Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uVTvAaQQmCdjNunWO46kY8-7teo.roa
File: uVTvAaQQmCdjNunWO46kY8-7teo.roa (raw, json)
Hash identifier: +pfzMc9bZwAl1/q810SZkcpvUfanwb2vxv9A67uxvxk=
Subject key identifier: B9:54:EF:01:A4:10:98:27:63:36:E9:D6:3B:8E:A4:63:CF:BB:B5:EA
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01968764298C8897D3C6E6D102CB2C6286E8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uVTvAaQQmCdjNunWO46kY8-7teo.roa
Signing time: Wed 30 Apr 2025 15:50:10 +0000
ROA not before: Wed 30 Apr 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202678
IP address blocks: 188.132.213.0/24 maxlen: 24
188.132.214.0/24 maxlen: 24
188.132.215.0/24 maxlen: 24
188.132.216.0/24 maxlen: 24
188.132.217.0/24 maxlen: 24
188.132.218.0/24 maxlen: 24
188.132.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:64:29:8c:88:97:d3:c6:e6:d1:02:cb:2c:62:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 30 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b954ef01a41098276336e9d63b8ea463cfbbb5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:2c:fb:c2:55:11:43:06:56:cf:7e:1f:f6:
bb:99:b7:8e:26:4f:bd:87:fe:6e:f0:9a:d8:26:d4:
82:9c:0c:e0:bf:51:69:86:15:7b:6c:7b:ca:2c:1d:
b1:22:b6:c6:eb:b8:fa:53:99:40:b1:37:f3:84:5b:
e4:8a:4b:bc:9a:8e:b0:d6:26:bc:1c:b9:6c:fc:55:
43:e7:87:e4:ea:48:97:35:8d:99:e2:d2:b9:08:3d:
bc:d3:93:0d:47:4a:0e:86:e4:0d:33:1e:df:83:f7:
5e:8c:44:13:63:78:c0:b1:cb:0b:9a:82:18:f8:ba:
99:cb:c0:95:b7:e7:5c:46:d5:e6:d2:45:bd:01:79:
2d:05:ba:16:2b:db:af:88:b2:7f:33:ea:96:96:e3:
32:d1:3f:13:f4:2d:5b:c2:e2:96:7f:d9:9c:24:a4:
66:c8:68:7a:3a:87:0f:da:85:66:dd:8d:03:b1:9d:
7a:92:cc:87:8f:a8:df:c8:2a:94:1a:12:f6:46:41:
da:a9:7e:1e:80:32:6d:c7:be:1c:da:69:11:4b:06:
69:50:ba:99:df:d0:1f:4d:f8:9e:5a:1e:eb:34:7e:
bb:f0:37:35:1e:0e:5c:d3:36:59:b4:f1:20:e1:cc:
da:82:f8:7f:68:5a:0e:62:d0:62:6c:51:db:28:8c:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:EF:01:A4:10:98:27:63:36:E9:D6:3B:8E:A4:63:CF:BB:B5:EA
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/uVTvAaQQmCdjNunWO46kY8-7teo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.213.0-188.132.218.255
188.132.228.0/24
Signature Algorithm: sha256WithRSAEncryption
57:23:90:8a:15:84:be:9c:dd:72:e0:39:82:3c:ea:b7:10:6b:
c3:7f:1f:f8:f1:ad:ba:f5:30:bc:64:f0:1a:42:e0:4e:6a:01:
11:b0:a7:89:6c:6f:d3:37:1e:ca:5b:ef:e0:73:dd:3d:0b:a9:
22:95:44:6d:0e:3a:48:3b:06:3a:a9:85:ba:ca:48:2e:07:87:
ad:a4:7b:84:16:e8:0e:f5:00:2f:d5:eb:c1:52:e3:8c:98:ff:
0b:25:5d:17:93:ae:5f:9d:53:c8:7d:77:9e:3c:af:76:61:d0:
0f:9d:89:bc:65:11:1e:31:09:8d:d4:1e:9e:84:92:2f:6a:0a:
ef:d4:8f:5e:ba:b9:14:d2:54:8b:ae:5c:a4:8e:e6:2e:db:7e:
9c:35:18:a7:62:f7:9f:75:84:d3:58:65:92:5b:5d:5f:bb:1d:
0a:a5:fa:bb:db:53:97:4e:38:d9:3d:86:8d:eb:16:5d:4c:9a:
f1:fd:9b:a6:5a:70:12:d9:f3:3b:af:8b:ab:6b:56:23:04:5e:
bc:81:ae:72:44:94:9b:a7:3d:d2:7b:3e:1a:97:05:a6:a2:f4:
db:dd:7d:0b:fb:cc:94:94:74:15:1a:e6:da:64:1b:8c:07:15:
cc:75:7c:db:8e:c8:0e:53:1f:cc:53:27:53:7c:62:ae:9a:4f:
fb:03:cd:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:41 2025 by rpki-client