Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Vo2fmYOdwpsZlWnrLb9PR2qxUiU.roa
File: Vo2fmYOdwpsZlWnrLb9PR2qxUiU.roa (raw, json)
Hash identifier: ofRGxwyei53l51n5v+e08DV9i8dygPEuLXkTPl6qbNI=
Subject key identifier: 56:8D:9F:99:83:9D:C2:9B:19:95:69:EB:2D:BF:4F:47:6A:B1:52:25
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 019819F1FC0F724C0DAA2F084A1AF390C3E3
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Vo2fmYOdwpsZlWnrLb9PR2qxUiU.roa
Signing time: Thu 17 Jul 2025 19:52:25 +0000
ROA not before: Thu 17 Jul 2025 19:52:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5400
IP address blocks: 62.172.0.0/21 maxlen: 21
195.171.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:f1:fc:0f:72:4c:0d:aa:2f:08:4a:1a:f3:90:c3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Jul 17 19:52:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=568d9f99839dc29b199569eb2dbf4f476ab15225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f6:17:31:4b:3a:63:80:a3:b6:e6:d2:5f:69:
88:3a:38:df:64:9f:c5:e3:34:89:0d:80:b5:7b:0a:
fd:c5:28:56:27:8d:6c:45:e4:d6:19:e3:69:6d:be:
93:17:35:26:fd:74:6f:1a:39:a7:17:ce:21:88:c4:
56:09:ae:1c:8b:43:60:ef:30:a6:a6:61:c7:cf:69:
54:a7:39:33:23:b4:c0:09:67:21:2a:e8:ca:46:fa:
71:b5:e9:83:d2:57:cb:54:49:b3:ac:b7:3a:69:85:
03:1f:e9:15:1d:82:2a:91:ac:5f:6d:88:49:df:87:
c2:14:fa:02:91:19:6c:37:b7:84:1e:8b:f7:0a:88:
47:60:1c:1c:3d:65:5f:73:5d:a8:c0:fb:db:f9:d0:
95:c4:3e:31:93:43:4a:56:32:af:08:01:c3:50:d1:
14:ff:5e:4e:53:ca:f0:a3:72:61:c0:90:37:29:ce:
db:cd:bf:25:2b:3a:20:d2:7c:2a:5a:8a:f4:3a:9e:
1b:1c:4a:2a:5d:53:54:0f:93:c3:6b:b4:b1:1d:89:
f4:c3:81:e9:78:62:ec:ec:37:90:2e:59:81:a2:8e:
7e:ab:a3:c0:81:38:52:7b:44:5b:cb:d2:a1:a6:a7:
70:b1:ea:eb:dc:55:78:5c:6b:84:f9:b6:e1:c3:75:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:9F:99:83:9D:C2:9B:19:95:69:EB:2D:BF:4F:47:6A:B1:52:25
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Vo2fmYOdwpsZlWnrLb9PR2qxUiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.172.0.0/21
195.171.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:33:84:bc:97:3c:19:e9:75:60:ca:a3:d0:f8:c9:29:e0:01:
0a:3f:23:40:52:95:0e:ac:59:60:d0:24:5e:8c:03:85:96:58:
84:1b:aa:b7:58:65:f0:e5:c8:d9:72:c9:3e:53:06:1b:ca:82:
be:b4:8b:62:1f:b1:cf:c9:a9:b3:c8:0d:bf:f5:3f:98:68:e4:
2d:7d:7b:9d:f5:a2:4c:74:03:64:36:8f:c3:f1:e5:d7:08:be:
ea:02:1a:98:74:dd:88:27:5c:fa:e7:03:cb:47:32:49:bb:e9:
74:18:ea:0f:32:5b:ac:f9:81:cb:85:37:71:16:70:02:54:80:
58:5e:c7:60:43:b7:df:7b:14:68:68:44:b9:05:04:24:ef:63:
2f:96:cb:60:f1:50:32:19:b5:69:2e:31:e8:82:ef:aa:f6:50:
0f:f3:72:c6:62:39:5e:6e:5e:38:2c:1a:ef:6d:e4:be:fd:f3:
41:81:6e:c4:bd:ed:c0:3b:45:ae:25:ea:82:82:1a:63:c6:b7:
4a:2f:16:6e:b5:2b:48:42:ff:ba:5e:29:be:61:b6:7f:38:da:
bc:74:9a:cb:5a:df:b8:9d:13:d6:b9:49:df:95:ff:8b:bd:cc:
cc:85:48:ae:eb:32:8e:f0:51:9e:f4:82:70:e2:f6:b3:23:96:
4f:bf:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:50 2025 by rpki-client