Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1-Xr1UAtoiXYJuTpQ2ia0AgHhLeE.roa
File: 1-Xr1UAtoiXYJuTpQ2ia0AgHhLeE.roa (raw, json)
Hash identifier: XoaPmqRzzyo9Ckrca491OGpdkbdUnPuVfVLM6C4ZsFk=
Subject key identifier: F9:7A:F5:50:0B:68:89:76:09:B9:3A:50:DA:26:B4:02:01:E1:2D:E1
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01975E10A2A5F444A1F3522F78281788AED1
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1-Xr1UAtoiXYJuTpQ2ia0AgHhLeE.roa
Signing time: Wed 11 Jun 2025 08:17:17 +0000
ROA not before: Wed 11 Jun 2025 08:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44208
IP address blocks: 31.170.48.0/20 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.166.0/23 maxlen: 23
94.74.190.0/24 maxlen: 24
109.203.176.0/21 maxlen: 24
176.46.153.0/24 maxlen: 24
176.46.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:10:a2:a5:f4:44:a1:f3:52:2f:78:28:17:88:ae:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jun 11 08:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f97af5500b68897609b93a50da26b40201e12de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:b7:5a:60:d5:ab:2e:96:8e:8e:03:e0:12:
01:af:33:ce:b1:07:20:47:0d:d8:d3:fe:a6:ae:4f:
ab:13:64:cd:ae:21:7d:00:21:a0:ca:bf:c4:c4:87:
56:8b:47:eb:67:09:8c:93:0e:51:67:ca:e2:a6:4b:
b1:7f:f6:c0:31:05:8b:e2:a7:ad:07:a1:06:d7:87:
b3:cb:b1:f4:00:d5:09:d7:ce:29:07:16:4b:43:d4:
94:d0:4c:9d:81:77:48:e1:b0:d2:19:8f:a2:1a:18:
f7:18:ce:1b:ce:29:73:6b:05:65:31:80:0c:4f:6e:
bd:53:05:93:f4:0f:aa:5e:84:a4:55:1a:be:d8:f7:
ff:f4:bf:3f:7e:ae:6d:65:61:f6:3e:7d:de:7c:17:
ff:67:8b:90:ea:69:32:2a:64:93:c9:7b:61:9e:61:
1e:fe:5d:fa:03:60:64:45:6e:c5:dc:f8:85:6a:d1:
c7:a1:dd:3e:b6:ac:ab:6e:6f:9e:c6:05:13:4c:80:
6f:f4:11:78:dd:9e:ac:e1:39:5d:84:1d:bf:62:28:
5c:ae:68:44:e5:e0:94:c9:9c:7e:d7:44:aa:cf:00:
54:8e:c7:78:51:fb:29:e5:78:21:34:a4:1b:50:80:
9a:8b:fb:33:ca:49:d2:6a:29:11:54:c1:ff:14:f4:
bf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7A:F5:50:0B:68:89:76:09:B9:3A:50:DA:26:B4:02:01:E1:2D:E1
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1-Xr1UAtoiXYJuTpQ2ia0AgHhLeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.176.0/21
176.46.153.0-176.46.154.255
Signature Algorithm: sha256WithRSAEncryption
63:e0:a3:9c:bd:bf:84:70:b6:35:51:e7:5f:cb:f2:3b:d5:e2:
a0:61:e5:7c:40:98:73:96:aa:18:5e:64:68:78:34:66:0a:1e:
95:f9:c6:f8:40:a0:bd:c2:4a:b5:6c:7b:33:e6:31:d0:32:6e:
78:3c:8a:89:fd:de:4e:e9:d4:5a:ed:f6:e4:ca:ff:13:80:7d:
15:60:c2:87:42:52:46:23:96:7c:b9:26:4d:26:b5:12:82:17:
a9:72:5d:5f:b1:d0:cc:05:10:f6:df:b3:44:22:d2:d7:e8:d7:
82:69:42:69:90:34:0b:62:11:f0:b2:c3:f8:cc:85:a8:e5:5e:
6a:38:ce:fa:1b:b2:66:28:ca:d4:e3:6a:09:e2:2c:ae:3a:24:
0a:71:83:29:af:52:97:7e:80:5f:36:ca:2b:e4:b3:52:31:03:
74:ac:b5:6a:0b:77:fa:b6:49:30:09:1f:22:e3:36:cc:9b:4b:
61:22:95:57:ff:b1:0b:86:67:0c:26:3c:00:fa:8f:ca:39:51:
d1:ca:03:2d:89:81:81:86:7c:60:ee:ad:a4:ca:30:ba:71:d0:
33:64:43:21:3d:4f:85:27:b8:97:db:1c:19:51:44:9c:d3:7b:
ac:55:69:58:38:70:56:ae:0f:e9:d0:bd:11:c1:33:32:6b:5c:
d8:0a:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:18:24 2025 by rpki-client