Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/DM7uFBCahFnbGJNfAmM2hhcD1m0.roa
File: DM7uFBCahFnbGJNfAmM2hhcD1m0.roa (raw, json)
Hash identifier: EDxMHaQhQ+4neYatSkocVDhae6cZ9g3YrZWJK6Hp1tk=
Subject key identifier: 0C:CE:EE:14:10:9A:84:59:DB:18:93:5F:02:63:36:86:17:03:D6:6D
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019759C256927F2C02688DE614845AE7C3E1
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/DM7uFBCahFnbGJNfAmM2hhcD1m0.roa
Signing time: Tue 10 Jun 2025 12:13:17 +0000
ROA not before: Tue 10 Jun 2025 12:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51202
IP address blocks: 31.25.11.0/24 maxlen: 24
62.169.152.0/24 maxlen: 24
89.36.35.0/24 maxlen: 24
185.144.70.0/24 maxlen: 24
212.232.18.0/24 maxlen: 24
2a0c:2500::/29 maxlen: 48
2a0c:2502::/32 maxlen: 48
2a0c:2503::/32 maxlen: 48
2a14:6781::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:c2:56:92:7f:2c:02:68:8d:e6:14:84:5a:e7:c3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 10 12:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cceee14109a8459db18935f026336861703d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:6e:fa:e6:2f:ba:dd:51:b4:de:19:d7:e7:
10:d0:76:51:29:73:14:79:10:9f:cd:f4:3d:50:43:
f4:f2:6c:66:cd:9d:72:a9:6f:ac:d3:d7:cc:9e:c8:
80:ef:5f:3d:b8:89:c0:98:7e:6a:1c:b6:8b:16:63:
39:8f:66:7b:4a:ba:c3:f9:00:9c:98:d0:14:ee:16:
6e:59:3b:f6:10:22:4f:e1:39:e4:40:6d:ec:2c:f8:
11:0b:96:61:f6:35:96:9f:ce:a7:8e:6f:8c:25:6a:
f9:26:66:4c:4d:00:0e:c0:12:d0:aa:d8:20:66:79:
d1:80:e6:43:82:97:13:b6:3a:06:95:4d:40:e2:1e:
dd:2c:e0:52:42:4b:d0:7b:5f:18:f8:6b:a4:29:95:
05:73:f6:23:75:57:83:28:71:45:ea:5c:1c:9d:f3:
ea:ec:d3:0f:a6:cb:a8:cb:66:9a:3a:e3:54:7a:a3:
b4:a6:c9:db:b1:f5:bf:2e:68:ad:6d:10:68:46:56:
bd:7f:ac:c8:5b:c9:e2:2d:8c:82:5f:d3:32:13:e3:
95:c8:65:3d:c2:a8:97:88:43:b9:f1:58:a3:b4:99:
f3:c9:86:6e:6f:20:d3:4d:27:9e:ac:54:5b:28:da:
59:c2:ce:59:c1:0d:1a:05:7f:9c:4e:26:f9:90:e3:
52:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:EE:14:10:9A:84:59:DB:18:93:5F:02:63:36:86:17:03:D6:6D
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/DM7uFBCahFnbGJNfAmM2hhcD1m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.11.0/24
62.169.152.0/24
89.36.35.0/24
185.144.70.0/24
212.232.18.0/24
IPv6:
2a0c:2500::/29
2a14:6781::/32
Signature Algorithm: sha256WithRSAEncryption
2e:0c:fc:a2:49:e6:e5:75:b5:30:97:28:aa:3d:e2:27:48:6a:
7c:cd:7b:a9:76:86:e9:7c:d4:8f:3f:2b:7c:48:99:4a:89:05:
b5:80:ec:c0:76:8f:f9:08:e4:29:fb:24:6e:65:cd:19:0c:a9:
09:0e:08:d4:ea:ec:84:b6:aa:50:a6:b1:01:9c:c4:fd:12:21:
11:47:eb:2e:61:44:8b:69:c4:17:19:7a:66:2d:0b:2b:e1:32:
2f:32:58:e6:0f:c5:be:7f:5f:99:fe:b1:cd:cb:b3:d1:8c:87:
58:26:db:d2:4d:ab:9f:d1:13:0b:6d:d4:aa:20:bc:e0:63:6b:
ca:54:52:e0:79:28:92:78:82:23:7f:f0:aa:7e:dc:64:25:76:
ce:ce:03:fa:49:39:30:a3:ab:cf:ae:f5:9b:af:9a:e7:de:b8:
75:90:cd:7f:58:32:2d:a8:a2:f3:c4:23:ed:92:19:e1:ec:12:
3a:80:13:71:c7:e3:c6:c2:77:53:63:0f:fd:1b:06:fa:22:68:
68:1b:0e:9a:e2:e4:61:c8:e9:9c:6f:59:86:ff:96:d8:ae:ac:
36:aa:64:18:71:4d:15:fb:e8:42:19:d0:1d:c4:f1:78:f6:72:
8a:a3:e8:bc:b9:ce:b6:74:bc:bf:8f:ff:88:b3:f9:4e:cb:25:
e4:15:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:03:59 2025 by rpki-client