Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/I9sseHHLcXl8IcXdLhoUbx9JLxs.roa
File: I9sseHHLcXl8IcXdLhoUbx9JLxs.roa (raw, json)
Hash identifier: C/Kew6JtLz4pztsJd8mKeGa9ZAlJTK60yskRJShN3Uo=
Subject key identifier: 23:DB:2C:78:71:CB:71:79:7C:21:C5:DD:2E:1A:14:6F:1F:49:2F:1B
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 01981E5F6712E6DA14303EE14C7F43E86643
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/I9sseHHLcXl8IcXdLhoUbx9JLxs.roa
Signing time: Fri 18 Jul 2025 16:30:25 +0000
ROA not before: Fri 18 Jul 2025 16:30:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214640
IP address blocks: 82.197.73.0/24 maxlen: 24
95.141.241.0/24 maxlen: 24
185.113.11.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a13:7c80::/32 maxlen: 32
2a13:7c81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:5f:67:12:e6:da:14:30:3e:e1:4c:7f:43:e8:66:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jul 18 16:30:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23db2c7871cb71797c21c5dd2e1a146f1f492f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:6e:87:8d:ca:37:e6:82:af:7d:c2:df:06:
98:f4:a4:f6:f9:80:70:a9:0c:88:7d:d3:a8:c2:f6:
f0:45:62:26:f8:f2:5a:21:af:94:fb:1e:bb:c2:95:
cb:b2:26:19:45:f9:7d:45:6d:aa:01:06:8b:62:69:
7f:9e:58:f4:1f:18:4e:31:0b:7f:79:26:e8:d7:a5:
76:19:4f:50:96:bc:19:e2:ea:d8:62:a0:46:b1:31:
91:c3:05:68:36:a2:19:79:42:79:bb:ef:ce:3b:a1:
47:8b:4b:5e:7f:49:a0:9b:a0:35:96:f4:01:b2:c6:
4d:2a:a3:4e:ae:41:28:53:f2:30:b0:18:b7:fb:26:
cf:53:c6:23:2f:91:52:06:0f:82:8c:72:85:55:f1:
75:83:24:e7:9c:32:11:dd:c6:f9:69:f9:8d:1a:83:
ca:15:46:41:27:bd:8a:9a:f0:ab:ef:eb:05:fb:8a:
b0:6c:35:04:a9:98:df:22:05:ef:21:b4:73:d4:03:
c9:f7:a3:86:ed:00:1b:2f:2d:bc:e7:10:c9:01:62:
04:72:f6:67:87:ca:2c:df:9e:4b:43:6d:20:7f:24:
b9:62:57:2c:eb:61:93:80:64:2d:72:c0:10:c7:88:
28:46:56:4a:7a:2a:8c:2f:1f:c6:a9:ed:9d:28:90:
41:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DB:2C:78:71:CB:71:79:7C:21:C5:DD:2E:1A:14:6F:1F:49:2F:1B
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/I9sseHHLcXl8IcXdLhoUbx9JLxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.73.0/24
95.141.241.0/24
185.113.11.0/24
193.53.40.0/24
IPv6:
2a13:7c80::/31
Signature Algorithm: sha256WithRSAEncryption
70:e0:7e:6a:39:03:01:c2:67:0f:73:b8:dd:1d:d9:6b:65:3e:
1a:6d:c1:f4:8f:b0:29:3b:e6:7f:f2:50:74:06:e7:9a:e3:d7:
d2:9b:54:22:fa:fe:bf:bb:21:50:b8:e4:72:6b:25:73:a2:74:
5d:9e:1e:26:13:2c:31:b4:39:2e:51:ef:ee:36:e2:c5:2f:60:
89:27:2f:03:d3:74:65:b5:c9:d1:4d:ef:b6:8b:b0:3d:4d:d7:
c0:15:a8:78:08:ee:62:78:5e:8b:72:69:8e:8e:ec:0e:4b:75:
f8:e4:c6:8e:11:93:9b:f5:b1:f5:f3:42:34:6e:17:4e:0c:6b:
4d:70:f5:38:f7:70:75:39:13:24:44:7b:36:55:ca:3e:7b:11:
5e:84:f6:0d:f5:17:48:64:c0:db:f8:be:5f:74:cd:5b:7e:08:
3e:60:0d:c5:54:43:20:7e:6c:51:f8:8f:0c:7e:12:d5:6d:77:
48:36:3b:20:f1:3c:15:28:09:dd:8c:ed:c5:79:35:b9:52:92:
7f:e9:b1:13:ec:b7:97:2e:11:f8:2a:07:42:92:36:cf:c7:0f:
cd:b0:1e:39:8a:fe:99:9b:cf:88:39:e8:d2:02:7f:a6:7b:d5:
fe:fb:ff:a5:8f:15:ef:8a:8d:a6:d6:5e:1f:77:0e:1c:da:1a:
a8:6d:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:20:40 2025 by rpki-client