Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b6AemGF5SVVl2sf5nqXBJQO3b2w.roa
File: b6AemGF5SVVl2sf5nqXBJQO3b2w.roa (raw, json)
Hash identifier: UMLPhYGb1fGIENqRCp3C7dogGl1eeRwffagYwJ5N1ZY=
Subject key identifier: 6F:A0:1E:98:61:79:49:55:65:DA:C7:F9:9E:A5:C1:25:03:B7:6F:6C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01981E0D66B7BEFD0B94F8E615CF1303290E
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b6AemGF5SVVl2sf5nqXBJQO3b2w.roa
Signing time: Fri 18 Jul 2025 15:00:51 +0000
ROA not before: Fri 18 Jul 2025 15:00:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209847
IP address blocks: 2.56.119.0/24 maxlen: 24
45.15.178.0/23 maxlen: 24
45.15.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1e:0d:66:b7:be:fd:0b:94:f8:e6:15:cf:13:03:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 18 15:00:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fa01e986179495565dac7f99ea5c12503b76f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:c0:24:c8:4b:d0:7e:f9:1d:0e:0b:73:97:
6a:bd:16:e6:63:c5:51:4b:86:20:d4:33:93:d6:b4:
bd:2d:ab:2e:5c:bf:4e:74:5d:8e:bc:50:34:83:c6:
7d:06:aa:e6:2d:f4:e8:50:b5:0f:55:52:28:64:03:
c3:de:3c:2c:7b:6c:79:99:a3:36:2c:4d:17:e5:b6:
d4:70:42:fe:dd:d3:e4:42:ea:6d:11:8b:b3:cc:b7:
8f:d3:d5:f0:0f:9d:5e:c2:12:04:f4:1d:b2:0e:d4:
0e:1f:2f:76:e5:9f:d8:7e:bc:e7:45:98:60:1a:66:
26:ad:fc:15:24:a3:1e:f7:ca:24:12:8b:0c:a5:ef:
40:7e:db:c4:19:3d:86:32:37:82:17:12:c9:cd:7f:
1b:4f:8d:47:cb:1a:52:41:2b:1a:08:68:96:85:2c:
46:d3:00:97:e2:bf:6e:d1:52:bd:85:16:f5:8d:70:
a6:fe:b4:14:28:ad:d1:58:ca:9c:b8:79:ff:47:f6:
e4:3c:92:cc:53:a0:14:9d:32:32:c4:18:a3:4c:18:
89:83:41:90:14:e9:69:f4:bc:06:bb:95:54:2a:04:
91:f6:ad:9d:dc:cb:7f:d3:ba:73:07:e0:82:10:d0:
80:fe:0c:fc:dd:10:84:8c:cd:c4:83:ef:fe:5f:97:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:1E:98:61:79:49:55:65:DA:C7:F9:9E:A5:C1:25:03:B7:6F:6C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/b6AemGF5SVVl2sf5nqXBJQO3b2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.119.0/24
45.15.178.0/23
45.15.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ed:b8:e9:39:18:54:c0:0b:cf:01:af:13:51:ac:99:9f:97:
04:b1:b6:23:78:13:77:37:d2:40:b0:79:27:9e:37:3e:e0:39:
06:4d:cf:b8:79:4e:4f:74:9c:44:b1:6b:ab:1e:bc:11:f0:1e:
76:47:01:82:65:0e:9f:18:ed:4d:d8:1f:04:3f:03:a1:a2:29:
53:88:e2:69:06:3d:d5:ce:ab:01:a5:5c:2f:70:2f:0f:48:21:
a8:ca:0b:01:b0:61:a6:00:dd:81:2e:af:b5:14:a8:fa:ef:28:
17:15:c3:b4:a2:9e:4a:e8:48:54:19:fc:6e:63:03:08:ad:c0:
cb:ad:2a:52:a6:c5:d4:c3:d8:df:5f:b2:fd:50:88:60:86:a7:
dc:e6:d8:dd:37:cb:d6:69:2f:58:47:7c:44:7c:0f:c8:11:a9:
85:4e:d5:bc:47:93:93:02:e6:11:2c:21:e4:8c:c8:72:06:a1:
66:c8:4a:69:22:30:73:29:2a:56:07:b0:ad:9e:d1:e8:6a:21:
37:5e:5d:15:78:5c:1e:a9:7e:af:54:20:a5:a6:eb:72:3b:e2:
81:76:a7:7a:2d:85:4d:b6:dd:e0:5d:cf:f5:43:2c:20:60:b1:
f2:96:10:79:73:25:96:10:f8:15:53:ae:cc:35:a5:93:4b:36:
c7:e9:39:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:26:26 2025 by rpki-client