Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/cVraBUUra2Aou2ZqOsBWw8nPl8I.roa
File: cVraBUUra2Aou2ZqOsBWw8nPl8I.roa (raw, json)
Hash identifier: 642iWL4+wWJYBDGiG624LzZO3fZuvIsSU+MyXY6PqjM=
Subject key identifier: 71:5A:DA:05:45:2B:6B:60:28:BB:66:6A:3A:C0:56:C3:C9:CF:97:C2
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 01981389E0DA6A59D098EFABF58CC90EABBA
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/cVraBUUra2Aou2ZqOsBWw8nPl8I.roa
Signing time: Wed 16 Jul 2025 14:00:59 +0000
ROA not before: Wed 16 Jul 2025 14:00:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 145.219.18.0/23 maxlen: 23
145.219.20.0/23 maxlen: 23
145.219.22.0/24 maxlen: 24
145.219.23.0/24 maxlen: 24
145.219.24.0/22 maxlen: 22
145.219.28.0/22 maxlen: 22
145.219.32.0/24 maxlen: 24
145.219.33.0/24 maxlen: 24
2a04:b0c0:10::/48 maxlen: 48
2a04:b0c0:11::/48 maxlen: 48
2a04:b0c0:12::/48 maxlen: 48
2a04:b0c0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Jul 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:89:e0:da:6a:59:d0:98:ef:ab:f5:8c:c9:0e:ab:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Jul 16 14:00:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715ada05452b6b6028bb666a3ac056c3c9cf97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:b6:22:f1:95:6e:b1:90:71:a6:6f:82:fd:
f1:5c:bf:8a:09:50:47:4e:fd:99:70:3b:8f:3e:43:
44:3e:e2:6b:48:db:67:4c:c6:2f:6b:0b:5c:28:d3:
68:8a:e5:66:2e:b7:0b:ab:f2:05:51:4d:d9:57:49:
0d:61:8e:cf:34:e5:11:fd:43:e0:c1:67:4f:be:7a:
7f:0b:1d:da:fd:f5:9b:8e:27:aa:f2:46:e2:92:fe:
35:dd:b0:7e:71:47:2c:a4:45:87:c5:e9:7a:58:55:
3c:c3:0e:c0:67:58:e9:0e:ed:79:1f:ed:43:4b:3c:
21:5f:4d:d6:7e:1a:75:21:2b:3d:9b:fb:25:17:bf:
05:d6:1a:b7:4e:df:5b:1c:d0:26:69:c0:6d:b5:23:
c9:95:87:52:e8:a3:1b:16:b8:a0:0a:c4:33:19:34:
c7:b5:7e:45:dd:2d:f9:16:22:86:2a:74:b7:57:05:
d4:75:a1:26:aa:c6:f5:33:3f:cc:94:27:80:e3:e3:
3d:26:26:3e:e9:8b:71:54:0c:a9:3a:a7:52:cb:28:
eb:91:7c:bb:ca:53:5b:d0:8e:d4:1a:9a:88:7f:6a:
4e:01:2f:c1:3f:bd:c3:4b:0c:81:0e:f7:9d:2e:5d:
5b:cf:21:29:31:9a:85:76:94:76:12:1f:bb:7d:e7:
92:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5A:DA:05:45:2B:6B:60:28:BB:66:6A:3A:C0:56:C3:C9:CF:97:C2
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/cVraBUUra2Aou2ZqOsBWw8nPl8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.18.0-145.219.33.255
IPv6:
2a04:b0c0:10::/46
Signature Algorithm: sha256WithRSAEncryption
6b:91:11:4d:21:b9:ec:4f:ad:a8:f0:02:d3:0f:6c:fe:d2:5e:
04:96:42:ec:58:a7:81:65:6a:79:bb:9c:b4:02:7a:8b:8d:4a:
26:e4:fb:23:9a:60:b7:e4:1e:d5:07:68:65:48:25:fe:47:59:
94:2d:ce:d5:d8:61:1b:80:0e:ca:16:91:78:00:ea:ad:6f:91:
11:fc:26:e3:f2:2b:95:5f:e5:cb:cf:fd:1b:e8:42:da:d4:94:
f6:c1:a2:3a:e6:c3:19:64:0e:e4:0a:ed:71:01:5c:6a:68:e7:
2a:26:54:98:b1:b2:c5:ec:4b:4a:38:c3:b3:97:19:6b:58:28:
1d:70:81:ef:da:ee:eb:a1:dc:52:5f:40:97:93:5c:02:a5:09:
30:32:75:0f:65:ae:b8:0b:19:5a:ac:fd:c7:0c:49:1b:0e:59:
9d:ae:32:0e:00:0f:c8:a0:61:07:68:0f:e7:ad:ea:38:af:11:
2f:21:f3:fd:c5:87:53:ff:ad:11:f0:b0:5d:c5:2d:bf:da:af:
58:72:69:18:0d:9e:ac:2c:50:a8:21:8f:5d:b2:0a:92:e7:49:
ad:a4:e6:21:86:f2:e5:7c:6f:fa:b5:13:a6:48:7d:41:2a:2a:
a8:2e:2e:96:c7:96:db:19:98:ac:d4:53:f6:ab:82:92:9c:8b:
02:06:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:38:42 2025 by rpki-client