Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_6oTHI74z2ro3D6ku1-3IwQMDJQ.roa
File: _6oTHI74z2ro3D6ku1-3IwQMDJQ.roa (raw, json)
Hash identifier: fv1LSUSBqvzluFwHlLJLOy0RtBrtwPS/3BKDLVcgGlw=
Subject key identifier: FF:AA:13:1C:8E:F8:CF:6A:E8:DC:3E:A4:BB:5F:B7:23:04:0C:0C:94
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 0198758B6FEC400AB26429DEC178E0D8C6B7
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_6oTHI74z2ro3D6ku1-3IwQMDJQ.roa
Signing time: Mon 04 Aug 2025 14:45:28 +0000
ROA not before: Mon 04 Aug 2025 14:45:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200191
IP address blocks: 185.21.184.0/24 maxlen: 24
185.21.185.0/24 maxlen: 24
185.21.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:8b:6f:ec:40:0a:b2:64:29:de:c1:78:e0:d8:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Aug 4 14:45:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffaa131c8ef8cf6ae8dc3ea4bb5fb723040c0c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:03:b4:1d:33:e1:b6:06:1d:c9:8d:2d:8e:
7b:5f:e0:94:d8:e8:27:61:8c:86:c4:f0:25:c4:dd:
64:a4:12:ba:67:bd:61:1c:d5:d7:20:ae:31:8c:7c:
e8:c7:a2:ab:e7:8a:fa:bb:d3:0d:fd:8d:b1:54:e3:
bf:af:0b:e7:44:ec:5f:77:57:bf:84:7c:b5:78:dc:
e4:44:e9:68:45:63:13:f5:0c:fd:d9:26:64:21:19:
76:d0:e2:6b:8e:e5:38:e1:7b:ff:a8:19:31:f1:2f:
f5:b6:36:7d:d6:f9:65:ee:ce:9c:2b:7b:fa:94:f4:
a4:44:5d:7d:49:4b:ed:e6:31:d1:29:2d:1a:e5:d5:
09:21:ed:45:01:ef:7f:c3:01:e3:fb:be:a9:65:e0:
39:0f:15:22:eb:a4:b0:05:6b:3c:d0:dd:88:00:df:
f8:47:ba:9c:9a:14:1a:ff:a6:7f:5c:03:6a:b0:d5:
7b:47:21:12:11:65:38:e8:d0:1e:23:08:e4:86:01:
92:57:9b:b7:41:4f:1e:79:d4:7b:37:90:7d:36:20:
bc:7d:23:01:61:a2:a1:67:f5:8a:d4:5d:8a:58:e7:
f1:ae:ea:c8:3a:e1:2c:3a:5a:9d:04:d6:e0:5f:c2:
85:4a:dc:63:f0:e7:89:29:6d:7a:e9:48:ef:de:d2:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AA:13:1C:8E:F8:CF:6A:E8:DC:3E:A4:BB:5F:B7:23:04:0C:0C:94
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_6oTHI74z2ro3D6ku1-3IwQMDJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.21.184.0-185.21.186.255
Signature Algorithm: sha256WithRSAEncryption
3f:96:b9:b5:1d:1c:af:62:2e:6f:9f:3a:ed:46:96:0f:37:76:
0b:94:8e:a8:cb:73:33:3a:2a:b0:d6:93:03:7f:3f:c3:97:5d:
74:2b:7f:d0:ec:9c:c6:0a:b2:cd:1b:e1:8a:d3:24:16:82:5a:
df:83:98:82:b8:bf:ce:e8:aa:6b:81:f5:39:47:25:4f:50:ce:
04:98:cf:8a:24:50:73:42:18:73:b9:64:5d:81:96:83:e4:c7:
f9:44:94:d4:68:92:43:a4:72:26:70:75:a8:ba:2d:9a:c1:79:
ec:1e:d3:c7:c9:37:4e:78:e3:cb:f5:3f:b8:eb:b9:fa:44:5d:
de:c2:44:4f:28:61:46:d6:23:86:51:60:f0:b1:f9:71:0c:55:
26:d8:fd:e4:ec:35:70:53:6e:08:9b:83:4d:8d:d8:ab:51:5f:
41:82:5e:84:75:1d:69:6d:14:21:2d:42:56:1d:5a:72:e5:ff:
93:61:ec:bb:51:77:78:9b:25:43:00:04:65:d4:4b:0a:23:4d:
a1:3b:0a:d7:6b:be:1e:02:b7:06:f4:48:2c:0c:88:f2:8a:47:
e0:88:08:7c:be:7a:d8:05:ee:e0:a3:f7:bb:f8:7e:6f:7a:37:
c0:0f:37:52:e7:20:a4:77:00:c3:32:6c:4d:0d:0c:17:d4:54:
86:ae:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:47 2025 by rpki-client