Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/DPE-lvIaheAb93O4x9ER9Pm0wZA.roa
File: DPE-lvIaheAb93O4x9ER9Pm0wZA.roa (raw, json)
Hash identifier: VKbUVq1CbBMedZ3RYdA6WZaoezc+6KLmQpqvYTQTzcc=
Subject key identifier: 0C:F1:3E:96:F2:1A:85:E0:1B:F7:73:B8:C7:D1:11:F4:F9:B4:C1:90
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0197F2D583D033ACFBA42098E6483666ABE8
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/DPE-lvIaheAb93O4x9ER9Pm0wZA.roa
Signing time: Thu 10 Jul 2025 05:36:08 +0000
ROA not before: Thu 10 Jul 2025 05:36:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 85.239.152.0/24 maxlen: 24
85.239.154.0/24 maxlen: 24
178.239.117.0/24 maxlen: 24
178.239.118.0/24 maxlen: 24
178.239.119.0/24 maxlen: 24
178.239.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f2:d5:83:d0:33:ac:fb:a4:20:98:e6:48:36:66:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 10 05:36:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cf13e96f21a85e01bf773b8c7d111f4f9b4c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0e:30:8b:00:47:1b:9e:45:03:c0:ef:ae:ce:
6e:ca:10:bc:60:b8:9b:22:54:59:c9:da:a0:75:65:
b4:1f:11:93:3a:97:c4:d7:85:ab:7b:80:7a:80:8b:
9e:67:52:6e:58:26:38:42:9e:49:2a:b5:fa:56:47:
ca:84:3c:95:0c:39:7b:18:e7:94:70:ba:ce:a4:f2:
49:6c:98:ae:d2:a2:17:5a:db:a2:46:8d:c6:18:17:
57:c8:46:8e:90:83:89:e6:28:9c:0e:cb:0d:f9:2a:
04:73:31:5e:51:0d:71:79:94:85:bc:d7:36:ae:a0:
45:00:22:06:4b:fb:a8:0b:60:f0:e7:5a:df:e8:d6:
a1:9f:9f:b8:05:83:96:95:45:04:49:13:29:0c:e0:
db:2d:9a:c6:c9:5c:f0:22:11:b8:5a:38:d7:8f:95:
19:e8:2e:2b:ce:97:e0:9a:da:71:3a:7b:20:ae:f2:
1c:d3:78:b4:95:fa:5a:52:3d:9f:81:e7:51:5d:a6:
73:a8:e4:47:94:d4:2b:7c:ec:20:fc:3d:d1:48:93:
b3:8e:5c:3e:9b:7d:d2:9f:db:12:12:1c:6d:f0:fe:
73:e1:f6:41:c6:43:51:bf:dc:cc:27:1c:13:3f:89:
c9:8a:1b:4f:57:63:b3:16:b2:24:91:91:66:87:01:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F1:3E:96:F2:1A:85:E0:1B:F7:73:B8:C7:D1:11:F4:F9:B4:C1:90
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/DPE-lvIaheAb93O4x9ER9Pm0wZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.152.0/24
85.239.154.0/24
178.239.117.0-178.239.120.255
Signature Algorithm: sha256WithRSAEncryption
c7:4d:2d:07:d4:37:12:9f:33:ed:b6:ea:c6:7c:75:5b:95:10:
bc:f4:1b:8d:ac:d2:14:ed:9d:b2:b4:71:23:da:77:4e:48:ed:
d9:8e:cb:95:93:a3:d1:ae:20:da:b5:0d:5d:0a:d5:3d:98:e4:
19:0c:f5:fb:4c:4c:16:1f:ff:57:dc:b3:ba:77:16:98:93:97:
46:e8:f6:05:1c:0d:da:6e:62:e8:ef:12:8a:4b:eb:c7:ee:d4:
ce:85:fe:96:4e:fd:2c:ac:b8:7c:27:84:8d:6b:a4:d5:c3:e2:
f3:9e:b4:59:a8:76:33:d5:bd:9f:09:47:ec:5b:23:c4:a3:ca:
9a:4b:c4:28:dd:25:92:0c:89:be:67:59:66:3c:5b:16:de:25:
59:ec:f7:88:2f:e6:63:e8:a5:ae:57:b3:6e:52:0e:ff:93:84:
00:74:e7:f9:b6:5e:b3:95:c9:f9:3b:65:64:42:56:0c:11:5f:
67:68:b0:03:bc:e2:c0:1c:c5:3e:b7:5d:a0:7b:eb:9e:d1:b4:
1b:32:44:25:36:90:4c:63:74:eb:35:6b:cc:11:49:46:d1:c7:
25:44:49:5d:1d:6e:36:44:39:26:a2:23:5e:2a:eb:a7:1d:f2:
78:34:8e:75:74:b9:ba:38:6d:70:f5:ff:d1:cd:c2:d7:4f:22:
c9:72:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:07:52 2025 by rpki-client