Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/U9ve-ub2Kq0uVjJaRtH3iG-eEI0.roa
File: U9ve-ub2Kq0uVjJaRtH3iG-eEI0.roa (raw, json)
Hash identifier: e1vSTrCrDaoF+Wa5nMhoDmxXAurT9CLjVAo5POzht2w=
Subject key identifier: 53:DB:DE:FA:E6:F6:2A:AD:2E:56:32:5A:46:D1:F7:88:6F:9E:10:8D
Certificate issuer: /CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Certificate serial: 0197772625F9C8461342A222A47047940368
Authority key identifier: 24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/U9ve-ub2Kq0uVjJaRtH3iG-eEI0.roa
Signing time: Mon 16 Jun 2025 05:11:18 +0000
ROA not before: Mon 16 Jun 2025 05:11:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28910
IP address blocks: 195.69.188.0/24 maxlen: 24
195.69.189.0/24 maxlen: 24
195.69.190.0/24 maxlen: 24
195.69.191.0/24 maxlen: 24
2a05:45c7:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:26:25:f9:c8:46:13:42:a2:22:a4:70:47:94:03:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c96d386d7cf59a990d3994f0df8493dfca49b3
Validity
Not Before: Jun 16 05:11:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53dbdefae6f62aad2e56325a46d1f7886f9e108d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:91:ce:8c:fc:0b:a8:cb:1e:b3:38:23:40:
a3:be:a2:1c:86:4c:55:59:97:71:20:5b:8f:1a:8b:
b9:db:04:a5:65:a0:5a:d3:95:94:f0:97:13:61:4e:
f2:25:b6:f3:99:4d:8d:48:11:b7:22:54:8c:25:fb:
6e:8a:c4:25:6b:a7:4e:ce:46:bf:81:dc:bc:d1:ec:
5e:43:7e:4f:2f:33:3c:f7:7b:27:cd:22:26:98:c7:
e3:24:63:09:53:95:f8:ed:0e:69:8c:ea:b0:77:5b:
fe:36:23:88:13:ab:28:d4:35:a4:b7:a3:6c:41:41:
b5:06:aa:61:6b:56:9c:44:6a:5b:4e:6f:7c:cc:77:
3d:35:fe:7e:f9:00:db:50:ae:5c:ab:58:f5:96:40:
a9:98:3b:7f:2c:80:d3:6e:79:fd:5b:6b:5f:c2:54:
22:5f:63:52:03:19:7b:0f:51:36:9a:a1:1b:80:57:
8e:97:05:7d:01:c4:6b:3c:95:4f:1a:cb:f5:67:2f:
ee:e9:17:0b:f4:24:09:21:8d:f8:19:20:da:b8:7a:
4b:c0:dc:86:dc:4c:67:04:8b:1c:b0:93:dd:78:b9:
a1:4b:7d:1d:e2:ad:d3:0a:b5:28:2a:4a:ae:f1:7e:
bc:a4:ac:eb:28:95:6e:87:c3:b3:22:75:8a:38:11:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:DE:FA:E6:F6:2A:AD:2E:56:32:5A:46:D1:F7:88:6F:9E:10:8D
X509v3 Authority Key Identifier:
keyid:24:C9:6D:38:6D:7C:F5:9A:99:0D:39:94:F0:DF:84:93:DF:CA:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMltOG189ZqZDTmU8N-Ek9_KSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/U9ve-ub2Kq0uVjJaRtH3iG-eEI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7bed63-406e-405c-a7f0-7cd9c3baba25/1/JMltOG189ZqZDTmU8N-Ek9_KSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.188.0/22
IPv6:
2a05:45c7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
22:d4:18:56:c8:0b:0b:87:e8:4c:0a:b7:94:fb:7e:59:c8:02:
d4:e3:40:18:45:dc:eb:b8:9c:49:02:f5:85:04:01:39:c8:36:
d8:3b:85:eb:69:b7:aa:19:5c:ae:d0:39:dd:ff:55:8f:a9:9a:
59:23:60:74:60:31:9a:fb:3e:22:3b:ac:30:d8:a9:82:b0:0a:
6c:d1:19:8f:da:8b:29:1d:37:b4:18:6d:96:cd:0b:b3:d7:ed:
42:b8:f4:a1:c5:b4:66:eb:58:c3:62:07:fb:ba:3b:d0:ee:13:
86:1c:aa:2b:6b:ee:98:91:85:9e:a2:e1:25:a1:f5:6e:ce:ca:
b4:39:89:2e:6d:d1:59:bb:4c:a8:e7:48:16:84:a0:47:68:1a:
f1:0f:7c:5d:bb:5d:b8:45:1f:1a:82:88:50:23:5c:1c:ac:7e:
37:25:17:ee:7f:54:84:a6:81:46:89:8f:bf:c2:a4:2d:44:e4:
db:88:d6:76:da:56:46:af:04:50:c1:04:97:ce:45:39:83:d5:
d8:7a:6e:41:65:41:7d:4d:8e:f4:77:14:90:e4:b4:f3:30:0e:
62:af:7f:98:2e:45:a3:50:4c:56:f8:aa:3f:01:c8:88:65:62:
fb:32:df:37:a7:68:c9:0c:f6:54:85:15:57:07:55:70:39:33:
58:93:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:04:29 2025 by rpki-client