Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/su4UX0WgAIe-RTFJgATeIxSoIDs.roa
File: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (raw, json)
Hash identifier: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=
Subject key identifier: B2:EE:14:5F:45:A0:00:87:BE:45:31:49:80:04:DE:23:14:A8:20:3B
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01970CB23481F408BFE4A8E37C5F57B5177B
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/su4UX0WgAIe-RTFJgATeIxSoIDs.roa
Signing time: Mon 26 May 2025 13:04:54 +0000
ROA not before: Mon 26 May 2025 13:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28944
IP address blocks: 80.231.174.0/24 maxlen: 24
80.231.248.0/24 maxlen: 24
85.187.213.0/24 maxlen: 24
85.187.214.0/24 maxlen: 24
85.187.215.0/24 maxlen: 24
130.250.109.0/24 maxlen: 24
130.250.133.0/24 maxlen: 24
130.250.134.0/24 maxlen: 24
147.185.246.0/23 maxlen: 24
147.185.246.0/24 maxlen: 24
147.185.247.0/24 maxlen: 24
147.185.254.0/23 maxlen: 24
147.185.254.0/24 maxlen: 24
147.185.255.0/24 maxlen: 24
151.237.11.0/24 maxlen: 24
151.237.12.0/24 maxlen: 24
151.237.13.0/24 maxlen: 24
151.237.14.0/24 maxlen: 24
151.237.15.0/24 maxlen: 24
151.237.95.0/24 maxlen: 24
161.115.64.0/19 maxlen: 24
195.219.123.0/24 maxlen: 24
195.234.98.0/24 maxlen: 24
2a01:3e7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:b2:34:81:f4:08:bf:e4:a8:e3:7c:5f:57:b5:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: May 26 13:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2ee145f45a00087be4531498004de2314a8203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:f3:d6:97:7d:5d:1f:ec:14:fe:ec:f5:8b:
7e:48:f2:f0:a5:fe:dc:39:68:cd:e0:6b:69:bc:43:
af:56:c5:1d:a7:b6:3f:87:05:85:c4:97:b6:66:4f:
57:31:59:45:3a:57:a8:2b:db:ed:c8:66:21:0c:85:
3d:f5:7a:83:b1:71:2d:ae:b8:26:05:8d:7a:18:b2:
e9:63:5e:75:70:bb:c4:c2:4b:61:70:f9:f3:fa:13:
02:79:30:77:af:f2:f6:60:2d:6f:c1:b5:10:65:31:
30:0d:08:86:3a:c8:a2:df:9d:40:02:a8:d7:8d:51:
2f:93:81:23:83:2b:be:19:bd:60:95:f8:06:9a:6a:
42:9f:41:3e:14:33:8e:a8:04:b5:79:ff:c8:d5:ce:
9c:77:cd:e1:a2:90:00:e2:9b:e6:f6:d7:87:ef:49:
49:03:14:7d:af:07:bb:f8:1b:b5:ce:f4:5a:ae:f6:
55:14:73:20:8f:8d:dd:37:fb:68:cb:11:b0:db:51:
65:18:3b:b3:f7:ef:77:a5:09:9c:84:5c:12:26:e3:
8f:16:9c:6b:56:d9:90:42:1d:a6:31:51:45:3e:71:
67:1a:73:ca:8a:9c:98:60:96:45:f7:f6:6b:1b:c2:
a8:68:38:21:26:80:2e:fe:ea:9a:11:db:77:e3:64:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:14:5F:45:A0:00:87:BE:45:31:49:80:04:DE:23:14:A8:20:3B
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/su4UX0WgAIe-RTFJgATeIxSoIDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.174.0/24
80.231.248.0/24
85.187.213.0-85.187.215.255
130.250.109.0/24
130.250.133.0-130.250.134.255
147.185.246.0/23
147.185.254.0/23
151.237.11.0-151.237.15.255
151.237.95.0/24
161.115.64.0/19
195.219.123.0/24
195.234.98.0/24
IPv6:
2a01:3e7::/32
Signature Algorithm: sha256WithRSAEncryption
7a:1c:a3:c0:4b:8c:8d:fa:cc:94:4e:f2:1e:16:db:90:57:c2:
a3:2a:fe:0e:ab:36:fb:14:ab:47:74:c0:27:ef:7e:45:19:d4:
56:89:35:b1:1f:fe:0c:ed:4e:1d:bf:d8:dc:43:51:58:58:e5:
85:e6:be:fe:53:ef:58:5d:8d:4d:24:a9:da:ab:98:20:03:7b:
e6:c6:fc:57:4c:e9:5f:6d:d1:22:e3:49:83:74:e0:cd:02:61:
8e:24:3b:d6:46:69:d2:0a:7c:b2:3b:5e:c8:cf:3e:6e:e2:c1:
1f:98:95:fb:38:d4:5e:60:38:7d:62:2a:c9:62:c1:28:77:0f:
07:65:4f:8c:48:b5:f3:ed:64:f5:7a:a6:ad:a2:14:ff:1b:76:
c5:4b:a7:cc:44:51:68:a0:b1:5e:9c:0d:bd:e7:7e:16:54:71:
3a:0b:aa:f0:de:ec:ef:fa:a4:97:a1:42:de:9a:f0:73:6a:8b:
cd:e3:d5:81:40:81:6a:85:fd:5c:9b:cc:68:ba:dc:67:3d:0d:
eb:e1:d8:e2:ac:00:ed:f8:c5:58:b6:93:05:fb:f4:11:3e:59:
c0:5b:bf:e7:dd:0f:95:bd:00:fc:68:a6:dd:21:b1:52:21:bc:
17:71:aa:07:4f:40:a8:10:13:a2:da:8a:89:11:41:68:cb:a0:
3f:29:d8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:41:10 2025 by rpki-client