Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/N-56zynZQkjMVarS-v8wIftEaAc.roa
File: N-56zynZQkjMVarS-v8wIftEaAc.roa (raw, json)
Hash identifier: TmBPb/l+t9dFI9/svQZsOGHsNkbPcnVxIX8nhP74Z3o=
Subject key identifier: 37:EE:7A:CF:29:D9:42:48:CC:55:AA:D2:FA:FF:30:21:FB:44:68:07
Certificate issuer: /CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Certificate serial: 0197A6A106BDE0C76A26CE99CDFBF1E3EB11
Authority key identifier: 92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/N-56zynZQkjMVarS-v8wIftEaAc.roa
Signing time: Wed 25 Jun 2025 10:27:40 +0000
ROA not before: Wed 25 Jun 2025 10:27:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43279
IP address blocks: 185.208.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a6:a1:06:bd:e0:c7:6a:26:ce:99:cd:fb:f1:e3:eb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eae6ad4bb2762e2194e5df51cd0d2cd3e69caa
Validity
Not Before: Jun 25 10:27:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37ee7acf29d94248cc55aad2faff3021fb446807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:2a:ae:ee:aa:8f:3a:64:f8:36:4a:06:67:
26:7f:3c:cf:0c:53:6e:f7:1a:00:88:6f:f5:6b:76:
11:07:69:65:72:30:3d:2a:28:a0:7a:f2:5c:47:56:
60:52:97:d4:2e:30:7b:c4:4f:87:b9:2e:66:15:10:
da:77:e2:b3:ca:e6:c0:47:3f:48:34:7d:fe:a6:ed:
6e:a1:6e:f6:6a:0e:28:ea:7e:9e:53:27:96:b4:bc:
be:cc:46:d8:1c:e5:21:ee:85:51:31:b8:ff:53:54:
ea:9c:df:e1:28:16:21:76:4b:4f:25:2e:a0:6c:58:
11:4f:85:6c:6d:50:a9:0a:16:87:7c:8e:1d:6b:b3:
37:39:be:a9:bf:7d:94:af:e5:4e:89:a8:bc:65:81:
06:f6:83:1a:bb:ba:8b:cf:ea:f9:7a:0e:3a:95:9f:
b4:4b:4d:81:01:7b:a7:0a:b3:f9:68:96:57:dc:2b:
a1:06:f2:b4:53:5b:b3:ac:6a:fa:c9:53:3b:ff:67:
ad:c3:5c:a8:9d:65:3e:fe:f1:cd:b7:b1:4a:4c:e1:
00:46:7d:2a:97:21:0f:36:ae:ee:c9:67:36:06:5e:
b0:d8:e2:29:28:e3:68:ea:65:45:6f:ff:22:31:2d:
03:c4:9a:e7:d8:5f:d5:88:41:d0:9d:09:1a:7a:12:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EE:7A:CF:29:D9:42:48:CC:55:AA:D2:FA:FF:30:21:FB:44:68:07
X509v3 Authority Key Identifier:
keyid:92:EA:E6:AD:4B:B2:76:2E:21:94:E5:DF:51:CD:0D:2C:D3:E6:9C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kurmrUuydi4hlOXfUc0NLNPmnKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/N-56zynZQkjMVarS-v8wIftEaAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ac3e3b-8dcc-40ac-9dab-7e97650d0f86/1/kurmrUuydi4hlOXfUc0NLNPmnKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.232.0/24
Signature Algorithm: sha256WithRSAEncryption
27:17:b1:54:00:c4:3e:11:77:a9:e9:03:3a:65:2b:19:08:23:
0f:18:b9:bf:18:f3:c3:6b:1e:a1:7f:c7:ec:bf:19:67:77:fd:
46:0d:ef:69:00:8d:0a:be:82:71:81:8e:fc:c9:7d:07:57:61:
09:ae:84:ed:ce:69:2a:99:1d:6e:02:6a:89:a0:3b:02:4f:25:
51:7d:b2:93:2c:0a:69:ee:b9:67:d6:b2:69:c9:6f:03:da:68:
6f:2d:2b:e4:f8:39:e9:d7:38:1e:41:58:37:19:8c:2b:f7:92:
25:04:7c:23:2c:19:e0:a3:3b:65:2c:80:0e:29:ff:55:ce:15:
28:1a:52:bd:94:90:c3:a2:38:1e:e7:72:dd:2c:76:47:53:83:
6f:bb:a2:28:a5:98:4f:2d:c7:e1:7a:a1:f0:90:14:38:cf:ab:
fd:52:ad:a9:01:e9:e8:75:22:78:ff:a7:79:35:0e:fe:eb:fa:
ea:0a:51:57:16:b3:e7:cd:af:c3:18:75:ae:43:4e:2e:9c:58:
2a:4d:aa:41:f9:a4:94:64:d3:fd:d9:0e:ba:6b:da:0f:ef:65:
57:c4:1b:66:94:4a:eb:3a:be:f3:7e:9a:51:9a:80:a7:66:40:
e6:bb:87:95:b1:1e:9f:0a:fe:bd:7e:ec:31:c4:07:95:89:ca:
ae:1d:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 01:56:55 2025 by rpki-client