Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/71Dq_p3hxgANLwjWXIYIW1kQwvI.roa
File: 71Dq_p3hxgANLwjWXIYIW1kQwvI.roa (raw, json)
Hash identifier: EHVmaPv30nypIUsJLb0qilX75ExyVaga+Rdz8msfOTg=
Subject key identifier: EF:50:EA:FE:9D:E1:C6:00:0D:2F:08:D6:5C:86:08:5B:59:10:C2:F2
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 01982CC2923675036D691AF08A5E0B0ED1CF
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/71Dq_p3hxgANLwjWXIYIW1kQwvI.roa
Signing time: Mon 21 Jul 2025 11:33:25 +0000
ROA not before: Mon 21 Jul 2025 11:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 185.243.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:c2:92:36:75:03:6d:69:1a:f0:8a:5e:0b:0e:d1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jul 21 11:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef50eafe9de1c6000d2f08d65c86085b5910c2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:0a:41:db:52:d8:f7:1e:b7:9f:0d:33:da:
92:f2:8a:e0:2d:e2:3d:ee:ce:50:3a:ec:4d:2e:f1:
ca:17:8d:87:37:1a:9c:65:5b:c8:69:48:44:68:16:
05:15:95:3a:19:06:99:3c:6e:c0:83:56:a2:68:ca:
4f:33:e5:bb:b1:8c:46:98:f9:ed:ce:1b:3e:b1:09:
8b:0f:0c:26:85:2e:f2:7a:b8:87:cf:ef:a3:b2:d5:
fa:b6:05:3a:50:cd:64:5c:31:9b:76:9b:28:3c:28:
f8:3b:1f:77:93:67:ec:63:16:71:3e:16:db:9e:aa:
e3:83:40:d6:ec:59:5f:43:1b:ba:40:74:99:3a:e4:
df:0f:fa:72:f9:ad:96:a5:a9:5d:ca:e6:cb:e0:10:
d1:f4:20:a3:eb:4e:83:bb:6c:e9:a7:78:aa:a8:c5:
b9:f9:d6:8c:4f:74:88:0c:33:9b:2c:df:98:99:da:
36:47:07:cf:5d:bd:0a:52:51:42:6a:19:f4:8b:a9:
1d:f0:47:53:e0:8c:40:34:21:63:f4:9c:cf:6b:47:
e2:ef:8e:08:01:80:f2:24:98:87:d4:34:90:ac:35:
74:8e:4a:39:99:c8:26:fb:a8:24:94:ee:5b:e5:cc:
fe:46:78:30:ad:79:f3:c3:81:25:a3:83:5f:0d:60:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:EA:FE:9D:E1:C6:00:0D:2F:08:D6:5C:86:08:5B:59:10:C2:F2
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/71Dq_p3hxgANLwjWXIYIW1kQwvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.155.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e6:74:5e:87:c8:34:18:73:5c:bf:dc:81:d0:e7:a0:09:fd:
f8:00:18:3d:33:d1:c7:af:66:dc:ec:39:d3:84:8a:4d:22:08:
7a:c2:0a:81:07:b1:89:17:af:ec:26:e0:ea:f5:3d:b2:4c:be:
9c:d0:f9:bf:9f:a0:fc:c0:ce:d2:09:34:73:25:21:e3:05:f7:
2b:93:c5:1c:70:09:8d:1a:6b:bd:fe:0e:47:d6:a5:d4:d2:5c:
83:39:26:55:b7:b3:c5:87:ba:14:36:95:ac:a7:25:8e:d5:7a:
33:76:e0:36:71:cb:55:a6:0d:8a:af:d9:02:b3:77:06:4d:9a:
d9:de:d9:73:c1:7f:47:8a:18:13:38:e9:a9:f3:1d:03:fc:83:
34:f5:ae:c6:ff:93:e4:7f:a2:99:cd:07:28:09:24:b6:45:85:
c0:11:a6:11:db:3d:c4:63:d6:8c:33:39:d2:8b:22:52:30:a2:
48:12:9a:dd:fe:48:0b:a5:6f:cb:88:02:62:f6:ce:6d:00:2a:
67:50:a4:46:ea:f7:35:f7:e9:06:cf:26:c6:5e:bf:c9:cf:0b:
71:08:bd:de:0b:d5:3a:3b:97:87:a2:7c:dd:d2:c8:dd:6f:c1:
42:ec:0d:66:d6:f4:74:31:89:4d:1c:27:86:23:24:84:f8:4e:
51:be:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:00:11 2025 by rpki-client