Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/c6sVLFpMABfBHsrclAnB388tUos.roa
File: c6sVLFpMABfBHsrclAnB388tUos.roa (raw, json)
Hash identifier: vhEE4WlOqqbxvMv7WXdegqbQcshpUSSpERQSEa5d1qk=
Subject key identifier: 73:AB:15:2C:5A:4C:00:17:C1:1E:CA:DC:94:09:C1:DF:CF:2D:52:8B
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B27EB2F47E8F2FF3F6A5AB6D9C1BCA
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/c6sVLFpMABfBHsrclAnB388tUos.roa
Signing time: Mon 14 Jul 2025 16:09:09 +0000
ROA not before: Mon 14 Jul 2025 16:09:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 45.138.72.0/24 maxlen: 24
185.94.166.0/24 maxlen: 24
185.125.51.0/24 maxlen: 24
185.172.130.0/24 maxlen: 24
185.172.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b2:7e:b2:f4:7e:8f:2f:f3:f6:a5:ab:6d:9c:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:09:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73ab152c5a4c0017c11ecadc9409c1dfcf2d528b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:8b:e5:30:bd:e7:ff:a4:79:17:9b:a8:02:
25:ec:20:5a:a8:96:83:43:4e:8d:1c:4f:17:3a:fa:
d7:5f:f8:d4:3f:35:f1:48:c2:b9:13:70:6d:e7:4b:
5f:04:45:25:c6:c4:4d:04:53:2e:42:b1:35:6e:cc:
af:ac:52:bb:fb:58:75:18:10:ca:d0:29:3e:95:ce:
ef:60:9c:0b:d7:22:bc:1c:f9:c7:d9:67:cf:4f:80:
83:61:bc:ec:9d:07:03:c7:f0:c9:d0:80:4b:5f:72:
e1:76:f6:2a:3f:82:0b:52:66:e8:eb:b5:56:4b:60:
96:ef:72:43:68:b4:46:51:8c:af:21:22:09:d4:1e:
01:fb:c6:67:89:f9:f0:8b:47:71:b0:cd:7c:07:90:
bc:cb:76:c7:c2:27:57:fe:53:15:0f:bb:ae:20:5b:
92:32:f4:29:cd:70:81:d5:4f:11:01:c6:f0:21:41:
1a:2e:a6:bd:63:70:3d:fa:06:c0:31:d3:8c:8d:29:
5e:da:2a:57:6b:18:cd:e0:26:e0:23:5c:e4:ca:ea:
4e:2b:6b:78:48:fc:c3:84:35:08:eb:8f:5f:0e:6d:
9b:de:07:21:20:c1:ff:b8:3c:fb:71:c2:f1:bc:16:
27:f8:08:62:fe:2b:5e:b3:a9:ba:e8:a0:b1:47:a7:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AB:15:2C:5A:4C:00:17:C1:1E:CA:DC:94:09:C1:DF:CF:2D:52:8B
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/c6sVLFpMABfBHsrclAnB388tUos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.72.0/24
185.94.166.0/24
185.125.51.0/24
185.172.130.0/23
Signature Algorithm: sha256WithRSAEncryption
be:a4:70:30:29:2b:f6:7c:9e:96:9e:97:61:48:51:96:0c:06:
fb:e1:25:d8:6d:56:b0:c9:50:5f:2a:d4:80:27:3a:e3:5d:6a:
7e:89:99:3d:8d:30:87:1c:74:c7:fa:e1:35:d3:98:cf:6e:73:
25:d0:47:09:e4:9d:fc:e3:5b:10:91:46:b3:03:1e:a3:d8:33:
4e:be:12:71:3e:46:b0:82:03:2f:88:b7:03:46:76:60:e0:db:
e4:bf:36:48:83:0e:cd:de:29:c8:02:f3:99:f5:73:29:d0:07:
ce:59:98:f2:07:54:c9:10:12:4d:25:f9:56:79:22:fe:eb:c4:
f6:58:74:5f:de:90:e0:fe:37:1a:bf:8d:db:e9:99:42:7d:79:
14:96:dd:41:ab:a0:e5:08:58:4b:0b:cb:2c:2f:4a:64:fa:5c:
b0:75:93:76:e1:71:51:8c:27:00:02:34:39:a5:07:77:78:86:
de:44:bd:59:ee:f7:39:12:c8:50:30:90:ca:cf:6d:1a:73:4a:
cd:2d:0e:d0:f7:7f:6c:af:32:1c:95:09:21:17:f6:cc:ef:9a:
ae:8c:93:c4:29:a9:c7:fd:16:bf:f6:fa:31:a0:1e:9c:d6:38:
4a:0d:57:87:6b:f6:e0:d4:8b:f0:b6:e8:d3:88:b6:d1:78:3c:
65:61:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:24:36 2025 by rpki-client