Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/481IlwmD8sIUE5HBU_SRIWHjHs8.roa
File: 481IlwmD8sIUE5HBU_SRIWHjHs8.roa (raw, json)
Hash identifier: aCT1HOfqJetq3z9dimVkKGO6/G1+BY7ZYHirj6XD07c=
Subject key identifier: E3:CD:48:97:09:83:F2:C2:14:13:91:C1:53:F4:91:21:61:E3:1E:CF
Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial: 0197DBB29269044756FD2CAEC7CF30DB44BA
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/481IlwmD8sIUE5HBU_SRIWHjHs8.roa
Signing time: Sat 05 Jul 2025 17:46:42 +0000
ROA not before: Sat 05 Jul 2025 17:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 185.30.233.0/24 maxlen: 24
185.165.190.0/24 maxlen: 24
2a07:85c3::/48 maxlen: 48
2a07:85c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:b2:92:69:04:47:56:fd:2c:ae:c7:cf:30:db:44:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
Validity
Not Before: Jul 5 17:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3cd48970983f2c2141391c153f4912161e31ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:51:c4:f9:93:36:26:4f:9f:ca:9d:31:3e:1f:
39:9f:e6:f5:15:58:cd:47:85:a9:d9:b8:b5:7b:77:
43:6f:fe:24:9b:31:71:c5:8c:3b:f4:70:c6:ab:37:
23:d0:0e:86:d8:28:bb:f5:08:b4:1c:93:08:ff:f0:
13:c4:50:57:c6:2a:e8:71:74:d8:14:4f:70:f9:57:
9b:05:83:60:1a:a6:07:46:16:c1:99:6f:3e:32:6e:
0f:b5:fb:68:5d:34:c4:ba:17:84:fd:54:e6:c6:d9:
92:07:27:0b:fe:b6:63:91:d7:94:b4:c2:6c:55:de:
da:14:e8:13:fd:65:04:b7:a4:a9:50:71:25:25:9c:
20:f6:fe:c7:53:c5:5a:73:be:ee:38:fd:00:22:db:
79:e6:6f:61:5f:3c:4d:43:5f:09:6e:bb:22:82:15:
c8:51:7a:10:0d:65:c3:55:50:93:c4:7c:b3:9c:1e:
d9:16:2d:31:92:e9:08:58:db:57:9c:15:56:96:62:
97:19:64:2f:69:8b:43:51:3e:5b:47:ee:aa:65:c2:
49:ed:9c:07:16:6b:03:6c:cc:75:91:20:0c:8d:1e:
e5:55:b8:84:1e:61:09:ad:96:80:86:39:fa:94:63:
58:c2:9b:7f:44:63:68:c9:05:89:05:57:b7:ac:29:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CD:48:97:09:83:F2:C2:14:13:91:C1:53:F4:91:21:61:E3:1E:CF
X509v3 Authority Key Identifier:
keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/481IlwmD8sIUE5HBU_SRIWHjHs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.233.0/24
185.165.190.0/24
IPv6:
2a07:85c3::/48
2a07:85c5::/48
Signature Algorithm: sha256WithRSAEncryption
73:3b:72:00:a9:1d:d2:cf:40:f0:d4:ec:6b:d4:59:b7:2d:51:
99:53:4e:83:9e:e9:a9:e2:80:2d:80:d5:f4:4c:6b:02:6e:24:
39:61:db:71:50:e8:83:0a:90:e4:f1:2f:dd:84:a9:0e:a7:82:
84:fc:7d:d1:d7:5f:ae:bb:a3:77:53:e5:e4:8f:32:70:7f:fd:
05:73:b5:5b:a8:66:4d:b3:a0:e8:86:10:3b:ac:6d:f1:37:b1:
a5:12:a4:af:eb:d9:3e:85:94:71:d8:d2:6f:df:50:a7:69:ac:
73:71:be:9d:d9:cb:b5:b6:13:b4:01:13:92:65:a1:5b:4a:80:
d5:82:08:95:01:3b:74:72:1d:95:b8:dc:ef:a3:58:17:a6:75:
54:5e:e2:b6:5d:c9:ce:6b:c2:ec:ec:11:04:06:b6:8e:e4:a1:
a6:d8:92:26:66:e7:c4:40:a2:bb:4e:72:cf:81:a1:82:f2:69:
8b:72:74:35:13:ed:fd:c6:98:4f:0c:fb:01:b2:58:04:6c:40:
c3:c3:98:25:c5:07:5c:68:b6:e5:bb:38:05:10:66:60:76:98:
85:f2:3a:fc:aa:da:c2:8b:1c:f3:12:bd:49:14:f9:4f:df:cb:
19:6b:39:73:11:53:3e:ca:78:6a:ec:21:21:f6:a8:c2:2f:98:
72:73:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:15 2025 by rpki-client