Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ArcVcNNgrGVWzJ0VKCeDksHAc6Y.roa
File: ArcVcNNgrGVWzJ0VKCeDksHAc6Y.roa (raw, json)
Hash identifier: CQcfIUe0kSL5Ui9W6KhUk7OwPb15iBgnmWMwBibSiM8=
Subject key identifier: 02:B7:15:70:D3:60:AC:65:56:CC:9D:15:28:27:83:92:C1:C0:73:A6
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0198328926770C5CEBD2569B938ECD67CC6C
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ArcVcNNgrGVWzJ0VKCeDksHAc6Y.roa
Signing time: Tue 22 Jul 2025 14:28:25 +0000
ROA not before: Tue 22 Jul 2025 14:28:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 185.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:89:26:77:0c:5c:eb:d2:56:9b:93:8e:cd:67:cc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jul 22 14:28:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02b71570d360ac6556cc9d1528278392c1c073a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:70:30:d8:59:33:02:67:d6:84:a6:ab:82:
3a:e9:f7:fb:de:70:27:03:dd:66:cd:77:dc:ba:13:
d8:b7:20:68:2b:e0:a7:7a:9a:09:e5:f3:80:b8:77:
e7:71:ed:4e:7f:6a:5d:ca:7c:aa:c6:54:e2:a8:c4:
bd:d4:0b:9d:fe:d9:15:b2:77:13:22:66:f4:23:c9:
1a:ba:98:ad:be:c7:0f:82:39:09:cd:13:49:af:e6:
a1:cd:d2:cd:6f:86:94:c9:d9:a9:ae:49:a1:42:56:
2b:f9:b6:9c:12:41:4a:24:d9:80:dd:e6:be:1d:6a:
8f:d2:06:a2:98:5f:d2:bc:c1:cc:7f:db:d9:1a:62:
08:16:8a:d9:2d:8e:f6:0c:c9:bf:3c:a7:35:d0:cb:
7a:c0:1a:70:8a:6f:82:ec:cc:a6:12:9b:92:0d:1a:
e2:cf:24:b3:10:1a:19:96:78:8d:b8:ae:8a:b0:ed:
d2:f2:9b:26:a6:13:a6:9b:92:c8:c7:0b:05:c2:87:
6e:bb:93:72:6e:ee:69:df:af:65:08:45:a7:37:44:
68:27:f5:cb:b0:ae:ec:80:7d:fe:4d:1d:78:34:2d:
92:37:fe:18:94:5a:00:72:1a:17:b8:12:2e:0b:9d:
e7:45:14:f7:78:36:5b:45:35:a2:4b:8e:04:8a:23:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:15:70:D3:60:AC:65:56:CC:9D:15:28:27:83:92:C1:C0:73:A6
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ArcVcNNgrGVWzJ0VKCeDksHAc6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
63:8c:0e:58:f8:15:22:04:20:83:ad:a5:fb:19:8d:fb:8a:b5:
53:d9:c6:cb:51:ee:1c:02:a7:d2:21:c2:44:5f:ef:21:ab:13:
d4:9a:6f:5a:4c:31:3c:4d:76:5b:96:cb:d2:fb:08:3e:74:bd:
a2:4d:2d:e4:4d:30:73:02:64:d2:eb:ab:48:54:de:25:5e:4d:
12:0b:01:7e:b6:2c:9d:7b:1f:4a:bf:35:f4:da:49:b6:2d:a1:
6c:7d:96:3a:0e:9c:b5:34:99:e6:ce:89:6d:f4:d0:40:6e:55:
a5:3e:13:69:00:ab:9c:16:d3:4b:1d:c9:28:61:1a:a3:40:16:
db:ff:d0:f4:c2:38:a5:d6:24:dc:6b:fe:32:81:5a:4d:8e:84:
0b:ae:24:0c:bc:5d:58:47:df:68:72:2b:e2:41:ea:4e:5c:67:
1d:1e:d4:8b:0c:cb:5e:22:9a:33:f9:7b:d1:3c:9c:3a:33:dd:
61:c4:be:46:33:aa:a5:7c:74:9c:c1:33:5d:71:cd:21:01:99:
e1:ca:ea:03:61:ce:a0:1e:a4:48:0f:eb:fc:cb:d8:20:5b:f5:
ff:2e:a4:bf:c7:9b:e4:2c:7d:e8:1a:ee:c6:7e:2d:4f:4c:17:
67:7f:37:88:ea:73:23:3d:70:cb:b0:7e:3a:5d:93:40:7a:28:
e8:19:b2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:53:09 2025 by rpki-client