Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/V3nOHEnCJP-Y80iAPhFlmBROCqE.roa
File: V3nOHEnCJP-Y80iAPhFlmBROCqE.roa (raw, json)
Hash identifier: u4LP1rpbwcMhaXZxdRjmUDhrY5qRbzrSLpn+2r2q6YI=
Subject key identifier: 57:79:CE:1C:49:C2:24:FF:98:F3:48:80:3E:11:65:98:14:4E:0A:A1
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 0197EAB91A7ED7C5340F51BBFC89577394E8
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/V3nOHEnCJP-Y80iAPhFlmBROCqE.roa
Signing time: Tue 08 Jul 2025 15:48:08 +0000
ROA not before: Tue 08 Jul 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47721
IP address blocks: 91.241.55.0/24 maxlen: 24
146.19.74.0/24 maxlen: 24
167.160.10.0/24 maxlen: 24
193.9.51.0/24 maxlen: 24
195.96.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ea:b9:1a:7e:d7:c5:34:0f:51:bb:fc:89:57:73:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jul 8 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5779ce1c49c224ff98f348803e116598144e0aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:b5:3b:22:2a:df:f8:dd:60:fd:c0:84:56:
59:29:23:ee:f6:03:f5:7a:6d:88:5e:7d:32:7f:30:
d9:da:fe:61:43:81:da:c2:9b:59:82:61:b6:8a:95:
df:45:da:93:2b:28:7d:f3:5d:8b:fe:e4:4f:7f:95:
72:c1:fc:72:36:b8:9d:94:ed:4f:22:7a:f6:de:7a:
b0:f8:8d:22:90:eb:52:67:3f:38:ca:30:03:35:c7:
ef:35:1e:e5:1f:73:8c:11:73:61:03:c8:1e:08:a6:
6b:d2:65:6b:b3:25:58:83:2f:31:35:15:a3:74:84:
f5:94:68:77:69:43:40:cd:67:8e:d6:a1:0e:85:a6:
99:47:41:25:1c:e4:46:20:d1:c4:9c:ff:d7:37:b2:
3f:33:c1:ca:16:49:fe:73:1e:0f:cb:ea:ff:55:1b:
a5:75:3e:01:75:9a:f7:4c:e3:bd:af:68:07:d0:c8:
bd:c5:dc:a0:cb:df:22:d1:48:7f:9a:95:ab:e0:e8:
05:db:5e:8a:e7:cb:a5:f5:c0:30:90:6b:ef:84:83:
44:47:f2:25:51:49:70:87:82:9c:29:b4:99:07:d3:
03:43:8f:fb:7e:f9:91:f1:03:78:7e:0a:41:19:a5:
e9:70:91:33:06:bf:88:5b:1b:97:2c:4d:f5:52:e7:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:CE:1C:49:C2:24:FF:98:F3:48:80:3E:11:65:98:14:4E:0A:A1
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/V3nOHEnCJP-Y80iAPhFlmBROCqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.55.0/24
146.19.74.0/24
167.160.10.0/24
193.9.51.0/24
195.96.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:87:b3:81:e9:0c:87:27:15:0f:e9:78:0d:66:45:c3:96:ba:
42:9b:d6:f4:e0:a7:d1:e6:0e:5d:b8:da:e5:fb:25:e1:a1:ce:
57:e2:2c:a3:a4:e4:e4:18:51:bd:46:a2:b7:74:52:5c:27:c9:
e3:af:f1:f8:8d:f1:66:d5:87:7d:1d:df:31:54:57:1b:84:4d:
f9:20:59:d6:c2:9e:2d:1b:c2:15:e6:f1:b9:00:0e:58:ff:92:
71:58:f5:e8:0f:94:2a:92:fc:8e:47:b1:1e:7e:b0:c0:5d:f9:
89:e2:eb:9b:3b:17:b0:5a:20:c3:3a:e3:50:f2:51:b9:d2:fc:
59:d6:8a:6a:e0:f5:3f:64:32:22:bc:6d:a8:e0:e6:47:98:44:
a7:4e:07:83:5d:20:fb:cd:61:5b:3e:04:40:61:24:b4:40:77:
a2:52:2e:dc:6a:5e:41:ec:d4:83:5f:40:48:49:8a:cb:37:ce:
1c:6b:34:ca:ba:42:9a:10:4a:13:70:ac:f0:a6:50:c9:90:17:
53:44:38:9a:f6:06:7d:26:90:7d:37:93:7e:5a:68:88:62:fd:
b9:15:69:3e:b7:50:b4:de:e0:dc:bd:bd:d8:77:6f:7d:eb:f6:
18:7c:46:b3:bd:d5:f9:c2:ab:f6:91:49:5b:8b:81:21:cc:45:
98:93:ae:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:22:09 2025 by rpki-client