Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/TttYs5N9jW0EoFC9Pd_WegVLE20.roa
File: TttYs5N9jW0EoFC9Pd_WegVLE20.roa (raw, json)
Hash identifier: DhQsjQU/+L8TlbJO7Kgw6sqjKo7ZviEJCV3KsGFuB5U=
Subject key identifier: 4E:DB:58:B3:93:7D:8D:6D:04:A0:50:BD:3D:DF:D6:7A:05:4B:13:6D
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 0197599625E1E31C793D16D78A9CB5EC76A7
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/TttYs5N9jW0EoFC9Pd_WegVLE20.roa
Signing time: Tue 10 Jun 2025 11:25:01 +0000
ROA not before: Tue 10 Jun 2025 11:25:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50181
IP address blocks: 79.121.84.0/23 maxlen: 23
79.121.96.0/22 maxlen: 22
94.248.170.0/23 maxlen: 23
94.248.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:96:25:e1:e3:1c:79:3d:16:d7:8a:9c:b5:ec:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jun 10 11:25:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4edb58b3937d8d6d04a050bd3ddfd67a054b136d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:21:76:b9:42:e4:94:84:3c:b3:76:e5:9c:
a2:fc:17:1e:fe:ef:93:39:90:66:aa:e5:46:a5:94:
1f:4f:ee:63:84:32:f5:ca:d4:e8:f7:5e:9b:93:fa:
2b:b1:99:15:0e:3c:8b:ba:3c:d8:86:99:be:b5:be:
d8:be:f5:42:73:64:4d:17:df:8b:1f:b2:28:a1:4d:
a8:55:c7:fa:37:6b:e2:b5:55:c7:2b:48:18:fc:e0:
07:54:a5:a6:63:2b:ce:8b:8f:a6:68:e8:e7:2e:3d:
4d:f4:32:6a:84:9e:0c:27:d3:a7:a0:2d:8f:27:8f:
86:74:b6:22:ad:64:88:70:d1:83:6c:48:b2:70:2b:
d9:3c:91:70:7e:58:19:24:f1:12:88:6c:01:51:e5:
02:55:ac:81:ac:33:a4:53:53:31:4f:9f:54:55:9a:
60:14:b8:33:e9:18:d3:67:ee:84:18:e2:06:82:da:
4c:d4:d8:5d:68:0a:11:18:ab:d5:56:00:27:5a:ff:
37:ab:ca:aa:17:cc:54:db:bf:0a:d7:a9:4b:fd:0d:
e8:d1:56:3b:23:bb:56:35:04:04:32:78:86:30:e5:
19:59:76:05:18:58:5f:3e:f4:6e:de:fa:f5:d4:2b:
88:9a:af:a7:73:c4:01:70:08:7e:78:84:bc:6e:2d:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DB:58:B3:93:7D:8D:6D:04:A0:50:BD:3D:DF:D6:7A:05:4B:13:6D
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/TttYs5N9jW0EoFC9Pd_WegVLE20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.84.0/23
79.121.96.0/22
94.248.170.0-94.248.175.255
Signature Algorithm: sha256WithRSAEncryption
8a:7a:fe:b7:ff:96:54:37:26:f3:f9:cf:9e:e1:59:ad:f5:df:
f3:4d:4a:e1:2b:a0:25:3c:da:22:8c:9b:29:04:2b:13:f6:83:
e2:93:95:b5:11:a9:ef:53:36:76:aa:ea:2c:28:20:f1:be:52:
0c:6e:5f:f1:63:f4:4a:f5:26:25:ab:83:1c:0e:5f:6e:de:dc:
25:f4:d9:98:0a:a8:4f:40:2e:c5:23:18:a6:ae:9c:e9:47:f6:
6f:83:fc:a4:d0:ec:9a:ee:1c:6a:81:cf:c6:ab:53:2f:4c:7e:
d3:30:1e:b2:aa:61:92:02:f5:03:88:51:d9:48:63:44:f0:a8:
22:54:3f:1d:73:57:9a:70:68:47:02:65:a8:d4:69:92:11:07:
25:c0:8f:76:da:43:68:31:d8:e4:e5:3a:3f:3b:e8:42:01:17:
ca:e2:dc:94:1b:a7:5e:00:d2:d5:35:fc:58:1f:f2:24:8f:5c:
59:71:9a:b0:5b:1a:41:86:86:36:41:32:d9:46:62:c9:35:6f:
32:7d:2b:0b:e6:c4:d7:9a:a4:f2:22:50:16:9c:80:b8:63:dc:
8a:e8:68:4c:a5:7f:79:14:b2:18:07:bd:6b:0c:04:2f:48:f2:
39:f1:75:10:fb:93:93:e5:b7:ba:11:00:de:3d:67:b0:91:25:
f6:67:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:56:56 2025 by rpki-client