Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/asZYZZm3WYCs5ktccfPHWrGuybg.roa
File: asZYZZm3WYCs5ktccfPHWrGuybg.roa (raw, json)
Hash identifier: 1TYGNUIks+DPn0hL9JN3WJeP9OVeq11hJRFPvZF68vA=
Subject key identifier: 6A:C6:58:65:99:B7:59:80:AC:E6:4B:5C:71:F3:C7:5A:B1:AE:C9:B8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01975E30ADFA031CFF6021BB9B30ABD912CA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/asZYZZm3WYCs5ktccfPHWrGuybg.roa
Signing time: Wed 11 Jun 2025 08:52:17 +0000
ROA not before: Wed 11 Jun 2025 08:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198568
IP address blocks: 193.235.148.0/22 maxlen: 22
194.132.5.0/24 maxlen: 24
194.132.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:30:ad:fa:03:1c:ff:60:21:bb:9b:30:ab:d9:12:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 11 08:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ac6586599b75980ace64b5c71f3c75ab1aec9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:e4:55:60:09:3b:8d:05:0b:48:ef:9e:67:
09:4f:3c:6d:1b:c9:b7:34:02:dd:6f:f3:ec:42:f6:
45:7f:b9:77:ad:0c:ab:71:63:02:70:3d:13:fb:11:
f0:bd:9a:63:5e:39:bd:dd:59:61:15:89:c3:5c:fb:
23:ab:4c:f0:1b:01:12:0d:13:a6:34:65:55:df:92:
3c:7a:3e:f0:18:d1:c7:a7:90:d9:58:52:2b:cc:98:
e8:ea:81:c2:21:74:a2:d7:c0:bb:f1:da:1f:6a:ca:
16:1c:45:09:3c:00:57:14:e9:1b:01:99:b5:c9:c6:
a9:b5:9a:24:33:1f:45:48:11:a4:23:5c:f2:ec:4f:
65:48:cb:68:08:37:02:d3:c3:92:49:a2:bf:da:7f:
61:e0:e5:25:73:61:3e:cf:a7:4d:b4:04:12:fd:ab:
98:1a:89:bb:10:36:59:c1:95:57:8a:ec:a4:c3:a4:
b6:93:f4:6b:d0:55:a1:6e:c4:36:ed:44:40:0f:12:
a8:bf:67:b0:ea:46:2b:c9:2f:2c:97:d8:a7:02:fc:
94:84:da:68:fb:28:8e:29:b0:ab:03:c7:76:ee:3d:
90:38:63:8a:00:c3:0f:50:3e:90:c9:38:96:97:79:
63:b3:86:15:b0:57:42:45:69:f9:4d:97:26:07:21:
6a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C6:58:65:99:B7:59:80:AC:E6:4B:5C:71:F3:C7:5A:B1:AE:C9:B8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/asZYZZm3WYCs5ktccfPHWrGuybg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.148.0/22
194.132.5.0-194.132.6.255
Signature Algorithm: sha256WithRSAEncryption
3b:9e:50:a0:95:11:54:9e:fe:29:f1:5c:cb:d8:bf:84:e9:40:
7d:4f:0a:d1:57:d6:33:fc:57:e8:8e:58:27:c6:4e:69:dd:8d:
0d:2d:49:4b:b1:be:93:d9:2f:4b:0e:73:a8:07:2f:45:1f:40:
41:15:50:6f:db:98:a8:87:9b:df:ee:e8:ab:4a:e9:24:6c:fa:
e6:e2:68:f9:4b:2f:0c:47:10:f2:69:8a:7d:a1:6e:ca:96:d5:
45:6a:b6:cf:fe:a0:34:f9:77:f5:f9:ba:6d:9f:5e:4b:28:7b:
01:88:69:a5:02:45:83:ff:44:7c:c6:68:80:7e:09:02:4f:3d:
8d:1f:cf:94:5e:ba:3b:5e:95:e6:ca:6a:41:ec:b4:f1:69:94:
ce:b4:fb:da:dc:8d:d3:d3:66:a9:d1:a3:03:53:30:0f:98:98:
0c:da:38:10:fa:83:16:ad:68:7a:58:27:2b:0b:01:c6:1b:cf:
05:dd:9b:a2:72:b9:b9:a5:73:0d:09:5c:27:4b:99:ff:e4:2d:
aa:a5:a1:3c:4e:02:6c:10:f7:57:1d:be:e5:8f:1e:ff:4e:1c:
7e:12:5a:46:f7:70:3b:59:11:86:a8:f6:d3:22:46:be:8d:df:
e2:cb:11:ad:5b:01:92:e8:cc:01:f9:13:83:33:c0:6b:ab:4f:
d5:a3:b3:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:38 2025 by rpki-client