Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RuuPI3EHSmxvDcwQ-CMzEPVt0DA.roa
File: RuuPI3EHSmxvDcwQ-CMzEPVt0DA.roa (raw, json)
Hash identifier: D8AOACnzSObpb0tuC2CWL9DWbnUiOkzBpof2Wkbw7pw=
Subject key identifier: 46:EB:8F:23:71:07:4A:6C:6F:0D:CC:10:F8:23:33:10:F5:6D:D0:30
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019673523A077ED4D11E1A1850266598FF20
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RuuPI3EHSmxvDcwQ-CMzEPVt0DA.roa
Signing time: Sat 26 Apr 2025 18:18:10 +0000
ROA not before: Sat 26 Apr 2025 18:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 87.229.22.0/24 maxlen: 24
87.229.79.0/24 maxlen: 24
87.229.80.0/23 maxlen: 24
87.229.108.0/24 maxlen: 24
87.229.110.0/24 maxlen: 24
87.229.112.0/24 maxlen: 24
87.229.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:52:3a:07:7e:d4:d1:1e:1a:18:50:26:65:98:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 26 18:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46eb8f2371074a6c6f0dcc10f8233310f56dd030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:22:53:1e:50:b8:30:b7:cc:6a:e8:8a:f0:
26:c6:4e:fa:6e:0b:75:ec:07:1c:52:26:0b:c8:83:
57:c1:f1:cb:a5:7b:68:cf:66:5e:a3:ca:0d:6f:48:
05:cf:ff:69:59:6f:b4:d7:a1:96:aa:fa:1c:a1:c0:
12:5d:92:75:f2:25:74:d7:78:5d:b5:af:dd:06:82:
19:3d:8d:37:77:c8:0b:dd:ee:40:34:56:3b:c1:7b:
35:f5:d3:ef:1b:cb:cc:73:5b:8d:88:99:1b:8f:98:
01:4a:04:fa:c4:c1:90:73:70:2a:ab:31:0b:ed:d4:
95:e4:1b:71:47:34:c7:45:e9:3c:b2:20:e9:37:6e:
56:80:56:9f:5e:92:be:71:4b:22:02:57:9b:10:e9:
06:25:9a:b5:48:c3:ec:be:10:06:8b:c9:1d:d9:5f:
0b:be:68:24:ae:d2:13:ac:fc:8f:97:f7:d4:17:af:
34:b8:7f:c9:57:d9:35:fb:aa:73:da:3c:80:59:e6:
17:b2:ae:a7:ac:ad:6d:60:d7:50:18:53:0d:58:7f:
e3:6b:46:c0:ca:c8:db:fa:01:b3:64:66:a5:b6:95:
4e:87:b9:78:ba:aa:97:44:5e:42:fc:ba:b2:e9:af:
af:99:5c:fc:a2:17:70:24:44:2a:35:c6:e8:1a:86:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:8F:23:71:07:4A:6C:6F:0D:CC:10:F8:23:33:10:F5:6D:D0:30
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/RuuPI3EHSmxvDcwQ-CMzEPVt0DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.22.0/24
87.229.79.0-87.229.81.255
87.229.108.0/24
87.229.110.0/24
87.229.112.0/24
87.229.124.0/24
Signature Algorithm: sha256WithRSAEncryption
00:56:ae:01:c9:56:07:08:d5:c4:e8:47:31:87:a4:ac:b4:c2:
33:5a:ab:88:24:0a:7c:26:9c:70:98:0c:00:ba:14:6f:f8:eb:
55:c8:d2:17:4b:87:68:de:2a:94:2b:79:c0:6d:4b:7e:d8:33:
2e:24:42:0a:45:7c:ae:62:48:32:f2:b2:f0:97:9a:5d:4b:d1:
81:48:21:71:da:2c:78:2e:89:f5:d7:54:48:61:79:e1:43:11:
9d:35:73:6e:b0:1e:24:f5:34:b1:2b:27:96:58:a4:dd:29:da:
f3:25:1c:36:a2:8c:8d:4f:0f:3a:12:e3:1f:89:30:6e:e0:29:
0c:4b:f9:80:f0:48:26:e8:78:33:23:82:f8:d5:89:28:14:33:
d7:a6:16:f2:56:e8:e4:de:19:a2:bb:f6:74:03:39:63:0f:eb:
fc:48:9e:e4:a9:96:c3:38:7d:fa:eb:63:bf:de:30:02:48:2b:
7a:6a:12:46:c2:62:a0:b9:e2:15:46:9d:03:49:42:43:e1:59:
cc:f3:1c:c4:2e:ea:f0:7e:6d:e5:9d:fc:1c:4e:ab:e5:49:9b:
32:97:1d:53:2d:ff:94:83:76:18:5f:18:65:58:fd:71:90:84:
c5:4a:34:af:24:f3:90:6a:90:29:d1:44:17:e5:f9:4c:3c:ba:
8c:2b:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:54:54 2025 by rpki-client