Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/p96GHk0OQlbK3_guMxYIgfEgqkQ.roa
File: p96GHk0OQlbK3_guMxYIgfEgqkQ.roa (raw, json)
Hash identifier: NLGJ0dT4sru3lzXBmBNcFTNXezy7QjsSc92C97+9nWo=
Subject key identifier: A7:DE:86:1E:4D:0E:42:56:CA:DF:F8:2E:33:16:08:81:F1:20:AA:44
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 019855FDBC971B3395A097E7DC03980B2C78
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/p96GHk0OQlbK3_guMxYIgfEgqkQ.roa
Signing time: Tue 29 Jul 2025 11:42:28 +0000
ROA not before: Tue 29 Jul 2025 11:42:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212219
IP address blocks: 80.253.246.0/24 maxlen: 24
91.151.88.0/24 maxlen: 24
91.151.89.0/24 maxlen: 24
91.151.95.0/24 maxlen: 24
212.108.107.0/24 maxlen: 24
213.142.148.0/24 maxlen: 24
213.142.151.0/24 maxlen: 24
213.142.159.0/24 maxlen: 24
2a0f:bf00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:fd:bc:97:1b:33:95:a0:97:e7:dc:03:98:0b:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Jul 29 11:42:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7de861e4d0e4256cadff82e33160881f120aa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:d3:01:f3:fa:c1:2d:ce:99:cc:55:63:00:
0b:88:de:9a:d2:ef:ad:f8:fd:4e:86:20:bf:3d:73:
b4:50:5d:4b:13:c9:72:8e:0e:40:56:70:8f:15:b5:
1c:c3:82:b2:88:92:60:3b:ac:32:7e:db:0e:ee:0a:
8d:68:35:e3:ba:43:7d:97:63:5d:24:0e:01:75:6d:
31:ef:d7:ca:62:f3:73:6c:2f:0d:dd:e3:b9:07:e2:
78:70:d6:b0:12:9d:d2:be:e8:c1:78:eb:cf:0b:82:
9c:ea:cd:9c:d8:95:a8:31:77:98:77:fa:f6:2e:e1:
4a:f1:f4:4a:11:0b:53:4a:7b:ea:c6:e2:26:e1:eb:
e3:e3:b7:5c:e9:3b:4d:6b:99:d3:61:d9:3c:c2:9c:
0b:7a:ce:67:dd:7b:4a:21:35:36:4b:74:88:f2:62:
e9:6d:37:cd:2b:e6:81:29:f8:41:14:90:32:2e:55:
17:4d:54:78:92:da:6c:8a:98:2d:28:a1:f9:c8:ed:
29:bc:07:3b:ab:4b:ae:b0:ad:7a:b4:1a:6e:a5:af:
02:41:3a:15:02:57:26:ea:43:1c:37:a1:24:86:8b:
8e:09:b6:44:8c:f2:63:80:47:60:ba:ef:b8:e6:08:
af:3a:65:8e:0f:47:b6:de:7e:33:e0:20:10:11:22:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DE:86:1E:4D:0E:42:56:CA:DF:F8:2E:33:16:08:81:F1:20:AA:44
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/p96GHk0OQlbK3_guMxYIgfEgqkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.246.0/24
91.151.88.0/23
91.151.95.0/24
212.108.107.0/24
213.142.148.0/24
213.142.151.0/24
213.142.159.0/24
IPv6:
2a0f:bf00::/29
Signature Algorithm: sha256WithRSAEncryption
2b:65:a6:34:07:17:a2:a1:f9:12:ec:26:e9:7f:62:fe:4a:a2:
41:31:9d:a2:58:3b:a4:cf:07:1f:12:27:32:a2:7f:5b:ff:44:
04:fe:3d:2f:ea:15:b5:6d:89:6c:f6:6e:7d:44:de:b1:82:e9:
8b:8a:95:a7:08:0f:5b:9a:69:d4:66:a6:4c:e7:69:72:17:5b:
a5:a1:e8:3a:1e:1b:59:65:14:7c:6b:fc:48:8a:ba:d0:86:a1:
89:37:9d:c6:c4:b8:47:9c:99:3a:b1:c5:c5:3b:fb:e7:c9:16:
cd:80:d8:6c:1c:e7:b4:ee:ec:eb:4c:79:2c:8b:a1:74:69:9b:
95:e6:b1:af:08:e5:1e:72:88:20:94:b7:e5:11:79:b6:74:3a:
fa:82:45:36:ee:20:aa:a0:d0:3a:e6:0e:ad:74:f6:16:4c:b4:
b0:48:2c:bd:3d:47:e9:e6:57:51:89:cb:e9:e7:fa:cd:d2:a0:
4d:59:a2:ad:ba:cd:76:0c:05:ac:ba:7d:47:51:9c:28:b5:57:
be:66:99:23:91:a3:a1:7d:67:80:84:3e:0e:7b:b8:70:f1:8e:
ed:8b:e0:ed:65:a0:64:03:60:09:a3:f5:34:2c:50:6b:11:17:
40:1c:92:31:ac:f8:eb:64:7b:ab:ce:b0:52:8c:a4:99:b5:36:
6a:7e:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:32 2025 by rpki-client