Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/ke7Pxta8VpaoIZehaqEkUOxJVjY.roa
File: ke7Pxta8VpaoIZehaqEkUOxJVjY.roa (raw, json)
Hash identifier: /w8HaARGeZYUDrzIiinqB3uzBNqHoroNWtdxiuibk3g=
Subject key identifier: 91:EE:CF:C6:D6:BC:56:96:A8:21:97:A1:6A:A1:24:50:EC:49:56:36
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 01975A33DDA46391DAF50B01CDCEF4DC4A9B
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/ke7Pxta8VpaoIZehaqEkUOxJVjY.roa
Signing time: Tue 10 Jun 2025 14:17:17 +0000
ROA not before: Tue 10 Jun 2025 14:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61976
IP address blocks: 79.141.64.0/20 maxlen: 24
79.141.64.0/24 maxlen: 24
79.141.65.0/24 maxlen: 24
79.141.66.0/24 maxlen: 24
92.242.62.0/23 maxlen: 23
92.255.62.0/23 maxlen: 24
185.42.164.0/22 maxlen: 24
185.193.90.0/23 maxlen: 24
2a00:ab00:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:33:dd:a4:63:91:da:f5:0b:01:cd:ce:f4:dc:4a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jun 10 14:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91eecfc6d6bc5696a82197a16aa12450ec495636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:13:82:21:15:02:e0:38:6c:98:2a:da:83:
80:24:ef:e8:a3:60:48:89:2a:fe:bc:5c:0e:9a:d6:
10:7d:a5:a4:37:45:01:8b:f8:e5:e0:4c:73:44:21:
c2:91:24:d4:ee:c2:37:cf:b5:0f:21:9b:28:8f:15:
40:aa:e2:bb:2a:eb:e1:6a:b5:d8:8d:42:7e:26:b1:
f6:a2:e8:16:92:83:c7:6b:5c:fb:d3:28:27:d8:33:
47:97:2b:16:1f:f2:98:d4:ee:4a:d3:41:ef:ba:76:
e0:e6:a6:36:0e:7d:89:d0:9c:9a:3a:b6:3b:1b:f4:
da:66:a2:a6:f6:f7:04:c1:ad:eb:88:1e:a9:2c:34:
73:ab:f3:be:25:7d:71:96:20:5d:f2:0d:28:57:79:
3d:46:f1:dc:0f:b2:55:88:25:b1:69:5a:4f:90:4e:
88:b4:0c:7f:cb:65:22:cb:b0:02:41:90:36:dc:78:
eb:7e:3b:40:a7:51:71:ef:c1:6b:10:3d:14:36:7f:
26:57:93:b8:d7:ae:d9:15:8b:7d:b0:ad:40:95:78:
c9:b3:81:44:99:3e:d5:36:5e:50:5c:dd:8b:d9:f2:
2b:2c:4a:86:84:e5:a3:01:3f:cc:9e:e2:ae:95:e8:
43:d7:2e:df:82:33:4b:dd:8f:46:1f:f7:a2:a8:05:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:CF:C6:D6:BC:56:96:A8:21:97:A1:6A:A1:24:50:EC:49:56:36
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/ke7Pxta8VpaoIZehaqEkUOxJVjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.64.0/20
92.242.62.0/23
92.255.62.0/23
185.42.164.0/22
185.193.90.0/23
IPv6:
2a00:ab00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
9e:3e:d6:01:37:15:84:4e:0a:a2:39:73:04:ab:45:7d:0b:57:
1a:89:fd:7f:ca:e4:29:f4:36:6d:74:5a:36:69:af:c8:9c:4f:
44:6d:08:82:6d:fb:9b:3f:11:dd:9f:2b:ec:f0:4b:76:94:73:
da:8c:80:f0:27:24:70:ca:46:47:8c:0c:d6:9c:24:4e:81:0c:
9c:d4:15:86:31:71:c2:3f:6b:f6:20:f6:dc:86:fd:e6:5a:b5:
bb:b1:67:88:5d:98:c5:e6:83:77:1c:67:05:e6:02:8a:b5:ab:
76:b2:4e:88:af:70:cd:98:96:c5:4a:08:db:13:7f:c4:4d:14:
62:70:6c:5f:b3:97:7a:3a:b3:c8:fd:14:6f:7e:d6:70:1e:87:
cb:27:7f:c9:0c:e7:31:60:96:53:4a:ab:b6:38:17:b2:7c:c6:
10:3a:93:69:32:05:60:8f:ef:fe:0d:19:ed:83:aa:d4:c2:a3:
43:b0:39:e1:2b:a6:48:26:67:ff:42:83:61:ae:c8:00:b5:90:
6d:91:7f:3c:0e:78:78:3a:12:0c:63:2b:6d:1f:39:93:a2:91:
8b:94:49:f8:18:58:20:4b:28:4b:a5:9a:f3:64:08:8d:a1:66:
4c:dd:9c:4e:fa:e2:25:f7:75:cc:f5:cc:d0:2a:18:b2:a9:67:
62:bb:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:34:52 2025 by rpki-client