Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ijEIAuL4jrFE6NkqrOgyK1oVHFM.roa
File: ijEIAuL4jrFE6NkqrOgyK1oVHFM.roa (raw, json)
Hash identifier: qoahC4Wk7ieZKYzBtnIdoJZdkWWbXIhhOcXsbY3Cn10=
Subject key identifier: 8A:31:08:02:E2:F8:8E:B1:44:E8:D9:2A:AC:E8:32:2B:5A:15:1C:53
Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a
Certificate serial: 019818A5A688A5B28FE8D77687A5603D8415
Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ijEIAuL4jrFE6NkqrOgyK1oVHFM.roa
Signing time: Thu 17 Jul 2025 13:49:25 +0000
ROA not before: Thu 17 Jul 2025 13:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25227
IP address blocks: 185.244.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:18:a5:a6:88:a5:b2:8f:e8:d7:76:87:a5:60:3d:84:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a
Validity
Not Before: Jul 17 13:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a310802e2f88eb144e8d92aace8322b5a151c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:81:a0:db:24:46:83:d0:de:96:b6:17:12:
ec:2e:30:57:cc:7a:e3:14:d7:50:02:e1:70:58:b1:
74:c4:fa:1a:55:c8:60:b8:a5:54:bc:6f:0c:62:80:
f1:d8:c6:46:20:d2:8d:e2:4a:68:4e:dc:9b:dd:de:
79:14:8e:4d:7f:ff:81:83:ef:2b:8b:c9:6d:98:16:
66:d8:aa:cf:40:de:20:49:84:3f:d8:08:ef:e6:1b:
37:20:4a:4a:de:0c:97:cb:94:c7:4a:0c:64:af:08:
02:b4:5d:b4:4a:6f:23:d2:9d:21:5c:3d:66:b2:59:
fa:9f:08:76:88:28:b3:bf:17:ef:ae:48:8a:91:ec:
bb:6e:cf:f7:1c:08:27:32:39:a9:44:47:e3:cd:94:
ac:0a:a9:4a:88:36:06:a5:b6:95:81:c6:ba:96:bc:
9a:cd:a6:56:59:5b:72:f7:41:18:e3:54:7d:d0:6c:
3c:cd:52:10:ae:15:74:2c:20:c9:dc:ac:b5:55:40:
31:ac:03:3d:25:81:99:df:48:44:40:d0:8f:f4:17:
25:57:1a:a9:27:a9:82:4b:9c:39:7b:2d:82:10:f2:
c4:33:c3:1c:09:73:35:70:ed:18:86:59:64:41:9b:
3c:93:c7:0e:ea:81:82:f0:5d:2c:08:61:e4:9c:58:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:08:02:E2:F8:8E:B1:44:E8:D9:2A:AC:E8:32:2B:5A:15:1C:53
X509v3 Authority Key Identifier:
keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ijEIAuL4jrFE6NkqrOgyK1oVHFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.175.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e3:b9:6b:9a:4d:dd:7d:24:e1:cb:76:af:6b:c9:b2:7d:c5:
73:b4:5e:0d:f8:a9:26:f4:1f:e4:84:2d:d0:d3:bc:de:90:5b:
04:1f:66:cc:23:ab:58:00:34:7a:f1:ad:9f:8d:34:6d:24:05:
bb:7f:70:be:48:25:79:73:a6:c2:1d:7d:54:8a:24:e7:6a:79:
cd:ec:b5:23:c0:83:62:09:fb:2a:60:f9:72:1c:38:75:c4:08:
91:56:27:25:cd:dd:d0:5d:89:99:1e:7a:15:cc:fd:e2:b1:5d:
e5:85:c9:af:ac:55:cb:6e:4a:c8:84:a8:a2:11:e1:ff:16:61:
be:6f:86:6f:9c:ea:88:0f:74:65:96:43:f5:64:d3:1c:df:ed:
fb:a9:1f:60:21:6c:97:1e:73:15:81:5c:8f:2f:42:17:98:ff:
cd:8d:81:ee:b0:28:7f:30:2a:c8:7e:1f:cb:fd:2a:f3:8e:e4:
d2:2d:8d:26:52:57:88:ad:be:22:e4:af:c6:6a:14:23:22:7c:
59:1c:01:70:c9:47:87:50:1b:81:d7:95:4b:a5:e0:93:1c:6c:
ba:c1:68:fd:fc:33:aa:4e:ce:4f:9a:bd:18:6e:75:ff:ed:50:
67:41:eb:0e:6c:ff:46:54:8a:99:7a:7c:75:57:65:75:a8:53:
f5:06:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:36:43 2025 by rpki-client