Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa
File: lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa (raw, json)
Hash identifier: aiK+jeojasCoIONEiBsew2dpW6Sl1vqGI4o1s3u6sNg=
Subject key identifier: 96:FE:63:2F:FA:D8:1A:1E:D4:BF:4A:D6:41:A4:74:CE:07:90:6D:96
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 01977857EE773915ED04B687E403CEE3049C
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa
Signing time: Mon 16 Jun 2025 10:45:17 +0000
ROA not before: Mon 16 Jun 2025 10:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210834
IP address blocks: 185.215.68.0/22 maxlen: 24
188.93.168.0/21 maxlen: 21
188.93.168.0/24 maxlen: 24
188.93.169.0/24 maxlen: 24
188.93.172.0/24 maxlen: 24
188.93.173.0/24 maxlen: 24
188.93.174.0/24 maxlen: 24
188.93.175.0/24 maxlen: 24
2a0b:880::/32 maxlen: 32
2a0b:880::/36 maxlen: 36
2a0b:880:1::/48 maxlen: 48
2a0b:880:4::/48 maxlen: 48
2a0b:880:5::/48 maxlen: 48
2a0b:880:6::/48 maxlen: 48
2a0b:880:8::/48 maxlen: 48
2a0b:880:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:57:ee:77:39:15:ed:04:b6:87:e4:03:ce:e3:04:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Jun 16 10:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96fe632ffad81a1ed4bf4ad641a474ce07906d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:8a:89:45:d7:11:89:18:60:10:30:24:96:
7d:28:3c:79:16:ae:cb:32:92:00:00:49:34:11:50:
7c:12:28:9f:47:40:6f:64:6b:99:ff:a5:e3:fa:e5:
a5:fb:f5:a6:fa:49:75:b8:4d:8a:46:96:be:59:40:
1e:ab:b5:3d:f1:ba:72:37:76:e1:8c:1c:8b:4b:b0:
0f:ea:c9:5b:80:26:3a:2a:35:e6:f7:74:36:75:74:
70:c3:9c:00:b0:09:a7:4e:db:64:42:2b:97:4d:ea:
fd:9a:1d:02:6b:6e:c1:fd:4f:cd:fa:91:ec:4f:62:
dc:ab:e6:c8:d4:0c:fe:03:e9:f3:5f:56:15:57:3b:
32:e5:da:71:05:2c:7b:ad:64:ff:ab:8f:bf:5b:3b:
f6:af:38:54:74:f5:53:c1:07:4d:5e:43:ed:cd:13:
53:2e:06:81:a5:6b:3f:72:ef:47:46:63:fd:09:5c:
79:04:19:d2:e1:9b:ab:3b:0b:62:d1:a8:ee:a4:a4:
18:02:d7:7c:20:13:30:bc:0c:67:73:57:cf:9c:13:
90:42:5e:0a:83:c4:90:a1:82:6c:97:0b:82:a2:e2:
6c:be:e5:56:40:ff:c4:cc:cb:3d:0b:91:e9:7f:1f:
51:d4:b0:a5:98:e9:f5:0c:98:9e:53:e4:6c:02:5b:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:63:2F:FA:D8:1A:1E:D4:BF:4A:D6:41:A4:74:CE:07:90:6D:96
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/lv5jL_rYGh7Uv0rWQaR0zgeQbZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.68.0/22
188.93.168.0/21
IPv6:
2a0b:880::/32
Signature Algorithm: sha256WithRSAEncryption
4d:54:a7:20:c7:c3:a9:58:52:7a:cf:53:5c:69:77:64:a4:db:
90:71:f4:22:60:da:1a:53:bc:54:7e:d6:2f:f0:07:b4:60:94:
e0:1c:33:7f:e9:6e:35:a1:c1:e1:69:b9:38:b0:2b:dc:8f:74:
a7:65:bd:0d:91:f8:84:d5:ed:11:4e:42:59:18:14:60:f8:38:
3b:dc:82:49:1e:7e:b8:ac:dc:a7:f1:e5:62:89:93:7d:50:7d:
f9:60:bf:9e:e8:dd:bb:22:62:e8:77:99:cf:46:77:99:5d:f4:
02:33:43:2d:44:20:66:6a:96:ef:39:8b:27:4e:d4:0e:53:19:
24:4f:b0:ba:a8:ce:3e:9e:b1:aa:e1:09:4c:0b:21:d2:99:af:
83:57:6f:a7:4e:2d:01:3b:e5:60:0e:2f:29:e5:f7:0e:a6:0c:
f5:33:18:18:14:9f:64:3c:a8:b0:5d:f8:ad:c1:de:43:88:88:
c8:ad:52:92:ee:11:47:0d:f4:7c:c2:66:69:1e:14:79:f2:5d:
28:ef:db:df:8e:82:30:cd:95:fe:5c:18:30:cb:69:73:b0:fe:
06:73:00:0a:a8:ea:f0:75:1e:8a:69:2b:91:64:ab:4a:69:12:
70:32:d3:5a:7a:df:12:70:9c:6f:22:9f:a4:b1:22:a7:c5:ba:
bd:30:f8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:24:50 2025 by rpki-client