Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ru0yVj1uuIU42lus6xVMmufa4hM.roa
File: ru0yVj1uuIU42lus6xVMmufa4hM.roa (raw, json)
Hash identifier: +rKaCOhiekBzFf8GDECn0Q4N7qDQWsCX5OxE0LHrKSg=
Subject key identifier: AE:ED:32:56:3D:6E:B8:85:38:DA:5B:AC:EB:15:4C:9A:E7:DA:E2:13
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0197CFC0B56CD37E5BABF132AAC06DE96888
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ru0yVj1uuIU42lus6xVMmufa4hM.roa
Signing time: Thu 03 Jul 2025 10:06:42 +0000
ROA not before: Thu 03 Jul 2025 10:06:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 85.239.153.0/24 maxlen: 24
85.239.159.0/24 maxlen: 24
92.62.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:c0:b5:6c:d3:7e:5b:ab:f1:32:aa:c0:6d:e9:68:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jul 3 10:06:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeed32563d6eb88538da5baceb154c9ae7dae213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:5e:e9:bb:90:c8:2e:f1:26:8a:a7:d4:8d:
ba:89:87:2f:21:b4:09:f2:1e:2c:49:00:72:78:f0:
03:2f:d6:35:d7:53:70:82:81:41:9c:85:ea:fa:3a:
dc:49:cb:31:24:21:a1:97:80:59:a9:e9:1b:10:67:
3c:31:40:ef:f7:a8:61:4e:32:ec:0d:22:fa:80:7d:
20:7f:8a:45:6a:20:b0:00:9d:12:60:6f:35:cd:66:
9c:6b:8e:cb:db:31:ef:00:53:bd:9a:04:03:d1:65:
54:c1:dc:cd:1c:54:59:76:ad:bb:42:e2:b4:a8:5b:
88:20:1a:d6:e3:2f:97:1d:53:c2:cb:56:d7:f6:ad:
79:db:ac:20:6e:d7:e3:dd:e0:ec:4e:9e:0e:af:f7:
01:54:2d:c2:0a:46:8d:fb:73:68:33:78:3c:a0:1c:
24:1e:6c:f6:e1:c2:07:98:bd:cb:e5:ab:44:1a:53:
be:bf:b9:f3:33:8a:9f:61:7a:8b:af:16:a7:0e:00:
dd:c9:73:6a:1c:00:e3:96:ee:2c:38:22:be:f6:9e:
60:87:f2:a8:55:79:e8:2a:d1:cc:a4:4a:be:2d:4a:
af:b1:83:79:be:93:67:95:88:6d:aa:d4:a6:c2:f5:
4e:22:eb:19:a3:db:c2:39:41:a0:3e:58:36:cb:8e:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:32:56:3D:6E:B8:85:38:DA:5B:AC:EB:15:4C:9A:E7:DA:E2:13
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/ru0yVj1uuIU42lus6xVMmufa4hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.153.0/24
85.239.159.0/24
92.62.250.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ff:e4:00:d6:08:8f:b8:a3:08:ff:bb:d9:b0:0a:73:a4:0b:
2f:dd:27:38:f4:a6:ca:1e:ef:b0:f7:7d:1a:a9:35:dc:c1:7b:
6c:ff:1f:cf:ff:3e:c9:b4:d6:31:1b:19:49:44:41:56:e6:21:
2d:b7:3a:c5:6c:fc:0e:bb:12:37:4d:55:bc:8c:a4:08:f8:28:
ff:3e:9b:2f:b5:4f:2a:8b:33:59:68:2a:9d:f0:76:42:60:83:
e2:03:25:97:5b:4c:61:c7:bd:25:85:92:a5:be:04:55:29:9d:
5a:ab:e1:e8:f2:06:2d:6f:47:8e:49:f1:80:2a:53:4a:32:fb:
21:eb:97:de:c1:e4:61:44:63:01:08:57:0e:8d:25:c8:79:2d:
c3:54:4c:c3:5e:18:4b:58:04:81:8f:84:34:83:35:2b:9b:81:
0e:14:cc:ef:62:e9:85:c1:bf:13:12:4a:96:c8:18:9b:eb:f1:
36:7a:a4:ee:b4:35:13:f6:cf:ae:a5:59:f2:a7:a4:c4:bf:48:
9b:fb:08:bd:ce:ec:f7:2a:1a:b2:51:cf:3e:30:c6:e4:e9:c4:
55:f8:c1:6a:c7:fb:da:dd:c0:ef:f2:6c:b7:57:c5:be:d2:27:
45:88:eb:44:1c:15:cb:f7:f3:e6:65:7e:53:af:96:62:a9:1c:
dc:e3:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:14:10 2025 by rpki-client