Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lG8nuZ4qe4U9zDVhGEAH6QV1dFo.roa
File: lG8nuZ4qe4U9zDVhGEAH6QV1dFo.roa (raw, json)
Hash identifier: HQATsyn60mPboK+X2SAsqE+0nHz/ijuWDuiavGWe5ss=
Subject key identifier: 94:6F:27:B9:9E:2A:7B:85:3D:CC:35:61:18:40:07:E9:05:75:74:5A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0197121F1080C68160C8DE393E50F55B421B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lG8nuZ4qe4U9zDVhGEAH6QV1dFo.roa
Signing time: Tue 27 May 2025 14:21:54 +0000
ROA not before: Tue 27 May 2025 14:21:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56534
IP address blocks: 5.188.85.0/24 maxlen: 24
37.139.36.0/22 maxlen: 22
37.139.36.0/24 maxlen: 24
37.139.37.0/24 maxlen: 24
37.139.39.0/24 maxlen: 24
37.139.44.0/22 maxlen: 22
37.139.44.0/24 maxlen: 24
37.139.45.0/24 maxlen: 24
37.139.46.0/24 maxlen: 24
37.139.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:1f:10:80:c6:81:60:c8:de:39:3e:50:f5:5b:42:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: May 27 14:21:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=946f27b99e2a7b853dcc3561184007e90575745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:da:51:c7:9c:46:b7:df:47:98:d8:3f:46:
8c:0f:f5:20:54:b4:07:98:b1:ee:ca:a9:d4:f2:8f:
f3:3c:e6:8e:9e:78:aa:31:24:3c:f8:b4:e1:91:96:
8f:13:6e:0d:c1:46:9e:0b:af:c5:40:cc:b2:c4:65:
78:7c:6b:6c:93:aa:68:e5:2e:bf:97:08:44:37:da:
42:ae:bf:3a:e6:14:5d:1d:84:8d:a3:57:a1:c7:75:
b7:91:b4:0a:61:6e:54:fb:6e:93:da:5b:ec:8e:50:
ac:4b:30:4b:f0:82:f4:06:ab:69:32:12:97:f4:4d:
b8:13:08:e7:32:89:92:48:99:9d:d7:fa:89:21:5f:
21:62:85:b2:46:79:20:f0:e1:52:47:2b:0d:05:36:
4e:e6:cf:43:2c:01:42:51:83:30:a9:c6:c6:7b:d8:
85:98:32:d1:27:0c:70:38:cd:0e:be:9a:3c:46:de:
9e:16:41:e8:d1:85:e7:6d:4a:a6:57:31:44:3d:e6:
db:95:3b:57:6a:ed:2c:3c:8d:c8:16:cc:e7:dc:c3:
0f:d6:c9:35:a1:07:f9:75:4d:87:36:9c:c9:a4:d2:
be:47:57:6e:31:9d:e3:12:9a:08:cb:e5:dd:ed:85:
34:14:58:e0:89:cc:ca:94:0d:39:07:a3:e3:ac:d7:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:27:B9:9E:2A:7B:85:3D:CC:35:61:18:40:07:E9:05:75:74:5A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/lG8nuZ4qe4U9zDVhGEAH6QV1dFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.85.0/24
37.139.36.0/22
37.139.44.0/22
37.139.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c5:8c:a5:75:c3:d0:44:fd:f7:f4:83:c7:0a:92:69:3a:38:
23:87:ca:05:9c:3a:68:6e:44:72:40:a5:f5:53:7a:b3:59:6f:
fa:82:a8:5f:03:47:df:74:f6:31:3a:4f:2f:ae:a7:21:aa:f7:
51:2a:8e:8f:fb:e9:7e:2e:f2:cb:34:9e:41:c4:19:12:94:f8:
ca:b9:b9:90:e7:d3:07:f4:46:04:20:b4:b5:fc:7f:98:49:74:
01:27:86:83:4c:11:f2:03:8b:93:46:f4:61:68:8d:42:20:e2:
7f:31:3a:75:7d:df:98:a8:8f:7a:32:1c:06:1f:e8:05:46:d9:
0e:4f:7d:76:4e:6f:f4:f2:7d:68:55:45:bf:95:1b:1d:c7:8e:
7f:2c:77:06:94:63:6c:d0:84:bf:cd:bc:94:c5:54:fc:ac:ce:
94:6a:06:f4:09:04:4c:da:cd:8f:cb:24:c1:22:b8:f4:70:23:
a8:b8:2b:4e:ec:86:64:a7:a8:2e:df:0d:ce:c7:fe:d5:c5:17:
ec:0a:49:5a:ae:45:95:c9:a8:40:34:18:86:7f:5c:87:8e:14:
1d:83:36:6e:2a:0d:4d:64:93:5b:19:2b:67:cc:73:60:f9:5a:
dd:1b:5d:36:e1:48:33:97:f5:7c:53:2f:c4:cc:60:26:40:4c:
74:7b:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:43 2025 by rpki-client