Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/1n-VVl_FUGuc471oALycpRiqCLk.roa
File: 1n-VVl_FUGuc471oALycpRiqCLk.roa (raw, json)
Hash identifier: CyDn40gRMpRIy4CCIQiJsw5qJAYeVVUI59AY9O976Cg=
Subject key identifier: D6:7F:95:56:5F:C5:50:6B:9C:E3:BD:68:00:BC:9C:A5:18:AA:08:B9
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 01987C4EB2900EFBF8C95CBF798F17CF93D2
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/1n-VVl_FUGuc471oALycpRiqCLk.roa
Signing time: Tue 05 Aug 2025 22:16:28 +0000
ROA not before: Tue 05 Aug 2025 22:16:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 786
IP address blocks: 85.12.124.0/24 maxlen: 24
85.12.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:4e:b2:90:0e:fb:f8:c9:5c:bf:79:8f:17:cf:93:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Aug 5 22:16:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d67f95565fc5506b9ce3bd6800bc9ca518aa08b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:73:74:72:59:51:73:c8:77:da:fe:07:e5:
3f:ed:53:b3:74:c8:73:1f:84:12:00:f2:0e:b4:66:
da:f0:5e:7e:f8:fe:f2:0b:2c:b4:a0:9e:9f:5a:f1:
a5:ba:8f:9e:83:43:6c:40:47:bb:6a:c9:4b:e5:46:
36:12:7f:ef:87:9f:61:64:5e:53:dc:1d:e1:62:1b:
48:3f:8f:09:d4:5d:5c:b4:a3:ae:a6:75:05:ac:4d:
29:cb:7f:8a:4f:95:d0:10:3e:6f:db:8c:8f:08:9c:
fc:b8:b2:d1:0d:77:e4:b7:0b:33:ff:5e:15:cd:cb:
42:28:a0:55:1e:d0:af:81:99:31:26:f6:31:19:51:
3c:f2:66:90:ad:4a:d9:25:dc:c9:d9:33:db:f7:43:
82:43:e2:0a:1e:bd:d2:e5:1c:e7:d8:c6:05:8e:e7:
6d:14:c9:9d:4c:83:54:ec:e3:30:7a:6c:7a:7d:f9:
18:d8:2b:f5:96:4e:1b:05:ce:d7:73:71:f9:a8:f4:
33:16:e2:34:81:dc:e2:1b:a3:50:a8:33:c0:a0:d7:
fb:68:15:ea:6c:a3:98:50:c1:6e:54:82:1f:a4:fb:
36:72:96:75:90:84:b5:e9:18:f0:26:d2:c6:4c:0e:
2a:71:20:df:65:4d:88:ae:49:e0:5f:30:e3:c7:6d:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7F:95:56:5F:C5:50:6B:9C:E3:BD:68:00:BC:9C:A5:18:AA:08:B9
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/1n-VVl_FUGuc471oALycpRiqCLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:a5:0d:cb:44:d8:cb:a6:d9:c1:13:81:33:16:fb:7f:6b:a4:
43:c5:b4:10:e5:3e:72:8d:e9:4d:9f:ba:ba:e3:95:ec:4f:87:
21:f7:8e:0e:2b:30:ff:7f:2f:70:01:78:1e:f7:cf:94:63:ba:
77:26:77:0b:dd:32:17:b3:6f:27:2f:c5:99:3e:27:cf:0f:15:
b8:4a:47:fd:45:b3:b1:ae:2e:0f:17:5a:79:e5:9f:9b:8e:30:
74:aa:72:2f:c3:79:8f:b3:8c:b4:fc:a7:63:b7:45:cd:03:b5:
e5:d4:0e:40:7e:64:04:fa:59:ed:4d:84:5d:6d:32:12:c7:2d:
8a:fe:9e:37:5b:5d:3d:4f:c7:0e:a4:cc:f4:09:34:04:77:43:
78:c5:af:b1:a4:89:3e:77:40:7e:1e:63:ed:ff:05:63:b2:62:
0d:62:b8:bf:cc:55:13:7d:53:c0:e3:3d:50:56:2e:de:f3:70:
31:a5:82:90:1d:52:f2:ae:5e:d3:f8:af:a1:11:ab:6b:ed:df:
5d:42:60:78:15:4a:aa:f7:8b:33:98:83:bb:5b:e6:86:b4:16:
0c:61:af:61:83:63:e7:54:8e:2f:c7:f7:28:6b:3a:4f:1f:a0:
e6:a7:4b:54:92:68:74:03:58:59:52:88:ea:5a:78:ff:6f:1f:
c8:53:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:35 2025 by rpki-client