Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa
File: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (raw, json)
Hash identifier: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=
Subject key identifier: 59:1C:3F:CD:0D:9E:82:2F:AC:EE:0F:D7:0D:AD:FE:CC:2C:E6:09:9A
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019769EC85A5EEBBE43C600E44F8B1F0AB07
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa
Signing time: Fri 13 Jun 2025 15:33:17 +0000
ROA not before: Fri 13 Jun 2025 15:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199789
IP address blocks: 185.60.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ec:85:a5:ee:bb:e4:3c:60:0e:44:f8:b1:f0:ab:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Jun 13 15:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=591c3fcd0d9e822facee0fd70dadfecc2ce6099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:a2:b5:9f:64:f6:9e:32:88:ca:56:f8:23:
5c:04:e1:96:d9:86:64:d6:d4:67:00:26:40:7e:b8:
06:74:56:55:14:75:89:79:f4:89:34:29:b8:91:1a:
32:9a:af:81:dd:2a:d5:cf:81:40:2d:cc:ed:43:bd:
a6:86:71:a0:4e:5f:c1:9c:6a:f7:e5:a8:36:4c:84:
fc:7d:2a:bf:38:f1:40:31:56:b2:8b:bc:59:c4:51:
76:b0:e4:2d:4f:7b:4c:05:67:d1:9f:e3:7a:1f:b2:
e6:26:2a:9e:e6:64:c9:26:71:ae:6c:d1:c7:73:4d:
fe:5f:d0:9c:8b:fa:f3:de:cf:1d:b2:b5:4b:21:a5:
59:b1:a3:d5:63:cf:b3:fb:7b:bb:6d:2e:0a:11:82:
de:f6:51:0f:cf:49:ab:e0:1e:65:46:44:9f:92:f1:
ab:7e:eb:85:0f:ce:6e:fb:12:ae:84:0e:a6:8e:26:
a4:70:f3:ad:34:6b:c6:b6:df:99:07:70:8f:db:46:
f8:eb:69:42:27:78:19:30:e8:ee:41:cb:1a:74:30:
55:e7:cb:fe:f0:9b:5a:14:30:97:88:2b:74:8c:ae:
32:1e:24:12:a4:6a:9e:7c:02:7e:18:cb:0f:27:f5:
77:48:44:a2:fb:b9:89:3f:0f:59:c8:ab:5c:80:cb:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:3F:CD:0D:9E:82:2F:AC:EE:0F:D7:0D:AD:FE:CC:2C:E6:09:9A
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.74.0/24
Signature Algorithm: sha256WithRSAEncryption
f4:b9:23:90:8b:e5:04:87:20:ae:ec:13:ee:74:a5:33:3d:6b:
cf:be:68:b2:94:d3:53:3d:6c:ef:71:7d:fc:0b:f2:f1:53:a4:
91:87:b8:01:25:0f:f1:9f:f8:87:f5:90:1a:60:5d:e5:db:df:
b2:d0:c2:99:02:8f:6b:3d:f0:16:1b:d4:42:c0:d8:0e:88:e6:
72:f5:19:3e:56:6c:c2:2a:64:07:03:f4:03:86:bc:54:4e:f6:
83:c9:33:dd:84:04:1d:ce:94:6c:4d:c1:71:a5:6b:f6:3c:d8:
ad:42:19:e1:b1:53:69:ff:c2:11:6d:b5:6c:46:35:6b:ee:00:
c3:d2:30:01:86:0f:e2:82:48:0b:9e:e5:c6:65:53:c4:55:c1:
8d:a3:27:73:ee:53:0a:2f:9d:a2:6f:bf:4d:a7:d9:ec:bb:f8:
02:59:32:51:6c:0d:c7:b1:5a:53:49:b3:05:b9:be:e5:60:41:
6d:fd:14:9d:c0:f7:25:f2:55:04:6b:a7:b9:f8:61:68:61:42:
ad:0c:8c:17:0a:b2:90:b7:9d:75:63:5c:35:6b:cc:47:0d:0e:
87:99:55:da:ea:a2:fa:19:1b:bb:8e:3f:a0:33:1e:ea:dd:f3:
c5:a9:39:ae:ef:ac:29:f6:93:cc:c1:43:74:65:fd:85:48:d6:
55:2f:fe:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:49 2025 by rpki-client