Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/0z007PNhTMTxU6x4l8EETY8ToLE.roa
File: 0z007PNhTMTxU6x4l8EETY8ToLE.roa (raw, json)
Hash identifier: u3KQ7J6hpoaw639bBvV6hHqNbQWhqLYiGZHpd1CoGHY=
Subject key identifier: D3:3D:34:EC:F3:61:4C:C4:F1:53:AC:78:97:C1:04:4D:8F:13:A0:B1
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 019802B75F7408E10A600B12DBEDDE756C7F
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/0z007PNhTMTxU6x4l8EETY8ToLE.roa
Signing time: Sun 13 Jul 2025 07:37:08 +0000
ROA not before: Sun 13 Jul 2025 07:37:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39216
IP address blocks: 185.72.252.0/24 maxlen: 24
185.72.253.0/24 maxlen: 24
188.72.1.0/24 maxlen: 24
188.72.4.0/24 maxlen: 24
188.72.5.0/24 maxlen: 24
188.72.6.0/24 maxlen: 24
188.72.7.0/24 maxlen: 24
188.72.34.0/24 maxlen: 24
188.72.35.0/24 maxlen: 24
188.72.56.0/24 maxlen: 24
188.72.59.0/24 maxlen: 24
188.72.60.0/24 maxlen: 24
188.72.61.0/24 maxlen: 24
188.72.62.0/24 maxlen: 24
188.72.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:02:b7:5f:74:08:e1:0a:60:0b:12:db:ed:de:75:6c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jul 13 07:37:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d33d34ecf3614cc4f153ac7897c1044d8f13a0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:82:3b:56:f3:03:a7:e9:97:3a:b3:b6:21:
d6:4d:a3:2c:11:30:fe:6b:c1:25:23:0c:1f:0b:83:
45:3b:70:b1:f0:d1:10:74:8b:41:1d:33:c9:ea:51:
71:2e:4b:68:04:8f:03:8d:d8:6f:23:47:ef:ff:c0:
31:0e:59:60:32:08:0b:25:d1:2a:8a:c4:c5:01:a4:
d2:d1:b2:7a:6d:1e:d3:4a:2e:06:10:94:f1:f3:85:
17:ae:51:20:4d:5a:9c:e6:83:97:d5:ad:3f:42:59:
2d:fb:18:42:01:2e:71:19:2d:e7:8f:ec:4c:5b:f7:
2a:d0:72:dd:71:ac:b8:2a:f0:9e:49:b5:c8:d7:db:
8c:1d:dd:e4:1e:0d:44:7d:23:2e:1e:cd:eb:e5:17:
e0:26:9f:3b:d9:5c:36:8e:43:af:65:b4:89:fd:51:
b5:db:1e:59:ab:0c:dd:47:ee:98:8a:f0:dd:fd:cb:
2d:44:c9:96:c9:1c:bd:1e:79:51:7f:0d:f1:73:de:
ce:f7:4b:f1:1e:1f:c1:db:e5:c1:37:28:74:58:63:
71:b3:83:ab:95:c8:93:50:10:ee:c3:cb:d5:98:ca:
08:02:42:16:d8:b1:f8:d9:7a:3b:ab:f3:00:26:0e:
d1:a1:51:6e:6c:5a:ad:5b:b6:c3:69:b6:d6:76:ba:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:34:EC:F3:61:4C:C4:F1:53:AC:78:97:C1:04:4D:8F:13:A0:B1
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/0z007PNhTMTxU6x4l8EETY8ToLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.252.0/23
188.72.1.0/24
188.72.4.0/22
188.72.34.0/23
188.72.56.0/24
188.72.59.0-188.72.63.255
Signature Algorithm: sha256WithRSAEncryption
ce:b2:f4:d8:0c:19:79:ae:62:93:67:fe:52:2a:ca:38:df:94:
e4:2b:0f:76:ee:e3:54:6e:07:80:38:6c:47:7d:b9:bf:35:76:
84:c6:12:de:56:f4:3a:3c:70:33:ea:be:69:15:04:43:f9:e6:
01:3d:bf:86:6f:34:b1:dd:74:65:9b:7d:2e:55:92:53:60:9a:
c2:03:60:3b:2d:7c:e5:c1:a2:0b:21:db:62:ce:21:2c:68:07:
e7:bd:c6:c8:7b:46:c9:98:25:d6:e3:c8:45:ba:10:d7:53:90:
48:5c:3e:bf:c6:b5:65:67:7c:c9:f6:d2:e5:39:78:7b:f2:23:
a0:7c:b7:6e:36:50:c2:c6:87:db:c9:2e:bb:fb:e4:c2:41:61:
60:80:f9:f7:54:b7:ed:ac:8f:4f:0b:a6:99:a6:ba:d8:51:30:
98:fa:3a:ef:48:ba:b8:0f:46:65:75:99:1e:c3:31:da:d6:2f:
3b:12:0a:af:e1:57:c7:18:f9:17:51:86:36:88:0c:9d:5e:c0:
87:f5:5b:03:3f:02:a5:1b:17:17:10:ca:d5:63:bf:70:c2:b5:
45:46:99:ae:1b:ec:05:9f:9a:9d:d0:1b:e3:84:2b:64:7b:02:
fc:af:11:de:c2:be:e9:e7:f0:23:94:1d:a8:bd:0c:3f:b7:47:
3e:2c:69:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:25 2025 by rpki-client