:62:
26:31:3f:b1:ae:d4:08:d5:85:cb:52:e0:98:70:ca:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:62:E8:79:E6:86:D7:C6:BE:04:DE:E1:9F:68:52:27:92:59:5C:26
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/0WLoeeaG18a-BN7hn2hSJ5JZXCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.128.0/19
80.254.208.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:3a:27:c3:ae:6a:c1:40:b3:d9:91:57:49:1a:a2:0c:be:05:
d3:ef:e0:41:55:2f:e9:04:0e:33:b6:74:c5:28:7d:b5:11:56:
de:88:ea:77:29:d7:e1:25:ec:6c:4a:56:7d:40:7e:9c:04:3c:
8f:7a:36:83:16:3a:5b:50:b1:b9:97:6d:96:18:ac:af:21:43:
ca:b5:b2:08:22:de:1c:a8:53:02:e3:d4:c4:10:2b:68:cd:3c:
3a:f5:39:48:3b:fd:3c:0b:04:d3:c6:30:c0:a3:94:2c:67:c6:
47:31:25:0e:54:24:8f:ab:a7:bb:30:3e:e9:d1:2c:30:63:1f:
63:77:f1:7b:ed:e9:dd:b9:db:60:f3:70:9a:c0:7b:e9:b0:72:
1f:b3:aa:00:0b:f0:da:f2:da:91:cb:33:a0:73:44:c1:c9:24:
00:f3:6f:08:38:2a:36:4d:f5:c4:d8:04:38:8a:32:27:70:9e:
35:21:3a:88:bf:65:a5:3f:93:b5:ae:1a:8f:16:06:a1:ba:d1:
56:a4:8e:8a:6b:06:d3:dc:51:6f:17:0c:92:e6:d3:f2:50:58:
c9:b9:d1:8f:b1:47:51:f4:ab:da:c4:78:c5:ae:8b:8c:4e:23:
0b:06:6f:10:63:d2:4c:7a:c5:d6:5d:06:85:70:84:d0:1e:ae:
5a:32:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:15:51 2025 by rpki-client