Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9V-wRIjZz_7Kbuc-ZpFANJY43eg.roa
File: 9V-wRIjZz_7Kbuc-ZpFANJY43eg.roa (raw, json)
Hash identifier: raB+O2AS/JTjr8iMHBGswQfqoUX8OI+aiElvdmvcZ50=
Subject key identifier: F5:5F:B0:44:88:D9:CF:FE:CA:6E:E7:3E:66:91:40:34:96:38:DD:E8
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0197E023A85E89D9BD6736CA8AA0603D1B9F
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9V-wRIjZz_7Kbuc-ZpFANJY43eg.roa
Signing time: Sun 06 Jul 2025 14:28:42 +0000
ROA not before: Sun 06 Jul 2025 14:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205220
IP address blocks: 212.16.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e0:23:a8:5e:89:d9:bd:67:36:ca:8a:a0:60:3d:1b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 6 14:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f55fb04488d9cffeca6ee73e669140349638dde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:b1:d0:70:99:ff:01:7d:ec:62:e3:25:a0:
e7:fa:7f:1f:27:96:27:6b:25:5b:52:f1:0b:0a:e6:
a9:d1:85:f1:56:72:58:35:4c:fc:9f:19:78:c9:d3:
63:3a:63:8d:1d:77:30:fd:45:68:5d:12:b8:69:c9:
59:82:6e:d2:98:41:84:0c:bd:6d:b0:64:37:8c:dd:
2b:06:ff:cc:d1:a9:56:a5:1a:16:ed:c3:ee:2e:ad:
0b:d0:76:39:bd:00:32:57:70:ad:cc:0e:f1:4d:11:
04:d2:a5:c9:4f:fc:8c:a5:59:56:d9:a5:8f:d0:91:
d2:44:9e:e9:a3:9d:36:84:3a:24:2a:9e:f1:1a:f4:
47:37:1b:51:23:f9:0a:46:60:ab:8f:5c:cd:8a:09:
f0:8f:ce:3f:4c:b2:85:53:7b:a9:33:1e:79:bb:48:
67:5f:01:1f:7c:3a:2d:23:73:a7:ca:fc:d4:a3:2f:
31:8c:bd:08:3b:9f:60:64:1c:66:8c:5f:1a:b7:8d:
9a:da:4e:8a:40:5b:74:fa:f2:e8:3d:16:a7:b6:f4:
ff:1e:3f:73:54:51:5d:f7:98:35:d4:32:bb:98:0c:
ce:20:4b:d7:33:22:e3:84:16:8f:60:f0:45:e2:af:
66:59:56:23:7a:43:e4:8c:7a:33:fc:82:fb:ae:a6:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5F:B0:44:88:D9:CF:FE:CA:6E:E7:3E:66:91:40:34:96:38:DD:E8
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/9V-wRIjZz_7Kbuc-ZpFANJY43eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ce:ac:e6:a9:ce:84:4d:83:9a:1e:e3:38:62:ef:ba:2a:8b:
28:aa:f2:9f:93:16:fb:c0:63:6e:83:32:e0:c6:67:74:9f:d0:
d2:1b:a7:60:7d:c0:7e:8d:8f:74:74:70:ea:62:56:a8:67:d6:
e9:3c:f2:1e:9d:c8:98:1f:65:6c:48:b5:53:67:12:3c:6f:60:
4c:79:ee:b8:00:69:1a:48:8b:3d:55:2a:e7:3b:3b:ce:dc:c0:
58:17:ab:de:f2:2a:9d:eb:59:ed:b7:45:2a:ba:f9:f5:28:61:
26:16:23:b8:d1:d7:3f:db:fb:f6:d3:02:d9:1d:18:5a:19:a7:
2c:1a:2c:2b:dc:9d:c9:96:12:bc:2c:7a:d9:3b:89:0a:63:e9:
6b:01:f5:c6:42:c4:40:81:40:c1:1f:cd:cd:85:42:b0:96:72:
4e:32:a0:3a:36:23:2e:23:0b:94:b0:a1:ac:47:35:26:63:40:
25:3c:46:cf:e7:74:25:b1:76:24:dd:5b:ab:16:64:bf:fb:d6:
25:fe:fb:a0:8d:9b:bd:3f:f8:b6:3a:f3:b1:09:97:42:18:c8:
17:f0:a4:b9:39:dd:67:9e:27:ad:32:13:01:07:c2:c9:f7:eb:
54:f0:c3:8c:02:3e:64:a4:96:02:e4:bc:e2:72:b5:cb:e5:81:
d3:1d:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:33:19 2025 by rpki-client