Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/1FOy1U_lPtu1-Ih_B8WFKjN4las.roa
File: 1FOy1U_lPtu1-Ih_B8WFKjN4las.roa (raw, json)
Hash identifier: Rs2B7kZOg5bKnwaWecY78bd4lNJsNXs69BxarIuh1l4=
Subject key identifier: D4:53:B2:D5:4F:E5:3E:DB:B5:F8:88:7F:07:C5:85:2A:33:78:95:AB
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 0197C12BB3F2AC56B221CDB16674997170ED
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/1FOy1U_lPtu1-Ih_B8WFKjN4las.roa
Signing time: Mon 30 Jun 2025 14:09:16 +0000
ROA not before: Mon 30 Jun 2025 14:09:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202319
IP address blocks: 185.166.104.0/24 maxlen: 24
185.166.106.0/24 maxlen: 24
194.34.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:2b:b3:f2:ac:56:b2:21:cd:b1:66:74:99:71:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Jun 30 14:09:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d453b2d54fe53edbb5f8887f07c5852a337895ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:8e:03:5e:b6:1f:b4:1e:40:55:0c:7b:65:
c2:2b:fa:94:2c:06:30:ea:1a:88:a0:0c:fc:18:17:
c5:04:d0:29:df:99:18:c0:99:fb:a7:e6:69:14:2f:
84:85:4d:e5:90:70:c2:19:a4:ca:e7:0d:e0:45:ff:
14:bd:7e:52:83:4e:8c:fc:b9:62:f1:68:03:c5:5f:
26:86:08:6e:fb:59:97:a1:c1:35:33:fc:b5:bd:12:
0c:a0:9e:02:08:34:08:f9:2b:79:fb:b1:52:e4:a3:
4e:ff:7c:49:16:48:26:d9:b0:f0:a3:7c:0e:c4:23:
34:6f:ee:7b:53:17:c8:53:12:21:7a:b9:e4:e4:6a:
b1:3d:c4:9a:57:b8:48:08:34:b2:68:2f:a3:1a:7b:
77:65:0e:79:cf:de:1a:71:f1:4e:ed:28:99:40:83:
3d:f3:e9:dd:50:c8:d1:25:ee:64:22:55:5c:56:fe:
78:a4:61:3e:7c:c5:99:2e:2b:ea:1a:b7:c4:e1:f2:
38:5d:aa:c2:f3:03:f5:52:b4:20:43:17:8a:29:bf:
7b:b1:57:7d:06:2d:2a:51:d5:04:99:52:d2:c5:e6:
c8:c4:6e:34:7d:47:0d:91:3d:b5:6f:86:f8:50:5d:
47:73:0f:5a:c8:d0:1b:0b:14:d0:88:39:e0:ed:ce:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:B2:D5:4F:E5:3E:DB:B5:F8:88:7F:07:C5:85:2A:33:78:95:AB
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/1FOy1U_lPtu1-Ih_B8WFKjN4las.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.104.0/24
185.166.106.0/24
194.34.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:52:46:08:2b:42:8d:e5:fd:bf:71:de:de:55:42:17:0d:f3:
db:9e:ca:4d:b7:62:87:8b:18:ee:01:86:f7:82:02:13:ef:00:
8c:1a:f7:39:92:3a:89:06:d0:e9:a7:2e:9a:cd:87:bf:8f:68:
43:83:80:b3:bb:18:fb:da:07:0b:6f:c0:ea:ed:72:1c:98:03:
45:aa:51:01:70:d5:58:de:f5:41:96:52:5e:2c:26:30:f3:24:
b7:1b:88:1d:89:4a:b5:24:17:5c:f0:74:c3:79:be:7c:a7:e2:
76:fb:7a:4a:be:0d:3b:07:b6:4a:5c:71:6a:4a:32:d6:1c:77:
df:a8:2d:18:42:0e:b2:6c:8a:15:37:1d:9f:4b:ee:44:5a:25:
ed:a3:02:5f:95:b7:71:d4:7f:0b:6a:01:e7:fd:20:e2:ba:fa:
db:c2:98:11:da:2e:d6:55:05:23:a9:40:f7:63:78:e5:29:ff:
ac:92:0d:f2:ee:4e:4e:64:dc:28:b3:58:ed:d0:24:1d:3c:7a:
a8:96:3a:ac:82:b1:e3:c7:d1:25:cd:fe:11:42:98:7b:eb:6c:
7d:d3:63:32:02:91:22:9b:89:50:ec:c6:59:01:d9:a5:f3:df:
91:c7:17:0b:a6:a3:e0:b0:64:b6:18:db:38:ac:14:6c:6a:fd:
13:86:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:27:25 2025 by rpki-client