Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/1vKogvAJ7aYG5PR2yXnQrWioZSo.roa
File: 1vKogvAJ7aYG5PR2yXnQrWioZSo.roa (raw, json)
Hash identifier: 7AslTVaGAxs89CrI0ewnWcmXXnAy3y2uVc1NOrkGAHw=
Subject key identifier: D6:F2:A8:82:F0:09:ED:A6:06:E4:F4:76:C9:79:D0:AD:68:A8:65:2A
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 0198080D57A57AB4038827F464A329F1067F
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/1vKogvAJ7aYG5PR2yXnQrWioZSo.roa
Signing time: Mon 14 Jul 2025 08:29:08 +0000
ROA not before: Mon 14 Jul 2025 08:29:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51184
IP address blocks: 5.180.152.0/22 maxlen: 24
91.206.8.0/23 maxlen: 24
116.204.196.0/22 maxlen: 24
178.251.64.0/21 maxlen: 24
185.17.12.0/22 maxlen: 24
185.68.248.0/22 maxlen: 24
185.128.244.0/22 maxlen: 24
185.129.172.0/22 maxlen: 24
193.238.236.0/22 maxlen: 24
217.116.176.0/20 maxlen: 24
2001:1b98::/32 maxlen: 48
2a02:1748::/32 maxlen: 48
2a06:d180::/29 maxlen: 48
2a06:d500::/29 maxlen: 48
2a0c:ad40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:0d:57:a5:7a:b4:03:88:27:f4:64:a3:29:f1:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Jul 14 08:29:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6f2a882f009eda606e4f476c979d0ad68a8652a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:20:c0:68:07:4f:ac:66:97:bd:51:96:6b:
02:e6:12:ca:81:da:d6:31:29:01:39:21:af:73:b7:
d5:ce:ee:1f:2c:ef:ca:d4:78:32:ee:70:53:38:96:
ca:69:54:85:9b:fb:cb:6d:f8:9a:a9:20:69:da:85:
92:3c:bd:25:95:a3:53:97:5c:e7:df:9b:77:b2:be:
0d:09:0c:17:86:50:aa:dd:df:36:02:bf:60:37:46:
d2:12:f1:de:05:bf:ca:41:94:b9:51:ea:3c:bf:cb:
bb:e7:6f:8b:56:da:fb:db:50:de:cb:be:44:41:a1:
99:0a:5c:43:86:d2:69:c7:c9:0d:5d:7a:55:e5:03:
be:99:7b:a1:ba:77:0f:ff:7c:c1:fd:25:c5:00:30:
b5:ae:e8:b3:5e:b5:9a:9c:8c:0e:57:87:ea:51:46:
f5:75:6a:34:a4:57:ee:41:6f:75:ea:ac:92:7e:8f:
eb:eb:71:58:3c:79:12:2d:a9:f7:cf:d3:15:63:b1:
c1:5f:3c:d2:a4:a4:4d:f2:c0:83:81:d1:69:3a:ea:
7d:be:58:77:ac:93:50:89:1c:c1:2c:0d:14:64:09:
97:4f:69:a3:87:9a:89:68:3c:b1:6b:61:f1:ff:02:
e1:c0:35:4f:8c:51:32:53:2b:73:93:51:22:3e:a5:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:A8:82:F0:09:ED:A6:06:E4:F4:76:C9:79:D0:AD:68:A8:65:2A
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/1vKogvAJ7aYG5PR2yXnQrWioZSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.152.0/22
91.206.8.0/23
116.204.196.0/22
178.251.64.0/21
185.17.12.0/22
185.68.248.0/22
185.128.244.0/22
185.129.172.0/22
193.238.236.0/22
217.116.176.0/20
IPv6:
2001:1b98::/32
2a02:1748::/32
2a06:d180::/29
2a06:d500::/29
2a0c:ad40::/29
Signature Algorithm: sha256WithRSAEncryption
d3:cb:eb:f6:52:1b:a1:7b:8e:c2:bd:7f:d2:44:41:4b:76:ba:
fb:20:c4:59:bd:f3:62:7b:20:54:d3:63:05:ad:e9:85:1b:31:
7d:be:6b:f2:03:d4:e1:09:5f:7f:11:3d:6b:57:a1:fd:fe:bb:
d9:8a:b6:79:04:af:45:1e:8f:1a:95:76:ee:75:b0:a4:b3:5b:
fb:a7:83:87:81:2c:8f:83:5a:b9:fb:81:b1:ae:86:e9:4c:02:
b0:1f:fc:82:4f:a6:45:80:ba:f2:db:5b:48:78:dc:4d:16:4f:
f2:1a:97:52:09:dc:dd:d1:18:ab:32:c3:40:e0:88:77:b1:89:
b5:8a:34:f2:e3:46:05:16:7f:31:59:f7:a9:9e:24:f5:3a:26:
30:cc:44:0f:f5:01:63:48:b6:d3:f8:a8:84:99:1a:c6:b0:5a:
1a:e8:56:3e:70:bf:7a:98:04:29:20:00:72:7e:fe:fb:8e:48:
45:d3:ff:8f:fa:8c:83:46:83:47:13:8e:aa:f0:59:cf:8a:6b:
a1:0d:b0:d4:c1:62:1d:e3:b2:80:95:16:70:c5:db:6a:dd:b2:
bb:54:e3:a1:0a:d4:41:9c:d0:e7:e4:89:98:4a:9f:d4:0e:d4:
67:5c:85:79:f9:e8:7f:07:8d:63:92:57:9b:e3:64:be:a9:cf:
b7:b5:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:04:30 2025 by rpki-client