Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa
File: 51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa (raw, json)
Hash identifier: kL30wYXOZY9LJWeAQp8i76XhBLFPrIojNg32/XqLy4o=
Subject key identifier: E7:56:FC:DA:A3:D3:D5:9E:46:41:89:F2:8D:C3:F9:44:C0:AE:D2:E4
Certificate issuer: /CN=225326a0b249d2109f5292961392495071d89c92
Certificate serial: 01977D534206D03356D416D14F12679087A7
Authority key identifier: 22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa
Signing time: Tue 17 Jun 2025 09:58:17 +0000
ROA not before: Tue 17 Jun 2025 09:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35782
IP address blocks: 195.10.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:53:42:06:d0:33:56:d4:16:d1:4f:12:67:90:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225326a0b249d2109f5292961392495071d89c92
Validity
Not Before: Jun 17 09:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e756fcdaa3d3d59e464189f28dc3f944c0aed2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:47:0a:75:66:37:15:08:b6:d1:d7:f5:ba:
40:cd:1a:3c:bb:d1:8b:f0:8a:90:e1:ae:dc:ab:66:
1c:03:28:24:0b:4a:8f:a5:fe:cf:3a:69:26:f5:94:
01:7a:53:4f:a0:51:1c:3c:d9:3d:5e:76:37:5f:51:
69:ee:df:fe:2a:3a:38:61:ae:90:4a:44:16:5c:e2:
64:dc:35:e6:c8:c1:de:d6:21:71:90:a8:15:6a:bc:
8d:01:d1:a0:6d:31:85:e5:56:f2:58:92:80:9c:08:
5a:19:d3:e8:f3:a6:1e:4c:1e:e5:cb:1a:d5:fb:0f:
b7:40:4d:5c:eb:11:58:fa:09:34:44:17:00:4a:f9:
c6:59:02:12:55:77:49:48:e4:03:af:6f:9b:e2:d6:
ee:36:f4:d3:fc:4e:75:d5:50:fe:0a:8e:08:c0:53:
9e:f5:14:dc:84:2c:26:c3:bf:27:ff:65:7c:12:45:
1b:b6:c5:62:8a:82:41:ef:5f:bb:58:f3:cd:7b:57:
42:43:d2:3f:67:b7:74:f8:06:ea:88:38:60:be:03:
18:28:20:03:b8:9e:95:08:14:ee:86:38:4f:d5:a8:
d7:7b:85:1a:07:b3:84:d9:c8:19:5c:42:26:a4:72:
b0:e9:9e:f5:03:92:4e:f4:fb:2b:ca:2d:9e:db:d4:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:FC:DA:A3:D3:D5:9E:46:41:89:F2:8D:C3:F9:44:C0:AE:D2:E4
X509v3 Authority Key Identifier:
keyid:22:53:26:A0:B2:49:D2:10:9F:52:92:96:13:92:49:50:71:D8:9C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/51b82qPT1Z5GQYnyjcP5RMCu0uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/28c2c0-e983-46ae-8b85-9fc933ef6127/1/IlMmoLJJ0hCfUpKWE5JJUHHYnJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b3:32:c8:76:3b:19:0d:35:db:12:63:fd:0c:01:16:8b:20:
d8:69:e6:93:4f:63:52:02:62:6e:f0:4b:1b:12:23:7c:56:17:
e1:e5:8d:17:c0:0a:f6:d9:83:ad:b0:a9:4e:1b:f4:18:02:c0:
4f:2f:0c:a1:f5:1b:c5:17:ad:e5:d6:39:c2:26:d2:1b:10:f3:
62:58:8d:e3:ac:39:05:08:97:a3:a7:2a:04:5c:84:32:94:5c:
b1:9c:bd:75:c9:bd:a7:da:d5:6b:d1:54:51:25:3d:4c:da:3d:
d8:3a:7c:a5:b1:f3:65:2a:87:40:8e:b2:f6:3e:7f:b4:cd:66:
08:1b:f2:96:c4:16:d9:4c:69:ec:b6:19:d1:75:03:24:14:52:
96:e1:eb:ed:b6:8a:19:13:5d:f7:d4:53:85:9b:d3:50:37:4b:
d5:99:f2:d4:4b:10:22:3a:19:5b:f8:65:2e:e7:42:e1:d4:05:
94:31:32:cb:d4:26:1d:17:b6:6f:7a:58:7a:50:c1:be:cf:36:
6f:3c:23:58:36:25:c7:ae:48:32:41:1c:8b:84:b4:e8:c0:74:
96:06:5f:df:74:25:1a:8c:82:d2:4c:80:6b:81:d9:00:65:91:
fb:1e:b2:4f:37:d9:3a:1e:c4:59:0c:00:e0:25:44:f5:8f:35:
97:47:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:26:05 2025 by rpki-client