Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/b73ddOLLjPYnTz9o7yYL4kMMo3U.roa
File: b73ddOLLjPYnTz9o7yYL4kMMo3U.roa (raw, json)
Hash identifier: Vc85I6rYToAbWM15WR5pMloHamrCwTA2NvWFqIsFGlk=
Subject key identifier: 6F:BD:DD:74:E2:CB:8C:F6:27:4F:3F:68:EF:26:0B:E2:43:0C:A3:75
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 019864A4A6D64331E50D52A1F75BB727187F
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/b73ddOLLjPYnTz9o7yYL4kMMo3U.roa
Signing time: Fri 01 Aug 2025 07:59:28 +0000
ROA not before: Fri 01 Aug 2025 07:59:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202067
IP address blocks: 185.225.156.0/24 maxlen: 24
185.225.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:64:a4:a6:d6:43:31:e5:0d:52:a1:f7:5b:b7:27:18:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Aug 1 07:59:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fbddd74e2cb8cf6274f3f68ef260be2430ca375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:4b:e6:26:22:f5:95:3e:48:29:7f:52:8d:
b9:e9:0e:5f:11:ab:ec:ad:02:ee:30:c5:f2:bd:fb:
59:02:aa:de:f5:2f:60:26:35:94:4c:cf:f2:df:c7:
a5:ef:1f:6d:c1:13:c9:6a:a4:7b:8a:bb:9a:08:53:
67:28:3d:52:a4:07:85:0c:df:f9:0f:80:2f:bb:d4:
ca:a8:88:40:c2:52:74:b4:53:27:92:66:37:0e:fb:
0e:7b:e2:1d:40:d3:bf:0a:4a:e7:41:97:dc:57:5a:
d0:c5:c2:c9:e5:b2:12:d4:5c:ec:75:de:1f:74:f0:
8b:f8:2b:b0:21:cb:45:7f:b6:8d:36:1f:d3:3e:ac:
78:46:6d:bf:33:34:3e:81:c8:b9:18:32:20:d9:a3:
f9:c7:09:91:a9:ec:8e:c8:85:69:2a:65:16:ab:d1:
96:ac:6d:9e:5c:f2:bb:38:21:8d:fd:d7:38:b0:1a:
51:fc:f3:cf:52:c5:76:90:34:c5:03:63:7a:9f:59:
5d:3a:fe:60:09:84:ac:ec:9b:b0:69:ee:ff:43:44:
71:82:d0:02:6a:25:8c:6c:56:78:c5:34:24:45:7c:
79:62:ba:f9:a0:27:3f:7c:9d:7f:9d:ee:55:70:1e:
84:25:83:6c:57:d1:f2:2d:9a:b2:23:bf:03:bb:46:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:DD:74:E2:CB:8C:F6:27:4F:3F:68:EF:26:0B:E2:43:0C:A3:75
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/b73ddOLLjPYnTz9o7yYL4kMMo3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:fe:fd:c8:2b:e5:95:08:e8:22:d8:91:cb:65:f2:93:10:46:
3f:1e:11:0e:46:ab:1b:dc:45:75:6a:a3:46:8d:a9:85:ee:d5:
46:d9:ff:26:13:2d:2e:0e:fb:2a:67:61:a6:d0:f5:96:ad:f6:
c7:4f:00:16:86:ae:85:04:c1:6a:df:90:0b:9c:a9:d1:79:bd:
bd:c9:f0:78:81:d4:72:33:23:5a:fa:5f:13:ae:4f:e3:c5:07:
d9:cb:f9:dc:cf:df:2d:aa:43:40:6a:cd:a0:00:ed:a7:16:95:
9b:26:e7:e4:3e:66:74:44:87:a3:a3:1d:ef:81:42:82:e3:d0:
d6:0c:b8:97:ac:49:0d:d0:3b:d7:c6:3a:f3:ae:56:de:a1:7a:
f7:6d:fb:5c:7e:59:37:7c:f3:89:42:0e:40:97:7e:ae:14:37:
2c:09:4f:c6:4f:8d:42:cb:54:8f:ee:cb:dd:77:f6:07:93:a8:
bc:aa:68:3d:02:0a:12:f6:be:56:47:64:d0:a7:2e:1b:59:35:
50:97:2e:d2:07:83:4f:c2:0d:76:63:6e:9d:10:39:c7:a9:f5:
b5:34:1f:4d:81:2e:25:3d:ca:df:cf:fa:b2:92:35:26:48:fe:
22:ce:f6:74:f5:15:36:c2:40:de:24:88:06:ad:8e:0e:86:d1:
c1:d1:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:20 2025 by rpki-client