Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/11XPoW8pTaOm5BNfgnC1_YxNujM.roa
File: 11XPoW8pTaOm5BNfgnC1_YxNujM.roa (raw, json)
Hash identifier: JYstOQp9pg/6QdAjowkRvp6UVuzrTNjj5m+4emDIKy8=
Subject key identifier: D7:55:CF:A1:6F:29:4D:A3:A6:E4:13:5F:82:70:B5:FD:8C:4D:BA:33
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B53F3179A5AEBA6A1EE2D1373459D2
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/11XPoW8pTaOm5BNfgnC1_YxNujM.roa
Signing time: Mon 14 Jul 2025 16:12:09 +0000
ROA not before: Mon 14 Jul 2025 16:12:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208392
IP address blocks: 45.132.253.0/24 maxlen: 24
82.115.222.0/24 maxlen: 24
185.17.1.0/24 maxlen: 24
185.112.80.0/24 maxlen: 24
185.112.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b5:3f:31:79:a5:ae:ba:6a:1e:e2:d1:37:34:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:12:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d755cfa16f294da3a6e4135f8270b5fd8c4dba33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:e5:34:5f:94:f4:46:db:1e:99:a3:a9:5c:
31:1e:8e:fd:21:cf:db:c1:43:d2:71:f0:41:80:11:
54:65:36:ad:1f:a4:84:a0:64:3d:0c:b8:e9:f2:97:
d7:84:f2:75:86:5a:59:a7:dd:78:98:47:64:1b:17:
20:9c:78:f7:13:af:c6:05:72:e1:f5:36:8f:99:34:
72:8b:e4:f0:73:d4:27:8d:d7:e3:a6:29:e8:a1:08:
59:48:38:40:86:2c:7a:81:76:03:3b:c9:6a:5b:87:
c0:66:24:08:76:3e:2d:d8:42:35:92:8c:36:84:28:
e5:e4:ff:04:c2:6d:eb:e3:a6:63:57:d2:3c:a3:cc:
8e:df:d9:17:91:c8:57:43:1b:b4:98:2a:8b:6a:2e:
e1:87:ff:be:4e:8d:17:c0:9d:ab:c1:17:42:98:c3:
c6:4b:0e:2c:9e:e5:0e:0b:f2:a0:4c:13:b0:70:f4:
f9:4f:ff:f9:44:87:b2:5e:1e:d5:2b:f4:e0:5e:2c:
8a:ba:5e:70:a3:2a:01:f5:21:e1:75:5b:1b:4d:8f:
f5:30:65:af:1f:17:7a:8e:d9:25:41:e8:80:be:19:
d3:9d:77:38:5a:ac:c8:17:be:97:46:10:5a:9d:e3:
6a:14:d7:15:a7:0c:a8:fc:9c:89:8b:26:95:62:f3:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:55:CF:A1:6F:29:4D:A3:A6:E4:13:5F:82:70:B5:FD:8C:4D:BA:33
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/11XPoW8pTaOm5BNfgnC1_YxNujM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.253.0/24
82.115.222.0/24
185.17.1.0/24
185.112.80.0/24
185.112.100.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:26:0f:e8:a5:36:c4:6c:37:fe:2d:ec:90:aa:9e:ad:26:a0:
1d:e2:23:67:bc:f5:0f:cc:7d:ec:34:59:ba:1f:a6:d2:34:5a:
ee:d7:8e:0d:d8:12:d0:02:88:bc:b7:54:36:bc:46:7d:35:d3:
7f:cb:d0:c4:98:09:0c:f1:85:02:cc:c6:59:c6:ec:b9:1f:39:
2b:75:c1:1b:49:c3:f8:ca:70:82:5a:b7:99:c8:e1:a7:8a:b3:
1b:05:a1:7c:ea:9a:c8:83:23:c6:98:12:1b:d2:a9:ec:d0:d0:
97:7b:49:a0:0f:6d:0a:12:1b:37:6a:3c:ef:6c:ac:a1:9e:a1:
e0:b6:60:ea:3e:14:bb:2f:2f:c6:5a:1a:1b:db:79:bf:fd:ff:
df:3e:dd:e7:d7:37:15:44:c4:3d:2e:bc:b6:08:b9:f4:9d:4d:
11:ac:11:19:59:fb:fd:d6:74:03:ad:37:8a:f2:4a:a1:a5:a1:
fd:9b:63:0f:02:7c:10:63:bb:13:e6:e0:d7:11:47:1c:b5:f1:
cc:d3:4f:2d:ca:a1:73:a8:07:f2:27:23:e6:6c:1e:bf:55:20:
a7:ee:fd:16:56:62:86:e4:5b:17:89:bb:73:09:cb:59:db:78:
dc:27:ba:26:7c:23:c7:85:e5:ae:42:6f:2f:07:4a:b9:22:52:
93:a5:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:42:32 2025 by rpki-client