Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ORF0wIf0IX4GSo57xz0Bw9mtUaU.roa
File: ORF0wIf0IX4GSo57xz0Bw9mtUaU.roa (raw, json)
Hash identifier: lz/xY/BtE4wSBdN+C4SFKYeG1RYURiNjN6hGk8r9D2I=
Subject key identifier: 39:11:74:C0:87:F4:21:7E:06:4A:8E:7B:C7:3D:01:C3:D9:AD:51:A5
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B454CE8ABFB0C7ABE48FED7DB3FAF3
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ORF0wIf0IX4GSo57xz0Bw9mtUaU.roa
Signing time: Mon 14 Jul 2025 16:11:09 +0000
ROA not before: Mon 14 Jul 2025 16:11:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203549
IP address blocks: 185.103.111.0/24 maxlen: 24
185.109.22.0/24 maxlen: 24
185.109.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b4:54:ce:8a:bf:b0:c7:ab:e4:8f:ed:7d:b3:fa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:11:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=391174c087f4217e064a8e7bc73d01c3d9ad51a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:ae:60:fe:0b:5c:9d:93:d8:59:93:b9:69:
53:0e:97:38:ca:41:69:a4:29:7f:d9:f1:9a:01:df:
23:06:26:17:95:37:54:92:30:60:3b:dd:fa:66:f2:
84:27:c8:71:52:46:0b:22:6c:f9:f0:ba:83:67:dc:
09:c2:af:c5:ba:14:2b:6c:63:08:15:a2:e5:85:66:
07:8e:86:12:3a:bd:78:61:90:9d:c4:cd:90:95:fb:
44:7f:92:41:a9:7b:00:81:e3:c3:b8:67:c7:f6:7a:
e8:12:ac:a2:95:24:de:d3:0c:5b:08:9b:18:87:a1:
32:f8:b1:74:33:98:ea:a5:21:ec:79:8f:97:63:f9:
c4:02:97:bb:22:ad:b3:f5:f2:35:08:d6:c6:e3:87:
a0:0f:4c:4d:24:bc:02:28:6e:0c:a7:0e:40:6c:a6:
8e:e3:3e:f5:27:85:39:3a:34:ca:ea:84:b9:6a:44:
02:a0:77:01:44:0e:01:60:4c:71:b1:7b:9c:a1:16:
8d:4f:68:2a:a4:87:25:02:92:a6:a7:45:17:02:cc:
f0:27:c3:e7:a6:1e:5d:a7:f2:fa:66:5f:5a:30:2c:
5c:7d:e8:ce:da:22:42:d9:57:c6:6c:4e:93:3f:c7:
dd:a9:96:2c:b5:44:ec:a9:a1:b6:6f:c1:e6:69:36:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:11:74:C0:87:F4:21:7E:06:4A:8E:7B:C7:3D:01:C3:D9:AD:51:A5
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ORF0wIf0IX4GSo57xz0Bw9mtUaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.111.0/24
185.109.22.0/23
Signature Algorithm: sha256WithRSAEncryption
44:f4:f6:e3:7c:fb:58:eb:79:45:4f:95:ea:e2:c9:a3:53:6e:
93:8d:a1:43:6b:49:2a:1c:df:c2:3d:b9:9d:c3:5b:b4:76:71:
af:2f:3b:b4:c5:a6:a8:a8:ee:f7:d6:e3:7f:5d:97:36:41:1b:
49:5e:8f:89:e7:f8:da:77:b6:e2:d7:b8:47:83:79:fe:25:b8:
14:d8:2d:93:e9:d0:51:4e:4f:0b:9d:b2:16:33:1d:55:8c:c5:
be:b8:4a:69:1e:ae:04:47:5d:d0:14:c0:5b:7a:c5:98:df:37:
c4:00:f8:fd:fc:ab:79:b7:31:c2:1e:31:a3:62:f9:fb:da:76:
77:f6:04:c0:53:94:e5:cb:34:3d:3e:92:0d:8a:1b:42:68:ec:
47:97:11:07:b1:2a:e9:7a:6d:49:a3:a5:41:4e:df:c3:6d:ca:
d6:91:97:9d:26:81:68:b7:2a:26:f8:ea:00:af:fd:e5:0f:cb:
ed:1a:54:73:36:6e:5c:43:77:01:a0:7d:93:a1:bd:d2:be:5b:
b6:a0:e9:91:7b:40:9b:b6:ee:cf:0b:f4:01:38:bf:53:9f:7c:
60:81:aa:76:3f:e6:80:d0:80:a6:24:e9:fe:06:41:ad:72:2c:
a2:70:44:67:c1:ea:c4:8c:48:ba:c7:08:bb:aa:52:9d:96:2a:
bb:7c:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:47:27 2025 by rpki-client