Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/CLFvtBlCszPljVNHlNiA9R-sl_c.roa
File: CLFvtBlCszPljVNHlNiA9R-sl_c.roa (raw, json)
Hash identifier: /Tu6jIruJ01g/a0I0NJoIAi1setevOJy2+jMKtPuHbo=
Subject key identifier: 08:B1:6F:B4:19:42:B3:33:E5:8D:53:47:94:D8:80:F5:1F:AC:97:F7
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019841C410F05853EDB90B7F727958EACBE3
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/CLFvtBlCszPljVNHlNiA9R-sl_c.roa
Signing time: Fri 25 Jul 2025 13:27:05 +0000
ROA not before: Fri 25 Jul 2025 13:27:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202870
IP address blocks: 5.152.128.0/22 maxlen: 24
45.3.56.0/22 maxlen: 24
45.133.154.0/23 maxlen: 24
103.129.61.0/24 maxlen: 24
104.167.28.0/22 maxlen: 24
185.152.44.0/22 maxlen: 24
2a07:7e80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:c4:10:f0:58:53:ed:b9:0b:7f:72:79:58:ea:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jul 25 13:27:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b16fb41942b333e58d534794d880f51fac97f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:d3:aa:b1:11:fe:90:2f:09:d2:50:21:40:
96:c2:5c:9b:ce:1f:7a:1c:a8:4d:a0:e3:b2:7b:82:
7e:a2:74:68:62:8f:87:c4:49:ce:4b:bd:b1:78:34:
3b:91:e8:69:e4:a6:ce:42:bb:e1:80:67:e6:39:39:
5b:53:84:54:df:cd:b3:b4:6d:1f:04:54:f3:9a:18:
6e:98:ed:da:30:0a:7d:57:49:0c:dd:39:d5:4d:a0:
4a:cd:fe:f1:e5:00:63:3c:2b:68:90:3c:48:4c:94:
bd:67:38:5a:ca:50:be:d8:e5:34:f9:a3:81:4a:21:
c6:63:de:b2:e9:58:42:df:6c:0e:5a:15:10:6b:64:
4c:cf:1a:a0:93:30:21:f6:f3:43:9a:80:25:bd:d6:
45:5e:90:e0:dd:c6:b1:b4:f7:25:94:f1:47:f3:22:
04:08:c9:da:11:a9:a6:62:c2:af:11:ca:79:16:dd:
49:03:21:d1:54:d7:23:7d:7c:2f:02:d4:08:8e:fa:
ac:4c:53:a9:80:93:38:3b:61:9c:6a:78:dd:25:81:
63:ee:97:f6:06:f9:cc:9d:2f:71:0f:5d:6c:a2:3c:
ab:52:3b:4a:09:b0:cf:3f:71:25:c6:3c:a8:f4:b1:
d3:dd:80:35:7a:f6:11:f0:a1:af:88:6d:83:0a:f5:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B1:6F:B4:19:42:B3:33:E5:8D:53:47:94:D8:80:F5:1F:AC:97:F7
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/CLFvtBlCszPljVNHlNiA9R-sl_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.128.0/22
45.3.56.0/22
45.133.154.0/23
103.129.61.0/24
104.167.28.0/22
185.152.44.0/22
IPv6:
2a07:7e80::/29
Signature Algorithm: sha256WithRSAEncryption
90:dc:ec:66:77:30:d4:6f:e5:94:7e:d3:b7:06:2c:12:0a:c6:
25:99:ab:fb:50:5e:99:a6:83:19:33:70:7e:72:7b:4c:68:3b:
29:09:c4:16:1a:47:c1:25:b2:fc:cd:e4:c1:fe:cd:04:39:2b:
ba:51:10:bf:ec:d7:e1:13:ae:09:49:ea:1d:5c:1e:24:82:46:
01:f0:a2:b4:4d:4e:0b:29:16:21:45:06:90:18:c1:94:8e:35:
52:6d:81:b0:17:fc:fc:a1:6e:af:6d:06:43:70:0d:88:e9:a5:
d9:79:32:7c:c0:84:d1:b4:a5:81:c1:b2:4a:4a:b4:04:48:42:
0d:a7:fd:7a:3d:42:22:cd:ba:36:fd:8d:09:c4:0f:3e:84:18:
ad:a2:6d:66:69:87:6e:4d:87:57:8c:ec:c5:77:c0:37:53:03:
72:41:ca:14:eb:04:32:52:93:19:00:b6:cc:65:cd:7c:31:2f:
b3:bf:0c:bb:5c:01:48:31:a2:c4:f1:43:a2:50:28:dd:66:4c:
1b:e8:64:8b:e2:e1:de:7c:81:9a:ee:31:06:77:34:3b:52:81:
88:ca:ff:ec:6d:bd:f4:d3:1f:ca:36:26:2b:63:0a:89:76:81:
e2:4a:0c:25:27:ca:67:20:4a:99:44:8c:d6:fe:08:e6:ee:65:
b0:5a:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:27:22 2025 by rpki-client