Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/reN7rrshYwWrof_uScoGYGb7Plg.roa
File: reN7rrshYwWrof_uScoGYGb7Plg.roa (raw, json)
Hash identifier: rFMqv7Oy6J91+AD7KBPQ8nawq87bpZy2glcGz1gKTm4=
Subject key identifier: AD:E3:7B:AE:BB:21:63:05:AB:A1:FF:EE:49:CA:06:60:66:FB:3E:58
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01981021849F51CF644EB1E4FE65263FBCA8
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/reN7rrshYwWrof_uScoGYGb7Plg.roa
Signing time: Tue 15 Jul 2025 22:08:08 +0000
ROA not before: Tue 15 Jul 2025 22:08:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 82.163.224.0/22 maxlen: 24
130.255.68.0/22 maxlen: 24
188.215.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:10:21:84:9f:51:cf:64:4e:b1:e4:fe:65:26:3f:bc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 15 22:08:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ade37baebb216305aba1ffee49ca066066fb3e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:fb:25:a8:54:4e:b6:c2:59:d2:cb:c2:9b:
4d:c4:1a:97:78:4a:5e:e2:d3:c7:62:c2:5d:06:98:
8f:5f:20:2f:d2:4c:15:c8:d9:49:35:1e:d1:33:61:
8a:d1:af:62:6c:d7:76:44:e3:51:53:80:37:3d:f9:
67:e3:43:ad:c6:6c:7d:67:ac:ca:8d:c8:6d:6d:9f:
46:b0:c8:db:95:e5:a8:71:b1:1b:ab:fc:e4:fd:11:
34:6a:07:b8:b5:85:45:af:e2:d8:8b:9f:c7:f7:9b:
49:65:47:7b:f8:d2:ed:f0:f7:b9:b0:88:24:4c:22:
bf:05:e1:b8:ab:b4:99:c1:7a:e1:b0:ac:8e:09:f7:
1b:d9:96:96:58:0e:16:f5:6f:37:fb:bd:1b:23:0d:
3c:56:19:46:ab:5f:96:7d:47:27:12:f9:12:7d:77:
89:e1:83:a2:fc:2f:dd:4c:ad:50:54:b4:2b:92:1a:
10:e2:3e:23:9f:fd:cc:b5:ac:27:b2:f6:1a:3e:b0:
40:8d:30:19:aa:df:f5:73:8f:25:ed:c4:b8:11:e5:
81:76:57:3f:7f:9a:6a:b1:6c:43:fe:ce:6d:5d:8c:
25:dc:82:98:86:6c:64:c6:6e:cd:ef:49:9f:44:5c:
6f:d9:7e:cb:df:16:43:82:a6:91:19:40:8d:4d:81:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:7B:AE:BB:21:63:05:AB:A1:FF:EE:49:CA:06:60:66:FB:3E:58
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/reN7rrshYwWrof_uScoGYGb7Plg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.224.0/22
130.255.68.0/22
188.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:8b:fc:3f:e2:6b:f4:8d:ad:49:cf:14:d8:2e:4f:ff:d6:c9:
9a:7f:8a:1a:68:4b:9b:22:0d:5d:c3:e0:62:7c:eb:67:d6:21:
43:5c:20:75:f7:e9:11:85:42:44:1e:3b:80:82:67:01:65:76:
30:80:cd:16:b1:ed:bd:48:1d:dd:4d:21:fa:8a:bd:ad:89:fe:
c9:47:ac:51:ee:03:dc:03:2c:71:77:e7:62:98:f6:98:27:e9:
5a:02:b1:cd:6a:c8:65:07:98:f7:2e:82:ee:ed:9e:b3:5f:72:
a4:bb:11:e6:47:85:f8:ff:ee:1a:e4:c7:42:af:1f:d0:06:35:
e2:9f:f4:09:a8:95:8c:51:19:e8:8b:d7:4b:72:80:ad:8b:69:
32:de:b1:08:f4:f5:fe:ae:bc:68:7e:ff:3b:12:87:d9:76:52:
5c:ec:15:c2:f3:e4:85:c1:ee:c1:3d:2b:20:74:d7:cd:d4:a2:
0d:32:45:aa:7e:91:6f:fb:84:89:e6:08:0a:66:bc:a0:89:92:
7a:fd:70:c6:b7:7a:36:14:01:7e:de:bc:bc:04:0d:44:99:68:
95:de:a8:0e:0b:17:75:43:83:1f:71:64:2b:1b:08:eb:b2:9d:
a9:66:e6:2f:86:ce:eb:bd:c1:90:e2:ca:82:5d:f1:b0:ca:fe:
27:e7:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:26:45 2025 by rpki-client