Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/IuEjicT0WSpWeXHw9hSCQ6sEmtU.roa
File: IuEjicT0WSpWeXHw9hSCQ6sEmtU.roa (raw, json)
Hash identifier: t9o/QAcTRDQlfzjUzcjAJs1f83t2e8roxzyXaOe6NX0=
Subject key identifier: 22:E1:23:89:C4:F4:59:2A:56:79:71:F0:F6:14:82:43:AB:04:9A:D5
Certificate issuer: /CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
Certificate serial: 0198551B3C511A060AACF49322A524CE7D33
Authority key identifier: 02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/IuEjicT0WSpWeXHw9hSCQ6sEmtU.roa
Signing time: Tue 29 Jul 2025 07:35:04 +0000
ROA not before: Tue 29 Jul 2025 07:35:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206389
IP address blocks: 185.241.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:1b:3c:51:1a:06:0a:ac:f4:93:22:a5:24:ce:7d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
Validity
Not Before: Jul 29 07:35:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22e12389c4f4592a567971f0f6148243ab049ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:97:0b:42:e5:92:25:57:ee:3d:a8:f7:5d:
d2:a6:6a:95:8b:7c:8c:9e:f6:9d:35:ef:19:87:6a:
77:e8:57:6c:06:80:d9:e0:13:0b:c9:77:c3:42:1e:
5c:37:60:cb:db:e7:65:74:e0:77:a6:04:2a:fa:51:
6d:a3:98:17:4e:3c:59:00:20:8e:ac:1d:68:d1:25:
59:3e:46:b7:9a:82:07:e8:c3:78:cd:98:24:2f:77:
39:0a:22:2a:47:31:70:3f:39:97:2c:39:02:0b:7e:
92:b5:7f:64:e9:ba:70:fb:57:ef:ed:2e:92:e9:c9:
09:2b:87:8d:2e:eb:19:71:6b:d3:4e:b5:d6:a0:29:
50:c0:cf:25:89:08:dd:d9:6f:c6:99:8d:6a:1e:e7:
37:df:4c:9c:56:50:00:26:6b:bd:aa:77:42:aa:63:
86:1f:82:25:0a:a5:97:ec:3c:9b:6f:69:a7:e7:23:
d8:1f:92:9e:21:51:3c:32:4e:f3:6e:59:3b:a0:8a:
84:61:30:9f:1a:e5:31:1d:d0:a5:d2:42:2d:fa:b8:
dd:97:63:04:ac:78:64:75:4a:ad:4b:c1:19:3b:2c:
d0:4a:64:33:e2:ea:a7:d8:eb:7e:17:ae:9f:d3:b9:
20:38:30:40:ac:31:8c:83:19:21:4a:be:1a:4a:7a:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E1:23:89:C4:F4:59:2A:56:79:71:F0:F6:14:82:43:AB:04:9A:D5
X509v3 Authority Key Identifier:
keyid:02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/IuEjicT0WSpWeXHw9hSCQ6sEmtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c0:9c:4f:45:cc:a4:7a:fe:3c:18:45:1e:06:3c:d1:b6:1f:
af:93:09:4b:cc:85:a1:dd:f2:8e:0c:29:35:21:bf:e3:0b:90:
3d:16:52:cc:36:09:36:97:68:6c:7f:5e:af:6a:8a:c7:f9:76:
19:cc:3d:8b:ae:24:fb:7c:c6:97:36:a9:dd:ad:28:da:8d:ab:
68:dc:bd:78:ea:5d:ec:1d:6b:1c:84:5f:84:53:de:71:1b:8d:
9a:dc:c7:21:f4:60:1f:7f:a5:b6:7f:58:15:95:c9:f5:7e:c5:
62:ff:7c:6d:66:8f:2a:d0:48:2b:c0:52:10:51:ef:ef:fe:37:
7d:9e:ac:c7:30:49:df:94:b0:7d:fa:c9:22:9a:a7:26:b0:ed:
73:28:26:e0:ba:c8:80:63:9b:00:ca:81:f0:7a:69:f1:a2:37:
4c:a5:64:90:a8:5b:ca:c9:bf:e4:67:69:69:c2:f2:fd:92:f9:
22:f2:96:63:d2:b1:5b:6a:e7:cc:f4:5a:89:37:9f:94:d8:e8:
51:67:8e:f0:ee:93:85:82:42:27:f2:83:9c:7f:37:a3:38:ed:
f6:d6:ce:17:46:20:55:98:11:72:b9:f6:b5:79:77:ff:3e:9b:
e8:64:cc:55:77:71:f3:71:42:fc:2e:8f:b3:a6:2e:2b:68:ac:
9d:3c:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:17 2025 by rpki-client