Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/AdqpF3Dwu6a54afRlnWWC-VT63I.roa
File: AdqpF3Dwu6a54afRlnWWC-VT63I.roa (raw, json)
Hash identifier: 5ld1yLPBnowEovELcVB+TGEAaAwsFcKRwk5yylxVIHQ=
Subject key identifier: 01:DA:A9:17:70:F0:BB:A6:B9:E1:A7:D1:96:75:96:0B:E5:53:EB:72
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 0196F7428917CCB04F122BE6EC599ECA22FE
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/AdqpF3Dwu6a54afRlnWWC-VT63I.roa
Signing time: Thu 22 May 2025 09:10:54 +0000
ROA not before: Thu 22 May 2025 09:10:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 84.37.0.0/23 maxlen: 24
84.37.6.0/23 maxlen: 24
84.37.18.0/23 maxlen: 24
84.37.26.0/23 maxlen: 24
84.37.30.0/23 maxlen: 24
84.37.56.0/23 maxlen: 24
84.37.60.0/23 maxlen: 24
84.37.72.0/21 maxlen: 24
84.37.76.0/23 maxlen: 24
84.37.88.0/23 maxlen: 24
84.37.92.0/23 maxlen: 24
84.37.96.0/23 maxlen: 24
84.37.100.0/23 maxlen: 24
84.37.128.0/23 maxlen: 24
84.37.142.0/23 maxlen: 24
84.37.152.0/23 maxlen: 24
84.37.156.0/23 maxlen: 24
84.37.160.0/23 maxlen: 24
84.37.164.0/23 maxlen: 24
84.37.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:42:89:17:cc:b0:4f:12:2b:e6:ec:59:9e:ca:22:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: May 22 09:10:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01daa91770f0bba6b9e1a7d19675960be553eb72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:85:a9:82:4b:8d:55:d8:0a:d9:e6:a5:90:
c6:97:3d:47:bb:72:28:02:39:07:0f:9a:33:e9:c7:
19:5d:80:04:a3:74:2c:c0:4a:dc:c7:fe:cd:1f:5d:
d5:b7:9c:c4:76:fe:f9:c5:a5:25:23:36:b4:b1:33:
18:83:1c:63:58:2f:aa:fe:0e:6b:98:b1:15:bc:97:
d2:0a:cd:12:b2:63:5e:93:86:9a:e8:87:e4:f8:16:
01:ff:40:73:8f:0e:54:89:e6:33:05:f1:82:00:0a:
92:7a:23:fc:9c:01:63:90:26:6a:c8:f1:7b:50:cf:
3f:46:cf:28:85:6b:26:e4:62:29:61:b7:bc:1b:48:
be:c6:7d:a7:ad:f7:26:b2:4e:85:40:5e:06:8f:49:
c5:93:5a:30:e2:a5:02:dc:6d:7b:7d:97:b5:40:90:
7e:15:5e:52:dc:a9:e8:4c:09:ea:31:c3:d5:0e:68:
cd:11:9c:f3:4a:4d:f6:ab:6c:b9:d8:9d:0e:d1:96:
60:ea:50:a1:76:04:fc:d8:25:5c:cf:39:ce:fd:d3:
86:24:7b:72:12:4c:80:05:41:2f:81:16:c7:b2:45:
02:1f:21:d0:06:44:1a:d4:b3:f8:da:af:c9:43:65:
d6:74:a0:cf:b8:69:ad:0d:3b:da:34:80:4b:90:c0:
f7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DA:A9:17:70:F0:BB:A6:B9:E1:A7:D1:96:75:96:0B:E5:53:EB:72
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/AdqpF3Dwu6a54afRlnWWC-VT63I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.37.0.0/23
84.37.6.0/23
84.37.18.0/23
84.37.26.0/23
84.37.30.0/23
84.37.56.0/23
84.37.60.0/23
84.37.72.0/21
84.37.88.0/23
84.37.92.0/23
84.37.96.0/23
84.37.100.0/23
84.37.128.0/23
84.37.142.0/23
84.37.152.0/23
84.37.156.0/23
84.37.160.0/23
84.37.164.0/23
84.37.172.0/23
Signature Algorithm: sha256WithRSAEncryption
17:83:c9:f5:fb:7a:1a:ef:35:14:d2:10:59:90:ea:d7:2c:5f:
f5:e4:b9:1b:38:e3:98:d5:f6:6a:88:3a:48:05:91:9c:b5:01:
bf:34:7b:23:0b:00:fd:b6:72:83:4d:d4:32:ba:50:ee:80:1d:
6c:09:c8:70:b0:52:6b:2b:8e:10:8d:e2:2c:7e:19:80:66:3f:
f9:89:44:83:4a:c9:73:c5:26:0e:d7:b3:44:15:3f:c3:09:65:
a2:07:23:fb:e0:66:eb:5a:e7:36:ba:80:2d:81:dd:37:33:9c:
3f:6b:30:d2:4b:41:b5:8d:34:ce:4e:ff:4c:ca:a2:9c:64:ad:
db:0b:06:7e:27:2c:b8:21:e4:03:f2:bb:19:26:07:4d:a0:48:
fe:26:97:5c:90:7e:f1:9a:b5:41:36:0d:61:1a:25:e7:b1:14:
0e:2b:95:78:19:97:07:7f:49:06:a1:28:21:19:01:08:8d:1d:
ce:56:64:21:34:aa:1b:6a:fa:c4:0f:78:81:67:c9:9d:08:37:
7b:2b:21:b3:18:6f:3b:6d:33:5d:f8:c6:52:cc:3d:8a:fb:c2:
dd:eb:8e:c0:dc:db:ff:0d:4d:0b:58:3d:42:08:f4:2c:a3:5a:
93:ff:82:b7:11:80:72:2d:02:f9:0e:cf:41:08:a4:fa:6a:90:
ea:52:05:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:49:18 2025 by rpki-client