Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/tey46OJVEFwZfsUTecWeOyFgW4c.roa
File: tey46OJVEFwZfsUTecWeOyFgW4c.roa (raw, json)
Hash identifier: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=
Subject key identifier: B5:EC:B8:E8:E2:55:10:5C:19:7E:C5:13:79:C5:9E:3B:21:60:5B:87
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 019762FD5100C06F90EAA93FF718836B8A5D
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/tey46OJVEFwZfsUTecWeOyFgW4c.roa
Signing time: Thu 12 Jun 2025 07:14:17 +0000
ROA not before: Thu 12 Jun 2025 07:14:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43312
IP address blocks: 195.38.8.0/23 maxlen: 23
2a0e:3304::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:fd:51:00:c0:6f:90:ea:a9:3f:f7:18:83:6b:8a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jun 12 07:14:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5ecb8e8e255105c197ec51379c59e3b21605b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:5d:cf:dc:29:99:dc:a2:16:fb:8b:4b:f7:
4d:12:3e:e3:1a:ee:e8:fe:d6:72:c2:1d:4b:be:4c:
35:c6:51:3b:e0:8e:dd:24:19:b8:cf:61:76:5a:92:
05:e4:76:05:0b:b5:55:fa:17:82:8e:18:72:a0:ea:
c4:a8:95:e8:d8:3a:7f:3c:86:5f:65:7d:b0:09:5c:
42:3e:69:60:9d:95:13:75:21:25:58:df:f0:7d:70:
11:ce:6d:57:d1:14:46:77:30:31:bb:bf:4e:e4:e4:
3c:6e:e4:d5:b3:21:e1:7b:f3:ef:78:89:d5:fa:26:
ac:0b:00:16:5e:9d:a1:5e:c5:37:42:0a:c9:b7:89:
3c:1e:46:26:1d:f3:d9:ff:9e:cc:cf:b7:a1:30:65:
9e:a2:31:ef:e5:26:b4:b9:aa:f9:6d:44:21:cc:82:
d6:4d:26:b5:d5:c4:c2:b5:45:e2:b4:92:c0:53:2a:
bb:5c:3b:98:09:e0:d4:d9:5c:a3:fe:92:15:df:f4:
85:9f:53:ca:d6:25:a2:82:84:70:0e:57:11:bb:97:
ce:68:db:84:de:31:f8:8f:85:6c:b4:e6:d1:a5:e4:
f1:58:25:a3:3f:cb:5d:c5:5b:2b:f7:6d:6b:e3:9c:
cc:54:d4:24:dc:55:f2:f5:08:44:57:b3:17:3b:d1:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:B8:E8:E2:55:10:5C:19:7E:C5:13:79:C5:9E:3B:21:60:5B:87
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/tey46OJVEFwZfsUTecWeOyFgW4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.38.8.0/23
IPv6:
2a0e:3304::/32
Signature Algorithm: sha256WithRSAEncryption
92:ec:25:74:2e:77:59:db:65:0f:98:5b:54:fd:9d:e6:8e:3c:
0b:c0:6e:0e:b2:b0:9a:e6:ac:80:13:4e:dd:99:20:8d:e6:b7:
65:d5:1d:65:67:34:1c:31:aa:67:62:c5:e0:a3:1d:df:ea:16:
da:4f:c6:94:36:3f:4a:83:fe:67:8f:80:2f:03:c9:71:3e:4e:
a6:4d:c3:77:4e:81:d3:96:46:5c:41:d7:70:b3:2a:da:de:af:
57:f2:d3:d5:1d:7c:7a:6b:50:43:e5:b1:64:7c:dc:4e:7d:5a:
b8:5e:e9:00:ac:c7:ba:ae:10:9f:32:21:4e:f3:26:89:6a:eb:
f5:7a:c6:c8:ee:12:45:f0:a4:5c:be:46:99:72:f5:37:20:49:
fc:19:d9:6b:a8:9d:fa:01:35:2f:e0:bf:d3:f7:c2:19:3f:33:
76:b4:2f:95:ee:50:cc:00:d3:cc:ee:f0:70:71:4d:2f:19:a5:
b6:29:54:87:e7:db:39:ff:72:74:b1:b4:96:8a:16:10:14:f4:
dc:c7:29:ea:23:c6:23:90:f6:ea:c3:f8:c3:04:b9:c7:34:33:
f7:41:04:5c:90:62:2d:c6:10:34:67:c2:f3:76:52:86:ab:bf:
81:39:a8:17:b4:ce:ea:0a:2b:7c:72:37:79:0a:b9:11:56:05:
1c:7b:ba:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:33:42 2025 by rpki-client