Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/DsXaN-JcB1la2CE31gfwERTXOWA.roa
File: DsXaN-JcB1la2CE31gfwERTXOWA.roa (raw, json)
Hash identifier: cvGbZhq10ZJuhtEt9TJhe7Mw/LDk0dS6Cxjwe9D+Wn8=
Subject key identifier: 0E:C5:DA:37:E2:5C:07:59:5A:D8:21:37:D6:07:F0:11:14:D7:39:60
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 0197E98668A7CDFB050B8E4F2267FC27C91E
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/DsXaN-JcB1la2CE31gfwERTXOWA.roa
Signing time: Tue 08 Jul 2025 10:13:09 +0000
ROA not before: Tue 08 Jul 2025 10:13:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211896
IP address blocks: 194.180.20.0/24 maxlen: 24
194.180.25.0/24 maxlen: 24
194.180.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:86:68:a7:cd:fb:05:0b:8e:4f:22:67:fc:27:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Jul 8 10:13:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ec5da37e25c07595ad82137d607f01114d73960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:80:ec:46:cb:32:39:f9:b2:5b:5a:ae:73:
65:37:90:c1:c9:2a:ed:03:9e:69:e6:4b:99:2c:7e:
86:f8:e7:d6:aa:7d:c9:63:fc:4c:94:c1:99:97:03:
7a:a5:ea:b5:81:80:57:31:e5:57:d9:c5:14:5d:a4:
94:e2:57:a9:93:87:be:7e:6f:f8:57:4e:9d:0f:47:
1c:8b:8f:c8:bd:78:5b:34:9f:19:d6:3e:e9:43:29:
b7:6d:5f:62:70:d7:33:4a:5d:de:9e:52:5d:c4:a2:
4d:90:cb:52:dd:6c:84:a0:5d:d1:4b:f3:d1:d5:39:
ef:07:ce:92:ca:9a:f6:1d:80:48:b6:1f:11:72:ba:
18:82:16:64:a7:da:39:d2:ab:38:30:77:04:82:b4:
ad:92:fc:3f:96:50:b0:01:c6:b9:0b:e7:9c:75:d4:
98:65:f3:41:a0:f6:92:b2:ad:cf:0f:fe:50:dd:0d:
31:71:72:56:0f:8d:43:1a:48:b8:42:60:ff:8e:e5:
1a:bb:02:b8:75:f4:2f:04:db:38:fd:bc:44:7b:88:
e8:a2:a8:a9:ba:1d:8d:8b:e0:fc:5f:0a:7b:36:bd:
15:a8:23:e9:04:88:16:63:2f:7b:e7:36:1a:41:a0:
d4:f2:ea:e5:61:b8:5b:71:7f:2a:46:ca:53:9e:5b:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:DA:37:E2:5C:07:59:5A:D8:21:37:D6:07:F0:11:14:D7:39:60
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/DsXaN-JcB1la2CE31gfwERTXOWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.20.0/24
194.180.25.0/24
194.180.52.0/24
Signature Algorithm: sha256WithRSAEncryption
73:93:a1:7c:8a:7d:23:bd:9a:31:60:46:f5:a7:fd:4a:32:3d:
48:99:05:78:aa:21:db:cd:96:b0:c3:dc:dd:90:7b:82:84:f4:
25:ee:0e:da:1d:3e:71:c7:a1:70:ab:39:d0:b1:d8:78:30:ed:
e1:cf:dd:98:4a:ad:56:16:ee:a0:aa:b1:89:45:17:ac:26:91:
57:4e:13:18:59:86:9c:73:b2:69:1c:e1:fd:b6:24:06:2e:ea:
ac:d5:0f:a9:d3:08:2c:f6:c9:fd:94:e9:cb:fa:05:bf:7e:b4:
6d:6c:ef:7b:11:15:78:bd:91:3e:49:87:3f:d5:28:f6:cb:eb:
f7:07:4e:df:7b:fb:88:dc:6f:9b:d4:d4:b2:99:43:4d:5e:cc:
a3:9a:b7:a7:d2:3a:fd:ad:ef:29:94:0b:5c:ff:73:5f:5a:be:
49:ba:bb:55:9c:ff:4f:96:f3:04:e8:b6:9d:cc:0c:6e:6d:4b:
6b:ae:af:3f:c6:08:fe:b0:43:07:70:ae:bf:89:53:a5:b7:2e:
76:09:92:a3:ce:46:43:c5:21:96:46:84:05:4d:a2:fd:f6:5b:
60:ee:6f:c6:e5:22:d8:06:49:14:b8:c6:c2:11:51:18:d4:8e:
6b:14:24:4e:9e:c2:01:f9:d2:4a:23:dd:7b:79:3a:79:f5:8f:
1c:4b:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:24:34 2025 by rpki-client