Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/6CvazhQ-TchHGMOoGitdZcJhEs4.roa
File: 6CvazhQ-TchHGMOoGitdZcJhEs4.roa (raw, json)
Hash identifier: igPSm0jfypQMdE/eZVfZNp5wdbowi2Qa/IcHnzjteY4=
Subject key identifier: E8:2B:DA:CE:14:3E:4D:C8:47:18:C3:A8:1A:2B:5D:65:C2:61:12:CE
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 01982D7603EB04DEAA37D001C94C1B146473
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/6CvazhQ-TchHGMOoGitdZcJhEs4.roa
Signing time: Mon 21 Jul 2025 14:49:25 +0000
ROA not before: Mon 21 Jul 2025 14:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202803
IP address blocks: 185.154.44.0/22 maxlen: 24
185.154.44.0/23 maxlen: 23
185.154.46.0/23 maxlen: 23
193.138.120.0/23 maxlen: 23
193.138.120.0/24 maxlen: 24
193.138.121.0/24 maxlen: 24
2a0b:5ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2d:76:03:eb:04:de:aa:37:d0:01:c9:4c:1b:14:64:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Jul 21 14:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e82bdace143e4dc84718c3a81a2b5d65c26112ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:95:bf:8f:4f:25:4a:99:65:2d:3c:8c:9d:
3f:ca:c7:a9:80:d9:ad:e9:a9:cb:2b:c1:f2:b3:6b:
69:f1:c5:98:38:46:f7:d6:56:a0:3c:d3:52:b6:e8:
78:b4:fa:a5:60:e7:56:41:f1:d2:b1:ce:0e:57:7c:
d9:e9:41:e4:fc:69:60:fc:4e:72:f6:c7:c4:97:31:
56:f8:7c:2a:dc:07:35:8e:c7:04:83:32:f3:5f:4d:
af:66:4e:f4:2b:94:0e:6a:8f:b1:e3:8f:23:e1:38:
ff:44:8c:60:fd:42:4f:e7:b1:dd:a7:58:b9:e3:64:
d0:43:8c:e4:7f:ce:eb:c4:a0:b0:6e:a3:55:07:5e:
71:3f:b2:ac:19:16:be:fd:25:70:38:20:4b:16:95:
46:f2:fe:46:13:24:2a:6d:a2:2a:f6:32:38:d0:2a:
b2:a1:0d:13:19:aa:e9:fd:7b:9e:fb:53:cc:5f:98:
68:13:93:5a:b2:0c:82:04:22:c6:86:d6:6b:15:88:
d0:7b:18:24:ee:cf:55:71:ac:25:08:5e:b2:3a:b9:
21:cd:1d:f0:bf:70:f6:cd:00:2a:aa:e0:e9:17:be:
3e:bb:32:88:2a:d5:38:16:ef:72:f0:94:af:3c:16:
b5:35:1e:d9:11:31:92:e0:0c:4b:43:b8:72:64:ef:
47:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:DA:CE:14:3E:4D:C8:47:18:C3:A8:1A:2B:5D:65:C2:61:12:CE
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/6CvazhQ-TchHGMOoGitdZcJhEs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.44.0/22
193.138.120.0/23
IPv6:
2a0b:5ac0::/29
Signature Algorithm: sha256WithRSAEncryption
25:d8:6e:46:d3:70:53:bd:96:b3:27:8f:f4:a4:9b:e0:56:8b:
b4:9c:ff:5e:6d:a3:88:22:bd:04:61:83:25:65:7b:fb:a7:53:
2f:e9:c4:48:7d:dd:f5:62:3e:1c:64:1f:e9:b8:92:f1:63:5d:
0a:89:34:d8:ea:a6:be:3d:59:70:7c:42:28:b8:4f:d5:06:67:
59:a8:db:7d:02:b2:08:c5:21:f3:c8:a0:6b:4f:72:c3:ca:62:
a2:60:67:21:5e:7d:2b:66:81:e3:1b:66:73:09:33:68:ba:34:
e4:c9:c2:bd:f2:bf:f3:5f:74:05:19:45:a7:14:e1:54:b9:65:
a6:05:eb:e3:a3:10:f6:d6:d5:2a:4a:4c:49:b2:b7:15:48:aa:
84:35:c9:77:0f:c3:9b:17:aa:31:f6:1f:ba:32:ad:a8:8c:53:
c0:9f:ad:a3:1f:3a:b5:3a:13:58:e2:c3:cb:4a:25:15:c3:94:
8c:2d:bc:d9:6b:62:8d:97:bd:2c:3a:1f:15:24:dd:c9:16:91:
d0:d1:39:27:39:7c:66:55:db:ef:44:02:64:97:81:7f:ed:da:
a0:eb:ed:b8:b9:8d:2e:78:8d:b0:9f:08:0a:49:d4:57:05:1f:
f7:fc:f4:6f:41:9d:78:7f:31:aa:75:d1:62:4e:7c:c5:f7:52:
33:e5:27:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:28:14 2025 by rpki-client