Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/DTHy6RXAjA3WYCRRHO7XlxlNxP0.roa
File: DTHy6RXAjA3WYCRRHO7XlxlNxP0.roa (raw, json)
Hash identifier: WIwE9zAwV90ldFttTq5+MPXhd1lbpoXmWHuG/jlZk1I=
Subject key identifier: 0D:31:F2:E9:15:C0:8C:0D:D6:60:24:51:1C:EE:D7:97:19:4D:C4:FD
Certificate issuer: /CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Certificate serial: 0197E9AF98EBE3DB4B66BBC67E21DA18A896
Authority key identifier: D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/DTHy6RXAjA3WYCRRHO7XlxlNxP0.roa
Signing time: Tue 08 Jul 2025 10:58:08 +0000
ROA not before: Tue 08 Jul 2025 10:58:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 176.105.236.0/24 maxlen: 24
176.105.237.0/24 maxlen: 24
176.105.238.0/24 maxlen: 24
176.105.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e9:af:98:eb:e3:db:4b:66:bb:c6:7e:21:da:18:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e85847cc44b86102270bbd768e4c3ceba1c988
Validity
Not Before: Jul 8 10:58:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d31f2e915c08c0dd66024511ceed797194dc4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:8a:83:f1:a5:b5:08:bc:36:b7:47:9a:28:
eb:ef:49:96:37:eb:a0:1b:05:3c:9f:a3:b9:9c:71:
29:cd:f8:58:69:11:38:06:b8:74:ad:62:35:ed:b1:
81:d2:b8:16:23:f5:3d:6f:e5:c6:b5:ab:57:f4:4e:
24:de:60:c6:d6:23:b5:c2:59:fb:fc:9f:53:00:92:
b8:f8:30:ca:c5:08:50:05:0e:67:ab:35:8d:8c:97:
cf:18:bc:6d:ba:0a:e5:3a:c3:26:2c:53:00:d2:d7:
4d:12:c2:11:ef:c9:96:08:c0:a6:ba:0b:82:18:6c:
9d:a3:0c:0c:3f:98:36:ea:ce:d7:87:da:94:21:ce:
6e:92:b8:ae:46:ef:4c:dd:c4:04:a2:f2:6d:27:ef:
43:6f:ac:53:38:04:59:6b:80:ec:b1:14:d1:eb:89:
52:a3:69:0c:eb:61:93:00:aa:91:1e:56:e6:fb:7a:
6f:3e:c3:d8:d3:5e:c5:ed:30:a6:8f:a6:9c:01:5f:
4f:fa:32:51:99:f6:a2:dc:0b:25:26:69:fc:91:2e:
1f:14:95:33:2c:67:28:f3:bb:91:66:21:ea:58:d2:
39:5f:04:ff:65:ba:7a:4c:82:26:95:1c:9e:7c:7d:
ff:6b:e9:3a:00:3f:d0:25:2b:b2:e2:c6:31:0e:cb:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:F2:E9:15:C0:8C:0D:D6:60:24:51:1C:EE:D7:97:19:4D:C4:FD
X509v3 Authority Key Identifier:
keyid:D5:E8:58:47:CC:44:B8:61:02:27:0B:BD:76:8E:4C:3C:EB:A1:C9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehYR8xEuGECJwu9do5MPOuhyYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/DTHy6RXAjA3WYCRRHO7XlxlNxP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/83f956-e18d-4738-bd6a-729c0f43414d/1/1ehYR8xEuGECJwu9do5MPOuhyYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.236.0/22
Signature Algorithm: sha256WithRSAEncryption
15:2f:d7:1f:f3:64:81:0b:e4:0b:20:b7:20:48:2e:5f:28:b4:
c4:2b:63:c0:36:bc:63:cb:8b:63:26:1d:f3:09:12:b0:86:f8:
d6:7f:87:f2:12:ba:b4:d1:8a:e2:b1:72:5a:9d:5d:3f:cd:25:
8b:97:98:04:b1:b5:e4:ca:d1:e1:52:c2:b4:0d:d5:c8:76:bc:
42:d5:19:79:99:5c:60:e2:a8:11:6c:6c:ab:f0:c3:ed:44:50:
06:5d:7f:e9:4f:e1:bb:b5:a7:3a:83:b4:ff:91:de:4a:4b:f0:
c9:4b:96:79:5e:35:56:f9:d1:5c:31:fd:87:32:d6:b1:e7:30:
b4:ae:ef:17:40:28:8e:96:98:66:db:96:56:c0:95:ac:fe:f0:
ee:b8:8c:f8:25:ff:0a:a1:42:7c:7f:d0:40:bf:db:30:c6:31:
b8:9a:77:c2:2c:20:39:ee:01:0f:08:46:2f:96:ee:c1:7d:2b:
f1:7b:fe:ec:23:b0:44:ae:90:21:3e:a8:5c:b4:b0:1f:bd:fe:
06:1f:61:3f:07:f9:5c:38:df:80:f4:81:77:4c:e6:31:57:16:
32:c8:fa:16:a7:23:6b:78:cc:6c:ea:b3:c9:db:cc:55:f0:1d:
2f:bc:0f:77:9d:2a:4f:c7:ac:13:8b:0b:2b:bc:be:3c:13:e7:
dd:58:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:38:20 2025 by rpki-client