Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/iTt7iFxwQ6zZeDLy8Yh92wc9dHQ.roa
File: iTt7iFxwQ6zZeDLy8Yh92wc9dHQ.roa (raw, json)
Hash identifier: l01+ksHSTRyaSzPORryEG5uT2aEVHezKBQmwrK+X8Zs=
Subject key identifier: 89:3B:7B:88:5C:70:43:AC:D9:78:32:F2:F1:88:7D:DB:07:3D:74:74
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019822906941F2E50744CC89AD7A98EA3C47
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/iTt7iFxwQ6zZeDLy8Yh92wc9dHQ.roa
Signing time: Sat 19 Jul 2025 12:02:26 +0000
ROA not before: Sat 19 Jul 2025 12:02:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214419
IP address blocks: 109.94.165.0/24 maxlen: 24
212.16.71.0/24 maxlen: 24
212.16.81.0/24 maxlen: 24
212.80.11.0/24 maxlen: 24
2a00:7d80:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:22:90:69:41:f2:e5:07:44:cc:89:ad:7a:98:ea:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 19 12:02:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=893b7b885c7043acd97832f2f1887ddb073d7474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:70:5b:09:79:bd:a9:75:bb:26:a4:b1:aa:
20:3c:d5:c0:3f:7b:cc:94:94:b5:df:da:f1:39:8e:
d2:d0:d7:f0:53:60:94:49:4b:12:89:02:b3:08:c0:
81:e8:de:8c:ac:d3:25:f3:83:8a:e0:0f:02:e6:1d:
7e:9a:91:88:09:e0:33:e3:6b:9e:de:6b:af:34:0c:
90:a7:c8:f4:ad:dc:1e:39:38:a0:39:c9:d3:f3:21:
fc:b5:3a:0f:9a:c4:a7:f8:e2:de:3d:09:8f:fa:d0:
17:48:43:2e:f1:fd:96:e7:69:8a:11:6e:af:8f:f7:
87:72:49:32:b9:97:8c:01:af:3e:b7:e5:ba:d4:b0:
4a:44:90:c5:ac:35:c0:28:d2:c3:4d:42:f8:c0:48:
2e:e7:93:55:bc:e0:52:9c:89:f3:3f:2a:5c:4d:76:
a8:da:43:8a:0c:11:c2:a1:43:0d:bf:e0:26:99:06:
80:2e:d5:b8:8e:a9:90:e9:5f:04:00:7a:59:10:65:
0f:e3:15:ed:1b:41:4b:f7:c3:e5:64:98:49:13:6c:
71:36:6c:18:6c:91:fd:31:46:aa:c0:df:df:6e:d3:
01:70:eb:21:f0:e3:90:ad:0b:d0:91:56:33:33:94:
b6:9d:8c:ed:46:91:13:59:71:d7:f5:77:3d:3c:4a:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3B:7B:88:5C:70:43:AC:D9:78:32:F2:F1:88:7D:DB:07:3D:74:74
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/iTt7iFxwQ6zZeDLy8Yh92wc9dHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.94.165.0/24
212.16.71.0/24
212.16.81.0/24
212.80.11.0/24
IPv6:
2a00:7d80:11::/48
Signature Algorithm: sha256WithRSAEncryption
b4:1c:db:68:48:4c:13:66:d7:7a:0f:bf:c7:2e:2f:ee:5f:be:
0a:d3:80:66:81:6b:af:2b:a3:fa:84:1f:58:e2:e4:59:b4:04:
83:fe:a3:37:86:13:58:14:ae:1d:ac:2b:39:71:af:bb:6e:71:
02:92:74:1b:ed:96:99:06:05:c9:72:af:5b:0d:5e:58:b3:56:
c0:18:73:5c:31:4c:4e:7c:f3:45:3e:9e:8d:65:04:e5:8a:ee:
a7:73:02:1d:c8:db:8e:fd:44:2d:f5:58:d0:27:e8:d2:e8:2c:
61:b7:53:22:1b:4e:70:89:cf:6e:8b:2d:40:13:02:ad:78:98:
52:8d:68:23:9c:47:c4:c5:9d:8f:a2:2f:5e:4c:49:29:9f:26:
32:37:ee:1c:61:da:9b:bc:d1:60:43:84:ea:43:f3:1c:f5:41:
45:bc:2f:56:e9:1f:b9:8c:d3:13:71:63:cb:40:87:89:1e:3b:
c8:aa:df:14:cf:10:7c:c6:92:85:92:a5:1b:47:1d:c2:21:02:
da:c2:24:54:ab:51:23:93:72:e1:2c:83:43:7a:56:7f:e3:a9:
c6:0e:e0:88:04:e4:c0:43:61:51:89:da:f3:1d:c9:b6:25:2c:
ef:f6:89:d9:df:34:80:2b:72:33:b0:40:16:26:4b:1c:80:7a:
68:e1:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:31:04 2025 by rpki-client