Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/aSkETRaAPEJs87vkPB5vARFsUpQ.roa
File: aSkETRaAPEJs87vkPB5vARFsUpQ.roa (raw, json)
Hash identifier: aCCeFkfXg4eaGy/UUrllTCVipmWIQ10CNhHiLobPblo=
Subject key identifier: 69:29:04:4D:16:80:3C:42:6C:F3:BB:E4:3C:1E:6F:01:11:6C:52:94
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 0198369FAD008BE644714C1B90A4484DAD8C
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/aSkETRaAPEJs87vkPB5vARFsUpQ.roa
Signing time: Wed 23 Jul 2025 09:31:30 +0000
ROA not before: Wed 23 Jul 2025 09:31:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60902
IP address blocks: 185.24.16.0/22 maxlen: 22
185.24.16.0/24 maxlen: 24
185.24.17.0/24 maxlen: 24
185.24.18.0/24 maxlen: 24
185.24.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:9f:ad:00:8b:e6:44:71:4c:1b:90:a4:48:4d:ad:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Jul 23 09:31:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6929044d16803c426cf3bbe43c1e6f01116c5294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:5c:d8:f9:96:f7:1c:de:0e:e3:07:b2:d5:
ac:c5:5c:9a:ce:35:4a:61:03:47:2e:dc:fb:8d:7e:
f6:ee:3d:fb:8f:4b:62:43:3f:25:10:1a:30:c8:4f:
9e:b2:c2:a2:e8:56:3e:92:5e:26:37:8e:97:b7:32:
fa:b1:bd:32:81:4d:01:e1:1e:92:a3:c0:2c:10:e1:
2c:99:bc:11:e3:60:6a:07:8e:62:08:8b:b3:13:74:
16:0f:e5:7a:fb:4d:74:1a:75:59:f6:df:a4:56:1a:
b2:40:1e:d3:01:77:3d:69:69:59:6b:6d:ab:5d:4a:
cc:e2:4a:33:e8:88:7f:85:00:b3:bf:6b:47:a1:20:
f7:56:2d:7e:4b:43:87:f7:c3:0e:b3:11:a0:54:28:
4a:91:3d:80:e8:b6:3f:d7:bb:de:37:75:68:b5:32:
6f:60:91:72:f9:7f:fe:36:61:22:f5:7a:67:dc:75:
12:92:fd:31:04:16:fd:73:52:b0:02:73:6a:38:81:
9d:7f:a5:1d:fc:18:08:e6:5a:89:68:4b:0f:68:77:
25:f5:af:a6:f5:67:27:ac:3a:3b:10:1a:3b:5e:c3:
0f:71:f1:a6:7a:80:10:cb:48:c6:90:9d:07:d0:34:
98:8d:44:80:fe:f9:53:c1:38:34:5d:c9:11:79:e6:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:04:4D:16:80:3C:42:6C:F3:BB:E4:3C:1E:6F:01:11:6C:52:94
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/aSkETRaAPEJs87vkPB5vARFsUpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.16.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:3d:d7:b3:36:f8:d3:b9:5e:5f:03:8c:c7:08:af:f2:2d:f8:
be:d5:60:56:db:87:2c:d8:93:03:ca:fb:0c:52:78:b2:0d:2c:
8e:53:61:b7:72:c6:b5:c0:d0:f3:31:e9:37:03:d2:09:de:17:
ee:1e:64:d6:4d:a1:19:ae:7a:05:22:0c:bd:1b:92:31:b3:6f:
ed:dd:ba:06:e7:c4:ee:1c:a4:2e:6f:f1:c0:96:bb:48:cf:47:
1c:27:92:7a:8e:b7:ad:58:0d:29:0b:cc:5b:c1:e9:d6:9a:8b:
78:51:32:66:41:75:c4:ba:59:d6:b0:b7:c3:3b:b2:c3:72:07:
86:c9:b1:c9:2d:9d:c6:6c:cb:32:04:53:73:80:b2:95:39:c2:
1e:57:8c:ff:42:b7:6b:26:82:14:80:83:68:ec:ce:a0:c7:be:
f0:71:cf:ac:62:38:37:7c:c8:fe:e6:f7:aa:6d:2b:fc:7f:dc:
b1:2e:28:17:f4:e9:ef:80:da:c0:33:71:7a:f1:43:ed:29:ce:
e4:6e:d0:7b:cf:dd:08:89:e2:4b:6e:23:1e:82:25:9f:95:1c:
a8:bc:60:2d:6a:54:1f:ed:3f:9a:39:3e:ea:b2:4c:cb:c2:f1:
e8:b5:d2:4e:10:50:02:68:8b:07:3b:ca:19:b4:ab:fa:63:56:
c0:d9:46:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:01:58 2025 by rpki-client