Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1sKE36lDWeWUjMSloo6n26lQvxE.roa
File: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (raw, json)
Hash identifier: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=
Subject key identifier: D6:C2:84:DF:A9:43:59:E5:94:8C:C4:A5:A2:8E:A7:DB:A9:50:BF:11
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0198374C524C32FD697FCC9FA381A9C04D30
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1sKE36lDWeWUjMSloo6n26lQvxE.roa
Signing time: Wed 23 Jul 2025 12:40:05 +0000
ROA not before: Wed 23 Jul 2025 12:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 77.74.230.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:37:4c:52:4c:32:fd:69:7f:cc:9f:a3:81:a9:c0:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jul 23 12:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6c284dfa94359e5948cc4a5a28ea7dba950bf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:19:7a:52:0d:28:18:e0:fb:58:3e:d7:62:
2c:ae:fb:6b:4b:2b:36:98:4c:0d:75:9d:14:53:c9:
77:04:cc:df:2e:56:f7:58:d1:a7:e8:db:85:dc:a4:
53:2f:be:4a:65:d6:a6:bb:c2:fb:82:17:ea:e1:3a:
43:5c:65:90:a2:f6:95:b1:da:58:00:ec:e1:8f:8c:
b0:5c:07:b2:d9:57:5f:df:68:5f:7a:48:03:70:b4:
d5:4c:ab:9d:91:7f:9a:7b:b4:28:c9:ba:56:e6:b3:
3d:0a:08:f3:1d:73:e1:1d:f9:eb:2c:31:52:50:38:
a1:bc:fc:dc:54:75:8f:e4:4d:c5:18:35:d3:03:e5:
be:83:5d:50:b5:e3:db:14:6e:1e:04:2c:4e:87:17:
66:16:cf:cc:fa:8e:37:77:a3:af:c5:8c:84:4c:24:
64:88:98:2e:7f:15:06:7b:3e:a1:e6:e3:92:05:aa:
4b:2a:44:69:91:78:f8:be:80:c1:ee:62:65:31:c6:
43:b4:18:23:0a:ae:88:bb:e1:ec:88:a8:d4:3a:fd:
db:23:5d:ee:0d:37:dd:68:23:0d:8f:74:99:f5:f3:
b8:8b:01:cd:3b:45:29:f1:8b:22:34:85:77:c3:49:
5d:8c:69:29:5c:eb:dd:1d:0f:3f:df:2a:91:07:7c:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C2:84:DF:A9:43:59:E5:94:8C:C4:A5:A2:8E:A7:DB:A9:50:BF:11
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/1sKE36lDWeWUjMSloo6n26lQvxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/24
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
60:87:46:6f:5a:9a:a2:b1:19:87:df:41:04:ca:7c:ae:81:54:
da:79:c9:0e:1f:f6:50:2b:e3:ad:17:a9:39:1f:5a:80:f2:f5:
dc:38:2a:75:86:de:90:2f:14:90:c7:a7:8e:44:cd:f8:11:19:
48:47:8b:51:7c:a5:54:91:62:68:69:35:07:58:0f:9b:b6:1b:
4b:1d:2b:e2:26:d8:07:6a:40:ce:ce:5a:87:fa:14:b2:33:90:
41:20:eb:4f:42:e4:89:ab:63:52:d7:9d:96:a1:ae:2c:ca:23:
06:9a:16:5a:16:32:96:f8:24:52:ab:7d:b8:06:2e:97:94:3a:
d3:ce:68:f0:5f:6a:79:06:57:a3:c5:da:e6:0e:4f:18:cc:03:
c1:02:ca:ce:54:15:c8:94:97:3e:fb:ad:13:bb:fa:54:dd:41:
82:2c:08:f2:4c:b5:29:e0:ca:3c:c8:37:66:10:d8:f4:c6:42:
35:1e:02:8f:43:42:5a:97:60:70:a4:b2:59:ac:20:02:1b:14:
6a:5f:71:71:c0:a8:43:11:2c:4c:60:8d:da:4b:98:c5:bc:fb:
d5:01:78:b2:75:6b:03:82:86:b2:b1:d9:8c:45:93:3a:06:eb:
44:5b:92:47:2a:8a:5d:3a:1c:e8:35:9b:ac:c0:3a:c5:b9:8b:
93:a2:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:55:28 2025 by rpki-client