Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0thlGR6Fv-qUrpD4YBqsEljSQk0.roa
File: 0thlGR6Fv-qUrpD4YBqsEljSQk0.roa (raw, json)
Hash identifier: t1HJ4JOe+BPdJypQBQLv5tG/+PXkQHDxYZLotiQGEkQ=
Subject key identifier: D2:D8:65:19:1E:85:BF:EA:94:AE:90:F8:60:1A:AC:12:58:D2:42:4D
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0197C09C5ECCE16FD4288314F631FBEC378C
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0thlGR6Fv-qUrpD4YBqsEljSQk0.roa
Signing time: Mon 30 Jun 2025 11:32:42 +0000
ROA not before: Mon 30 Jun 2025 11:32:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 185.143.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:9c:5e:cc:e1:6f:d4:28:83:14:f6:31:fb:ec:37:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 30 11:32:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2d865191e85bfea94ae90f8601aac1258d2424d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:80:6f:4f:4d:76:0d:ce:f6:fe:3b:9d:46:
c3:ea:45:31:de:b8:75:ad:f6:10:34:91:1b:8a:75:
ac:85:bf:43:8f:be:8a:6f:e8:e7:ef:61:d9:d5:d6:
2d:8a:35:97:d8:ad:cd:09:7b:43:38:5b:52:96:31:
a6:e5:bb:07:fc:46:61:c4:65:d7:59:2e:3b:6a:4e:
5e:b8:93:f5:e8:67:89:37:17:7c:3f:9e:10:52:9c:
c0:db:f2:8c:24:dd:39:b1:25:87:f6:4a:67:0c:4d:
98:bc:41:8e:6e:c6:1f:4b:1d:fc:e9:a3:f7:f1:ce:
16:52:0a:2b:ff:2e:b7:64:5a:3e:cc:d9:fa:06:af:
6d:da:9d:4d:a2:90:56:78:bc:20:c5:e7:ad:2d:20:
4c:1c:36:e0:33:23:17:0e:af:40:ed:a1:7a:49:cf:
37:c5:4f:22:6d:da:8c:1e:b8:b5:7e:0a:6a:ca:0d:
4b:18:78:4d:72:7e:0e:14:14:58:60:0d:38:98:4d:
bb:d1:eb:4f:39:3d:6a:69:41:62:c7:c2:bc:a0:c4:
7a:a8:7d:9e:21:47:28:15:02:58:23:6d:45:85:a8:
ce:39:b1:be:77:3e:b0:54:91:e2:f2:20:3a:88:85:
45:d3:c1:28:e6:8d:be:75:28:e5:31:ad:98:22:1f:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D8:65:19:1E:85:BF:EA:94:AE:90:F8:60:1A:AC:12:58:D2:42:4D
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/0thlGR6Fv-qUrpD4YBqsEljSQk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.73.0/24
Signature Algorithm: sha256WithRSAEncryption
58:de:f1:bd:9d:19:89:3e:6f:5f:e4:0e:6d:80:ba:2b:50:e0:
7f:59:da:1c:72:5f:77:90:39:38:0a:6a:3f:a1:ff:c3:a6:0c:
8d:d2:51:b8:8e:92:85:88:9f:69:aa:9e:b4:4b:5e:91:83:bf:
c7:29:53:d8:58:6f:7a:44:26:be:dc:c5:71:88:d9:bb:ea:d5:
42:a0:0f:ec:02:10:3f:d4:d6:83:bf:1f:e3:44:51:02:44:af:
19:2d:ee:e1:3c:30:b7:f2:99:8d:4c:fa:c3:6e:40:c7:e8:99:
a9:e2:af:e0:ee:b8:0a:70:d8:fe:fe:69:39:a3:92:b7:92:f7:
04:45:17:31:c9:a3:c2:89:49:33:07:7d:10:ea:ec:88:19:26:
36:55:da:cc:de:fe:4e:f5:50:01:20:12:aa:1c:be:1b:c4:98:
f0:07:3f:3e:b7:fd:8f:69:68:3a:ac:49:28:2b:69:e2:41:40:
45:b4:be:35:15:00:38:7b:07:da:f8:00:5a:30:a5:31:9e:9d:
a3:34:de:2a:e1:57:e6:bd:4e:6f:01:59:75:56:74:6a:3f:ea:
d8:f2:cd:2d:53:84:38:d5:18:77:78:4a:18:5e:91:28:7e:1a:
e0:6f:18:37:eb:8c:b4:ae:53:e8:dd:71:5c:ff:5d:52:e9:d8:
3c:2b:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:27:23 2025 by rpki-client