Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/lUA4Psv--QayOhT_SsZZvDZxilM.roa
File: lUA4Psv--QayOhT_SsZZvDZxilM.roa (raw, json)
Hash identifier: YGf2R2IX409XBgVvc7ca6dAQRj+o7jLte4H3tVm4ZpY=
Subject key identifier: 95:40:38:3E:CB:FE:F9:06:B2:3A:14:FF:4A:C6:59:BC:36:71:8A:53
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0197CB4A2278EC4CD3E7EFC748028FD9A363
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/lUA4Psv--QayOhT_SsZZvDZxilM.roa
Signing time: Wed 02 Jul 2025 13:18:42 +0000
ROA not before: Wed 02 Jul 2025 13:18:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201909
IP address blocks: 37.35.53.0/24 maxlen: 24
37.35.55.0/24 maxlen: 24
91.235.122.0/24 maxlen: 24
178.157.111.0/24 maxlen: 24
188.119.158.0/24 maxlen: 24
188.119.159.0/24 maxlen: 24
188.119.162.0/24 maxlen: 24
188.119.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:4a:22:78:ec:4c:d3:e7:ef:c7:48:02:8f:d9:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jul 2 13:18:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9540383ecbfef906b23a14ff4ac659bc36718a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:25:5f:dd:5b:e0:aa:7d:a6:8e:4b:e3:53:
19:95:55:c1:47:1c:26:bd:df:74:ce:fb:db:8b:31:
ea:51:65:96:9c:da:d3:6b:62:f2:6e:fc:c9:44:57:
08:34:4c:e2:63:af:12:6a:f7:29:1e:ef:a7:78:d4:
6c:ba:52:b6:a6:e0:c0:43:64:39:00:65:eb:3d:f5:
9d:96:72:be:2d:6d:57:9d:de:90:c4:df:11:df:c9:
af:a8:79:4b:8e:3c:57:f8:05:28:12:7a:a8:06:74:
7f:91:04:de:b1:ba:6e:dd:f9:5c:0d:c6:f2:82:fe:
38:81:ec:40:65:6d:aa:95:8d:c0:b3:9f:44:d2:6e:
e9:a3:4c:70:55:2e:29:56:4b:a8:69:79:fb:80:30:
74:dd:f4:97:01:9f:82:4a:45:08:2f:c1:7e:90:7f:
c1:d0:18:d9:bd:1a:4d:7e:79:2a:53:ca:23:70:01:
2a:ed:97:d5:24:d2:be:f0:39:35:cc:ac:93:cb:34:
bf:19:ad:3d:81:61:c2:e9:3e:01:6a:7a:9a:3e:f1:
6f:bf:be:ad:9f:f0:1f:68:c4:6f:2c:ea:c9:5f:88:
df:a3:64:82:d7:c1:5b:1f:28:bf:b7:ab:c6:3f:9f:
c7:0a:d8:00:b4:04:58:4a:1a:eb:fa:0c:c2:1e:18:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:38:3E:CB:FE:F9:06:B2:3A:14:FF:4A:C6:59:BC:36:71:8A:53
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/lUA4Psv--QayOhT_SsZZvDZxilM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.53.0/24
37.35.55.0/24
91.235.122.0/24
178.157.111.0/24
188.119.158.0/23
188.119.162.0/23
Signature Algorithm: sha256WithRSAEncryption
46:cc:c0:78:a4:84:8e:1d:97:fd:1e:48:f5:59:c8:11:5f:8e:
67:1d:25:a9:d4:1e:9f:f6:9e:2e:af:8a:de:bd:e5:81:1f:4b:
0d:56:f6:70:fe:ab:46:d6:9a:d3:37:65:72:41:45:39:cd:1f:
5c:a6:58:1a:f6:8b:31:3e:00:a7:bf:00:49:e5:41:94:4a:5a:
cd:7d:1e:e1:a8:d9:56:5a:45:06:9a:a5:a5:a1:1f:34:32:0e:
ed:c3:6d:9b:de:93:df:7d:3e:e1:68:1b:68:94:ee:c1:dc:2a:
54:44:40:53:26:ea:91:28:93:a2:ab:40:86:f0:f4:b7:3b:b2:
11:8a:e8:e0:7e:e7:68:2f:77:86:cb:ef:c2:ac:06:b3:68:78:
04:68:29:03:5b:6b:df:05:00:ff:32:4a:3f:fc:e3:c5:13:12:
dc:e2:80:f4:42:be:b1:78:3d:38:18:55:81:fd:2c:f4:8c:b9:
af:b3:ae:73:84:36:aa:03:75:00:fe:cb:2c:82:3f:c7:67:0d:
93:94:4d:fe:d3:9e:11:27:1a:f6:c3:bd:6f:75:84:d7:7b:16:
3b:b3:15:58:e3:b1:0a:de:ab:00:7c:92:af:1e:e9:65:44:29:
44:e9:7e:cc:22:8b:73:95:5f:37:32:42:64:1a:80:08:24:08:
3b:59:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:36:25 2025 by rpki-client