Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pb94oNxwWRqnkb6P3O6USYjkgKM.roa
File: pb94oNxwWRqnkb6P3O6USYjkgKM.roa (raw, json)
Hash identifier: vEGSLYTP2TcPtX7oYMZs2SYSriKxRa9TPVzdsbTrVYI=
Subject key identifier: A5:BF:78:A0:DC:70:59:1A:A7:91:BE:8F:DC:EE:94:49:88:E4:80:A3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0197DB7F4D5780A4B6E08AD8A38A93856D50
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pb94oNxwWRqnkb6P3O6USYjkgKM.roa
Signing time: Sat 05 Jul 2025 16:50:42 +0000
ROA not before: Sat 05 Jul 2025 16:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42083
IP address blocks: 188.132.150.0/24 maxlen: 24
188.132.229.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.38.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:7f:4d:57:80:a4:b6:e0:8a:d8:a3:8a:93:85:6d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 5 16:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5bf78a0dc70591aa791be8fdcee944988e480a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cd:89:8f:92:1c:90:63:13:1c:71:8e:96:c8:
3d:10:17:b3:b2:87:e5:bf:b3:9f:81:8a:3f:02:a7:
53:33:b4:a7:57:49:46:99:cd:1a:d8:5e:08:5a:46:
30:65:72:22:be:fd:13:66:8e:61:d5:7d:82:89:bf:
c8:3d:6b:ae:a0:e5:de:67:cf:c4:2f:c3:04:d6:71:
cf:45:fb:90:58:04:7a:5c:8f:09:60:87:af:14:ad:
e9:78:c5:06:ac:a7:68:23:86:97:88:cd:7d:8f:cd:
24:ee:1b:e2:64:3a:10:bd:92:bb:c7:f0:86:df:df:
40:f5:44:e4:30:8c:20:4b:5b:21:96:18:6d:3d:0d:
fe:e8:59:9c:48:2d:6c:1c:61:00:f8:34:b1:65:77:
08:ce:90:80:00:e7:12:e9:24:60:97:2f:2a:4e:01:
b0:0c:6c:39:39:a0:88:f3:7b:f5:36:ee:0f:46:1d:
e7:25:ec:64:ec:02:1e:05:ed:cd:3f:3c:97:48:69:
90:32:e5:f8:ba:2b:e3:77:4c:0e:82:b2:66:32:5d:
60:f4:61:48:15:6d:74:97:a9:35:6e:b7:04:6b:f2:
62:ab:e5:30:21:52:77:58:fd:74:c1:09:f8:b6:8e:
82:61:34:68:3e:37:e6:d1:b5:7a:a8:57:e3:d5:85:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BF:78:A0:DC:70:59:1A:A7:91:BE:8F:DC:EE:94:49:88:E4:80:A3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/pb94oNxwWRqnkb6P3O6USYjkgKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.150.0/24
188.132.229.0/24
188.132.249.0/24
212.68.38.0/24
212.68.59.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c7:fb:99:d5:71:38:7d:00:ff:ff:f4:10:83:7e:ee:12:31:
5d:76:e2:87:48:d4:0c:af:46:20:52:88:0a:7e:61:1a:81:e7:
05:91:4b:91:00:73:c4:ef:5a:99:d7:85:fb:47:77:16:ec:cf:
77:a0:f5:6e:ee:39:8d:27:b2:0e:43:30:12:c0:28:65:98:97:
0d:12:35:91:28:14:8b:5a:ff:30:1e:8e:f0:53:92:9c:cf:3b:
28:86:ed:01:be:b1:84:64:82:02:55:e8:01:ef:eb:80:59:ea:
8b:59:76:cc:5a:36:78:39:11:f0:49:c6:ba:24:f3:61:4e:64:
31:88:41:c7:e2:74:a5:42:da:d2:65:d4:be:8a:18:75:55:a7:
13:82:ae:7e:9f:a2:d8:ae:0d:7f:30:ad:76:8f:f2:4a:68:b7:
3c:0f:20:6b:0b:ca:fc:be:d8:02:77:8a:dc:ac:13:17:cb:02:
03:55:69:0d:e5:25:d3:92:c8:64:f5:e4:91:eb:3d:ac:fe:d4:
47:2d:b5:d0:d1:01:3a:3e:53:09:ef:8f:89:ff:4f:5a:24:2d:
87:ff:02:96:c5:15:16:55:28:17:66:cc:61:1f:33:ec:2d:12:
b2:6b:64:66:3f:e6:73:42:4b:fb:5a:55:79:57:a6:2e:d8:87:
c8:d3:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:03:24 2025 by rpki-client