Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/aFy58PHjeTiC7YW5IzZTdEFHuKs.roa
File: aFy58PHjeTiC7YW5IzZTdEFHuKs.roa (raw, json)
Hash identifier: cjyImwXHrtyyKxwYqXgXS9BlQlxdv0TV4Z/cZYfi4dc=
Subject key identifier: 68:5C:B9:F0:F1:E3:79:38:82:ED:85:B9:23:36:53:74:41:47:B8:AB
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 01986B7ECE44402908C13ACD4A644B3973C2
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/aFy58PHjeTiC7YW5IzZTdEFHuKs.roa
Signing time: Sat 02 Aug 2025 15:55:28 +0000
ROA not before: Sat 02 Aug 2025 15:55:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
185.36.125.0/24 maxlen: 24
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6b:7e:ce:44:40:29:08:c1:3a:cd:4a:64:4b:39:73:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Aug 2 15:55:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=685cb9f0f1e3793882ed85b9233653744147b8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:2c:99:84:7b:f1:d9:3d:d4:f6:8b:6e:07:
47:df:80:6f:29:f2:95:a3:d1:a7:b5:01:4a:4e:2f:
f6:fd:ba:54:b0:37:3f:d2:b3:e0:ca:ab:3b:b0:62:
c3:db:15:d2:15:6c:c9:bb:b1:d9:9c:cf:4a:0c:ed:
5f:d0:6c:5a:04:4a:6d:5d:0d:7f:d0:e7:42:74:20:
20:da:75:80:85:bd:13:05:10:b0:c2:44:95:c4:eb:
a8:7b:05:88:0d:ec:28:f5:d7:20:c8:7d:5e:8f:6d:
ff:a0:fc:4d:ea:1d:3a:35:ce:3a:05:1a:71:46:c8:
bc:db:de:53:de:9d:43:15:d2:82:a8:e4:51:64:1f:
88:21:ab:1c:18:a7:cf:b1:8c:d5:2c:6b:70:7a:fb:
0e:57:ad:99:43:91:74:e3:c8:be:97:76:df:f6:e7:
ab:2b:6f:f8:9e:7e:e3:f7:e7:c8:69:8a:17:82:bd:
79:b0:b2:30:97:be:34:b8:47:35:f2:08:55:bc:84:
df:1e:9e:76:27:ff:38:36:ce:89:aa:b8:bf:84:54:
1c:d1:90:fd:0f:c9:bf:b6:27:74:77:50:68:61:2d:
67:ec:f2:5d:bb:ee:e2:b4:bb:d5:a1:fd:34:65:ef:
06:1d:38:51:0c:49:bd:d7:7c:98:a2:bc:4e:6f:f1:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:B9:F0:F1:E3:79:38:82:ED:85:B9:23:36:53:74:41:47:B8:AB
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/aFy58PHjeTiC7YW5IzZTdEFHuKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
ad:38:11:39:ae:6f:39:69:48:c3:a3:33:51:61:3f:f2:ac:21:
f0:05:74:f8:09:e3:39:21:b7:c3:47:de:86:77:5f:4c:79:f5:
47:ca:25:ce:f9:3b:07:d3:96:01:88:4d:71:95:60:69:6d:96:
42:0b:04:61:dd:fb:5b:66:bf:30:85:4f:d5:77:c1:10:21:10:
64:2d:d0:13:1d:f0:69:45:6f:b1:21:fa:92:90:1c:2c:3a:5d:
73:87:ce:9f:ad:1f:ed:6f:8c:fe:73:e7:52:44:36:42:0e:f6:
c6:c2:c0:28:b7:d7:f6:84:3a:9f:01:71:fe:d6:9c:32:51:ee:
e4:60:16:00:40:6a:a0:dc:50:a9:20:31:b9:12:b2:4c:7e:b8:
94:2a:34:a6:e9:68:85:2a:30:eb:16:82:45:fa:54:10:91:0a:
f9:45:a1:e7:68:3c:ae:c7:fb:35:ec:1f:eb:d1:2e:e3:73:8b:
32:39:98:48:95:ad:e1:e1:34:54:59:99:d5:8b:3c:6b:1c:89:
bb:87:f2:2a:31:13:4d:1f:b9:08:97:f9:a1:9c:2a:d4:3b:75:
b3:f0:50:fa:d8:ed:6b:46:c9:73:ca:5a:ca:0c:50:86:bc:e2:
4e:7f:78:6f:75:44:d5:35:30:d8:7a:87:5f:ef:66:ab:bb:95:
50:8e:5b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:58 2025 by rpki-client