Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/eCrToYnvWc95HF4c8-Z46Ax87po.roa
File: eCrToYnvWc95HF4c8-Z46Ax87po.roa (raw, json)
Hash identifier: UTlBNWE8U5vqEsxq2BNabuWy3Pjej/uPZi6dyh2esQc=
Subject key identifier: 78:2A:D3:A1:89:EF:59:CF:79:1C:5E:1C:F3:E6:78:E8:0C:7C:EE:9A
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 0197C1F0F1D4D8F4D35A29DE764EFA14E3FE
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/eCrToYnvWc95HF4c8-Z46Ax87po.roa
Signing time: Mon 30 Jun 2025 17:44:42 +0000
ROA not before: Mon 30 Jun 2025 17:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 84.22.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:f0:f1:d4:d8:f4:d3:5a:29:de:76:4e:fa:14:e3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jun 30 17:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=782ad3a189ef59cf791c5e1cf3e678e80c7cee9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:30:d4:61:ba:05:23:23:b9:cd:ca:42:c5:
d0:c4:1c:5f:8d:21:7a:8e:f4:32:bb:5c:f3:6e:2a:
17:b6:6b:23:31:f2:68:15:04:ae:93:01:ba:26:69:
7f:59:be:40:88:2b:cc:e3:da:04:66:52:46:bf:7e:
92:75:93:8d:1d:ce:16:16:da:af:3e:aa:f5:e2:00:
4c:88:5e:7d:38:25:46:31:b1:66:09:5e:2d:c2:c3:
20:50:cb:62:f9:59:bb:d2:6e:22:43:5b:0a:02:be:
83:94:c1:e3:2b:34:ed:f2:cf:39:e7:0c:44:e0:23:
9a:25:c4:c3:b5:c0:ac:03:d9:34:a4:95:3a:c6:3b:
e6:46:c4:1b:ab:7c:6d:4b:6e:96:25:10:91:ff:05:
ee:c5:2c:3c:5e:6f:6d:9a:90:7d:40:d8:44:e3:0c:
e8:8c:db:34:f5:e5:35:78:19:bf:ea:51:39:65:33:
83:70:bd:a3:b0:70:73:9c:88:ae:1c:7c:88:ae:f9:
70:94:88:b0:62:34:80:56:b4:39:f1:5f:d1:00:e5:
65:c1:4b:80:5d:1c:86:2b:12:4f:1d:f6:36:97:5c:
62:cb:00:b2:a8:17:5a:c5:e4:bb:4b:81:55:cf:9d:
a9:76:65:ea:fd:7b:48:22:68:70:db:be:f2:86:ed:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2A:D3:A1:89:EF:59:CF:79:1C:5E:1C:F3:E6:78:E8:0C:7C:EE:9A
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/eCrToYnvWc95HF4c8-Z46Ax87po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:64:ab:e7:c3:6e:b4:5a:09:00:66:e3:d3:2e:ac:25:32:db:
64:d5:47:74:7a:da:2e:04:7f:6a:1d:e2:5e:83:bd:ab:21:b9:
92:8c:93:ae:8c:1a:3c:a6:f9:92:5a:a7:06:6e:3b:3c:fc:5a:
e7:06:ab:7e:2d:e1:b6:72:96:1a:24:25:7c:f8:3b:cb:6e:0b:
7a:b0:6b:75:69:6b:5d:9a:76:4b:75:02:fe:a4:c6:a0:ff:6a:
6b:e5:de:c4:d4:55:44:c9:85:31:b5:08:7c:ac:51:f0:8d:ce:
01:d0:e4:e2:3f:b8:bf:ba:dd:57:8c:24:1b:b7:80:32:76:f5:
f8:4a:0e:c0:96:ee:79:e0:99:77:6e:c3:b2:f4:ab:c7:7f:fb:
f8:d2:bb:cd:0f:c8:38:43:5f:6f:19:55:9a:ff:33:01:94:17:
fd:64:72:f7:fe:ff:3c:15:f3:13:02:8b:ff:a0:9c:88:df:b7:
d3:24:1b:f2:de:9d:c7:fd:72:41:af:1a:91:a5:bb:b4:d2:2e:
5d:91:dd:10:1a:ae:8d:f8:a3:47:6b:54:10:65:ab:e3:17:fe:
af:26:8a:f6:5d:bf:e8:ea:be:de:d8:06:16:f3:c6:fa:8e:c1:
90:6b:8b:a2:59:4f:f4:71:21:48:8c:ee:cc:54:31:ff:6c:ec:
a7:f5:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:38 2025 by rpki-client