Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/feQ5li1e8pty0nBP8TaETB2IpsU.roa
File: feQ5li1e8pty0nBP8TaETB2IpsU.roa (raw, json)
Hash identifier: EZjG2qUISYre7or4qON3r3LreyVPK90HEUXOKTltMcM=
Subject key identifier: 7D:E4:39:96:2D:5E:F2:9B:72:D2:70:4F:F1:36:84:4C:1D:88:A6:C5
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019809B53DEB5F43DF2037B71E0FBB1D7CC3
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/feQ5li1e8pty0nBP8TaETB2IpsU.roa
Signing time: Mon 14 Jul 2025 16:12:09 +0000
ROA not before: Mon 14 Jul 2025 16:12:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207064
IP address blocks: 185.125.48.0/23 maxlen: 23
185.125.48.0/24 maxlen: 24
185.125.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:b5:3d:eb:5f:43:df:20:37:b7:1e:0f:bb:1d:7c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 14 16:12:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de439962d5ef29b72d2704ff136844c1d88a6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:eb:36:cc:29:d1:a7:09:e1:fc:04:ef:61:
18:42:9a:90:ed:ce:16:17:8a:5f:59:83:10:41:ab:
5f:f6:5b:29:ef:03:94:60:d0:1c:9a:0d:87:f2:67:
65:85:29:b4:7a:a8:39:86:d9:9e:02:2a:09:22:59:
7c:14:63:d8:45:87:78:1b:ee:05:ba:0a:d1:54:a4:
8e:ba:e0:b0:3f:ce:5a:ea:a7:c9:1c:1a:26:8a:81:
6f:d1:4b:99:cd:4b:11:13:cc:99:9f:93:be:94:fb:
9c:b3:ef:63:95:42:44:73:40:93:b5:01:5b:e7:fd:
23:0e:cc:6c:68:69:ee:4d:20:c8:03:3a:61:0f:1a:
16:39:50:67:c4:57:44:c0:54:f1:35:94:2c:82:ff:
e1:ab:1b:87:19:d8:83:fc:a1:fa:72:63:2c:07:fa:
6c:16:ba:1e:e3:92:f8:7f:b0:25:27:df:68:fa:29:
7d:f8:c0:43:08:f6:e1:fc:0d:99:a7:7a:41:ac:cf:
26:6c:fe:11:29:7c:db:85:28:1f:3f:85:1b:24:e8:
7d:dc:20:b4:59:03:da:54:64:e7:8b:d8:c1:a5:d4:
c5:47:8b:f9:df:36:e9:8f:46:54:ef:50:8e:44:cf:
9c:34:07:2c:96:3d:63:95:4c:a8:84:6a:38:ef:d7:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E4:39:96:2D:5E:F2:9B:72:D2:70:4F:F1:36:84:4C:1D:88:A6:C5
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/feQ5li1e8pty0nBP8TaETB2IpsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.48.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:52:36:a3:53:10:cd:2e:4a:ee:34:7e:a2:ea:04:2e:86:5b:
d7:75:ef:4a:e3:c8:1f:3b:34:3e:c4:53:28:c9:81:7f:91:6a:
d3:28:e6:cf:50:63:e5:58:57:03:0b:ad:ff:75:92:15:7e:e2:
71:0d:81:a9:73:4d:e1:95:5a:ae:98:bf:e5:53:04:87:67:8c:
1c:32:99:87:74:60:d8:5d:2a:58:d2:7d:b4:f5:c4:77:16:f9:
42:cd:a7:1a:f7:a6:47:57:40:37:db:1d:b1:d1:61:c3:39:4b:
19:1e:fd:a1:b5:27:0a:87:7a:f2:1c:bc:44:9d:fa:9d:34:2f:
fa:7b:67:4e:ab:bf:0e:a9:69:04:c6:d5:8b:22:50:71:1b:25:
5b:31:1b:73:d5:19:04:3a:95:3f:a5:3e:5f:15:08:21:8e:00:
4f:1b:a6:d5:76:61:18:e1:f3:42:d7:1f:ab:dd:83:c8:fb:18:
f5:58:d0:93:66:ff:a6:3b:67:a0:85:99:a2:78:ab:89:0c:30:
bf:35:81:50:13:58:75:32:63:a3:e3:ed:25:de:c3:9f:f0:22:
f9:f2:23:b7:c3:d7:5b:37:30:5e:78:f9:23:9c:ef:72:76:90:
b4:8c:b3:38:4f:17:6d:2e:3d:bc:a9:e8:aa:70:00:7d:7d:5c:
90:67:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:25:36 2025 by rpki-client