Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/xxqCx37JLUWUR31pko069v456UU.roa
File: xxqCx37JLUWUR31pko069v456UU.roa (raw, json)
Hash identifier: L1ZlIE3AnzOZtFMOB0UCGap8DUCRTtFTBrhRz/A4CnI=
Subject key identifier: C7:1A:82:C7:7E:C9:2D:45:94:47:7D:69:92:8D:3A:F6:FE:39:E9:45
Certificate issuer: /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial: 01970B6FF2967946FA033AB56BF72AD02312
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/xxqCx37JLUWUR31pko069v456UU.roa
Signing time: Mon 26 May 2025 07:12:55 +0000
ROA not before: Mon 26 May 2025 07:12:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57568
IP address blocks: 185.204.168.0/22 maxlen: 24
185.235.40.0/22 maxlen: 24
193.24.119.0/24 maxlen: 24
194.5.192.0/23 maxlen: 24
194.5.206.0/23 maxlen: 24
2a0f:94c0:100::/40 maxlen: 40
2a0f:94c0:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:6f:f2:96:79:46:fa:03:3a:b5:6b:f7:2a:d0:23:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Validity
Not Before: May 26 07:12:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c71a82c77ec92d4594477d69928d3af6fe39e945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b5:45:8b:fb:55:48:28:fa:e4:4d:1e:f9:25:
8a:3a:fb:f0:ab:b8:f4:98:b9:18:89:5c:f4:7c:92:
69:bd:84:11:4c:61:7f:35:01:5c:e6:dc:19:99:e2:
f9:f7:b1:06:33:34:32:db:f1:76:9b:ce:0b:94:5e:
cd:72:7b:97:fd:7f:27:70:29:6a:07:7a:eb:d6:52:
4b:d1:f2:0b:f4:1e:9a:9d:16:54:44:98:30:01:d6:
01:d2:28:5c:18:1f:56:d9:d3:2d:29:f0:26:96:28:
5b:b0:a7:27:ff:50:11:50:f8:5d:43:6b:95:41:98:
a2:0a:07:13:75:6d:a9:9d:f8:55:1c:3d:8e:b6:24:
46:d6:43:36:f6:ca:bc:74:67:76:d4:f1:37:3e:4d:
fb:a1:a5:ef:97:fe:4f:65:92:f2:41:ad:6b:85:c6:
1e:c6:72:6e:a6:c5:41:91:31:4b:b6:cf:2f:e0:0e:
04:f5:c6:f9:27:14:4e:b7:57:77:a4:59:f1:d3:58:
0c:2b:5d:0d:29:3a:49:bb:bb:3b:79:b0:c7:ad:a4:
8a:2d:dc:a6:9a:d1:7b:57:32:2d:3f:9b:a4:ff:57:
fe:d3:61:00:14:d1:9f:13:4d:f7:65:8f:9b:81:86:
90:8d:a3:08:ed:01:d6:e3:be:79:a8:50:ba:b3:29:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1A:82:C7:7E:C9:2D:45:94:47:7D:69:92:8D:3A:F6:FE:39:E9:45
X509v3 Authority Key Identifier:
keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/xxqCx37JLUWUR31pko069v456UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.168.0/22
185.235.40.0/22
193.24.119.0/24
194.5.192.0/23
194.5.206.0/23
IPv6:
2a0f:94c0:100::-2a0f:94c0:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b0:3b:87:5c:e4:9e:9d:67:d7:41:93:37:be:a8:37:4b:d7:5c:
58:c9:de:46:aa:3c:de:6f:dd:9c:e1:1c:e5:4a:ca:4c:42:6f:
a6:78:8d:e9:db:7c:da:38:14:8d:17:78:99:ef:7a:6b:fc:8f:
46:5e:19:b7:00:13:ba:56:d1:b3:60:fa:03:13:0c:9b:5f:d4:
06:3f:0d:d8:ee:bd:d0:41:94:3e:79:74:f8:94:3a:01:4e:74:
a4:9c:c8:31:63:89:20:f7:47:4f:df:9f:f5:5b:bf:d8:55:bf:
96:01:04:8e:25:23:31:c4:87:44:a9:c3:30:41:a1:5c:95:0c:
79:37:6f:26:ad:ee:13:0f:38:2d:dd:a3:39:62:b6:b4:62:5e:
36:f4:9e:b0:8d:e4:85:fd:68:24:ce:1e:b7:fa:3a:47:56:84:
b5:52:ae:55:56:12:eb:3f:a9:a7:c0:0f:bc:e0:ac:f8:ff:89:
3c:04:c2:eb:d8:1b:f5:be:ff:98:af:5d:31:00:32:ee:15:92:
89:e8:ef:6a:51:8b:78:6c:b1:58:4c:1b:88:ac:d1:59:13:8b:
1c:bf:6f:cf:e7:69:93:16:07:ce:d7:a1:d2:fe:5a:3d:07:2a:
35:fa:32:19:62:00:7d:31:bb:27:50:61:ca:a1:63:ff:1f:61:
32:24:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:24:23 2025 by rpki-client