Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa
File: dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa (raw, json)
Hash identifier: yPBeMJO0RoRNX6fs06ij/fwJ13bpNgiBqfocAHDtu4U=
Subject key identifier: 75:DD:C0:81:CE:53:08:31:ED:21:0E:B6:86:36:D0:35:99:16:C5:8E
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 0197CF6E500A7D139F41F1019ED63B941A30
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa
Signing time: Thu 03 Jul 2025 08:36:42 +0000
ROA not before: Thu 03 Jul 2025 08:36:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200200
IP address blocks: 185.124.149.0/24 maxlen: 24
185.124.150.0/24 maxlen: 24
193.58.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:6e:50:0a:7d:13:9f:41:f1:01:9e:d6:3b:94:1a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Jul 3 08:36:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75ddc081ce530831ed210eb68636d0359916c58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:08:ea:ab:28:7e:8e:86:7a:cf:30:c8:0c:
64:1a:db:7f:3e:0d:52:a2:30:05:c2:9d:09:23:0b:
d2:50:ec:0f:82:3e:c8:e4:6a:3a:8f:14:bb:e6:fb:
74:66:f2:16:82:83:dc:74:79:c4:3e:32:9b:3b:92:
cf:42:9c:31:31:69:a5:93:5c:20:e4:3d:45:45:af:
11:9c:f2:d2:9d:8f:94:47:4e:8e:2b:58:e0:48:fa:
3f:f1:41:98:c8:6d:fc:2b:e8:c0:cc:2e:da:5e:7e:
b1:ea:5e:f4:d0:a7:45:37:20:41:e0:c9:2e:e9:34:
8b:1e:d7:ed:35:26:17:92:98:14:5a:40:71:04:c8:
06:2f:98:4f:21:5f:46:7e:e3:74:b0:07:9e:ee:fd:
54:00:fd:bb:53:77:eb:b0:6f:d8:6c:8d:e3:92:a9:
92:75:1e:1b:8e:19:66:3a:56:d9:a5:a8:b2:d8:89:
c1:c3:24:03:cb:99:c5:25:5f:b9:b4:fd:b0:ec:02:
2e:24:e3:e0:09:19:3a:f4:43:e0:92:d9:b6:02:e6:
29:6e:c7:b5:b1:1f:01:86:25:af:ca:c8:3d:ab:7c:
5b:90:f4:fe:38:97:55:f3:99:d4:c1:dc:de:3b:b6:
9a:74:31:eb:df:5d:38:86:dc:fc:6a:2a:33:91:08:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DD:C0:81:CE:53:08:31:ED:21:0E:B6:86:36:D0:35:99:16:C5:8E
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/dd3Agc5TCDHtIQ62hjbQNZkWxY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.149.0-185.124.150.255
193.58.117.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c7:6e:19:bd:97:84:77:c2:d0:8c:61:7f:56:04:46:da:36:
38:c8:2b:d3:c3:c8:17:ab:89:15:e3:0a:04:3b:c8:1f:4b:bc:
9b:10:53:a0:59:cb:d6:7d:ce:be:6a:de:59:0f:27:d1:f2:6a:
58:27:3d:5d:24:4d:83:73:1e:97:81:15:3a:32:c2:2b:36:c6:
c1:ca:40:b7:1f:1a:29:f8:80:b1:4c:70:ff:59:d7:09:08:63:
d6:c2:bd:93:e9:f0:c5:09:c0:5a:d2:53:b2:89:83:1e:4a:1b:
b8:25:3f:1f:e9:87:7b:a3:b3:87:27:b5:87:b8:a9:8d:55:5f:
bc:55:cb:72:ef:66:61:1d:2b:c6:98:f1:3b:bc:9c:bd:60:a7:
e9:7b:72:a4:c8:1f:4b:a5:8d:77:b3:b0:86:d7:bb:00:97:48:
54:f9:82:20:e1:8e:ff:41:67:7f:43:31:3f:d4:36:38:73:58:
af:b7:9e:b7:23:50:fe:69:3c:8a:fd:0f:4a:82:01:64:e6:af:
12:be:5b:a0:1e:29:81:49:eb:9b:a1:f9:5d:cb:f5:6b:60:d3:
de:52:7b:e4:64:72:d9:65:ea:4d:b9:e3:40:3e:56:fc:e3:3e:
a4:46:58:6f:a4:09:b8:95:66:71:d7:3b:5f:5d:aa:29:ba:93:
91:0e:60:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:55 2025 by rpki-client