Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/7QrXFXVaU6iFE4xukiQ4Q3hL8fw.roa
File: 7QrXFXVaU6iFE4xukiQ4Q3hL8fw.roa (raw, json)
Hash identifier: 8TmS/BxiWmrcJ0MOep7s2ZHsv/AUmP9JbtwuFvQiIOY=
Subject key identifier: ED:0A:D7:15:75:5A:53:A8:85:13:8C:6E:92:24:38:43:78:4B:F1:FC
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019758DF4A54D744E38C5636E1CAFE04534A
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/7QrXFXVaU6iFE4xukiQ4Q3hL8fw.roa
Signing time: Tue 10 Jun 2025 08:05:17 +0000
ROA not before: Tue 10 Jun 2025 08:05:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210423
IP address blocks: 84.232.35.0/24 maxlen: 24
84.232.36.0/23 maxlen: 23
84.232.88.0/23 maxlen: 24
84.236.226.0/23 maxlen: 24
84.236.234.0/23 maxlen: 23
94.24.46.0/23 maxlen: 23
95.178.112.0/22 maxlen: 22
95.178.112.0/23 maxlen: 23
95.178.114.0/23 maxlen: 23
217.61.80.0/24 maxlen: 24
217.61.81.0/24 maxlen: 24
217.61.82.0/24 maxlen: 24
217.61.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:df:4a:54:d7:44:e3:8c:56:36:e1:ca:fe:04:53:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jun 10 08:05:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed0ad715755a53a885138c6e92243843784bf1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:71:d1:d3:af:b8:24:fd:22:6c:43:57:ab:
9b:7c:41:f9:36:42:86:11:aa:07:16:23:b1:10:29:
36:28:51:2f:67:72:c1:f7:81:50:78:a2:65:57:57:
4b:a3:0f:4f:f4:ef:f3:7b:44:1c:f2:9a:5a:4e:e2:
b8:6d:08:a3:2e:d8:6b:a8:2d:69:c2:95:98:b5:1e:
1c:ec:38:39:e6:1d:9c:98:e7:98:e5:b5:d2:06:0f:
c2:cb:7f:43:91:90:e1:a7:4a:31:bf:66:ce:b8:50:
0a:5c:ec:ee:a3:af:98:d6:74:b8:df:8c:25:4e:ba:
e1:c9:24:b1:0f:34:c8:57:48:6e:8c:f9:10:8c:9e:
f4:30:0e:d1:63:3f:bf:27:e2:19:fa:fa:d4:ac:3d:
e5:5a:71:cc:e3:29:b1:12:21:eb:19:66:e2:85:6f:
16:fb:0c:18:85:de:e3:f1:08:4f:94:81:c8:2c:38:
95:bd:40:28:a7:04:c0:7f:a5:1c:9f:d5:a1:e9:d9:
46:c3:90:86:06:99:ad:a7:50:b0:3f:3e:10:0d:c1:
9d:0c:b0:22:74:3b:e4:7f:5c:6d:09:80:cd:04:aa:
46:35:46:64:40:25:c3:6d:51:ca:d2:1a:12:7c:92:
c2:f3:0a:c4:19:cc:e1:41:56:32:1c:3f:7d:11:30:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0A:D7:15:75:5A:53:A8:85:13:8C:6E:92:24:38:43:78:4B:F1:FC
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/7QrXFXVaU6iFE4xukiQ4Q3hL8fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.35.0-84.232.37.255
84.232.88.0/23
84.236.226.0/23
84.236.234.0/23
94.24.46.0/23
95.178.112.0/22
217.61.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:0b:3e:7e:83:1d:c7:9c:63:72:46:33:3d:7b:47:04:a8:2c:
cd:3f:5c:75:56:97:87:ec:4a:85:a9:51:04:9f:69:a4:88:71:
8a:15:8f:e1:fb:9f:da:3b:ce:e8:30:45:2c:37:1f:a9:00:3e:
ed:3e:50:a1:41:57:47:99:f2:36:ac:29:21:22:e1:ec:c2:b9:
f9:2a:bc:d1:13:2f:05:a8:7d:bb:70:d4:ff:da:1f:53:6e:90:
d1:14:1d:57:84:6f:e7:0d:73:25:44:2c:a8:dd:3c:fe:a5:89:
1c:e9:de:e9:ae:db:ed:03:fa:94:02:e5:b9:df:17:58:a7:26:
8d:c7:58:56:60:01:ba:15:fe:49:a5:87:9f:48:ea:47:df:02:
73:35:6d:85:a2:a0:d1:e4:fd:4e:d7:58:39:e1:30:55:37:69:
e2:00:0b:db:88:b0:61:b4:89:14:79:81:df:a3:57:39:e5:a5:
47:b6:f2:d7:e9:f5:e5:37:36:0f:93:10:e7:3a:e3:11:ff:0c:
69:b8:d7:bc:b8:b7:69:37:f9:55:ca:65:55:3d:bc:05:a3:c7:
5e:e5:08:07:41:70:22:73:28:60:89:09:95:f0:a2:f2:b9:6f:
1a:f2:68:59:85:8b:e3:58:18:6f:6a:74:a4:db:08:ce:47:5a:
cc:b9:eb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:51:14 2025 by rpki-client