Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa
File: Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa (raw, json)
Hash identifier: xVI7un3YDJ74QBZKCGBUFc9S59Re+F08cwvGlwnT43k=
Subject key identifier: 0F:3E:DF:50:0C:80:DD:0E:9A:10:BE:0D:B4:8E:9F:0D:EC:01:3B:E4
Certificate issuer: /CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Certificate serial: 019715EE18FA03A98E937655AA7529D206D2
Authority key identifier: 61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa
Signing time: Wed 28 May 2025 08:06:54 +0000
ROA not before: Wed 28 May 2025 08:06:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214202
IP address blocks: 193.227.126.0/24 maxlen: 24
2001:678:454::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:ee:18:fa:03:a9:8e:93:76:55:aa:75:29:d2:06:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611b9fb45639e7492f2b3631f640f6ab9afb6290
Validity
Not Before: May 28 08:06:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f3edf500c80dd0e9a10be0db48e9f0dec013be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:35:ae:cc:27:b6:4b:b0:60:4c:9c:bf:ab:a5:
ff:11:27:d7:7c:96:d5:13:37:7f:6e:e7:11:6e:38:
ec:a8:1a:48:8c:d1:2e:59:8b:01:ae:59:22:81:25:
38:50:3d:ff:c5:c5:54:9c:fd:69:3f:53:db:27:82:
aa:a7:98:4c:7b:3b:3d:3e:e5:9a:30:31:ec:e4:32:
e6:8c:92:2c:ac:8d:11:dd:fb:f1:04:8d:d8:73:c6:
be:52:8f:06:24:a9:c4:43:d4:c9:54:52:2b:50:cc:
09:a8:fa:1b:76:b6:c7:b7:d6:a7:a6:93:3e:1c:3d:
1e:66:0b:a0:d7:8e:c9:0d:76:dc:76:16:1a:84:20:
01:52:9c:1f:ac:25:ff:df:43:dd:0d:10:68:34:fa:
db:9a:0d:bd:62:04:05:85:5b:48:6a:63:60:95:43:
29:ca:23:f7:d7:4c:f7:74:d6:fe:b8:d3:3b:20:c7:
7f:36:a2:3c:b1:1b:51:37:ab:f7:91:de:2f:6c:d2:
dd:81:b1:a7:af:4b:82:27:27:00:1c:c5:ce:96:5c:
04:0a:06:e5:c0:3d:44:0e:6d:24:74:39:de:d5:06:
1d:1b:22:6f:3f:11:3d:3d:13:6e:db:93:24:53:24:
f6:c0:39:05:0d:8c:83:6a:94:54:57:f0:90:f4:d0:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:DF:50:0C:80:DD:0E:9A:10:BE:0D:B4:8E:9F:0D:EC:01:3B:E4
X509v3 Authority Key Identifier:
keyid:61:1B:9F:B4:56:39:E7:49:2F:2B:36:31:F6:40:F6:AB:9A:FB:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRuftFY550kvKzYx9kD2q5r7YpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/Dz7fUAyA3Q6aEL4NtI6fDewBO-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8482d2-7233-4177-992f-7d75e2b1a7b9/1/YRuftFY550kvKzYx9kD2q5r7YpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.126.0/24
IPv6:
2001:678:454::/48
Signature Algorithm: sha256WithRSAEncryption
98:f5:c1:5b:32:06:d1:a3:9a:92:32:1c:93:96:cf:ab:a3:e1:
d0:ee:17:d3:73:cc:de:2d:3b:b5:d0:84:ff:1e:ba:d2:a9:6e:
c8:2e:11:13:53:9a:71:1e:57:1c:28:dd:5f:b4:89:a8:55:8c:
33:01:69:fa:77:2d:80:39:0c:14:d1:18:7e:be:f4:b7:0d:15:
9e:82:2a:ab:e1:2d:f9:6a:e2:77:48:2a:aa:5b:09:3c:62:b5:
09:eb:78:ec:00:1d:9f:2f:31:f6:0d:f9:a3:68:c1:8b:83:06:
b5:a8:c1:32:fc:69:5c:09:56:13:a4:e9:41:04:d5:d4:35:b8:
cd:4b:28:d0:6b:c5:22:9c:2a:8f:4a:dd:27:04:9e:70:51:31:
ae:57:68:46:7c:85:a9:7f:ae:7a:42:ca:07:92:f3:b9:45:b1:
9d:57:7a:f5:84:48:64:be:75:e6:7e:95:74:c7:ad:e7:61:bc:
8e:33:06:21:43:e9:04:e3:62:88:7e:ae:be:5e:6c:78:02:9f:
77:4d:c7:27:49:3d:34:7e:b1:77:cf:46:fd:3e:32:c7:58:a4:
63:a7:71:2f:6c:a3:81:8d:4f:a7:cd:b5:37:f3:96:d0:bd:86:
b7:8e:4c:46:82:eb:9c:88:22:7e:36:3e:98:0a:9c:08:96:6e:
72:91:9e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:33:26 2025 by rpki-client