Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/E3FztMCAtMgilCAueO-qKCo7Wmk.roa
File: E3FztMCAtMgilCAueO-qKCo7Wmk.roa (raw, json)
Hash identifier: 6Ghol0gt6H10sCoLo7viz0/JZ0gmP4D/5NSBvUb5O/8=
Subject key identifier: 13:71:73:B4:C0:80:B4:C8:22:94:20:2E:78:EF:AA:28:2A:3B:5A:69
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 01981474C1A02CE5D42F97ED6C6B300C4B2F
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/E3FztMCAtMgilCAueO-qKCo7Wmk.roa
Signing time: Wed 16 Jul 2025 18:17:32 +0000
ROA not before: Wed 16 Jul 2025 18:17:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214041
IP address blocks: 213.146.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:14:74:c1:a0:2c:e5:d4:2f:97:ed:6c:6b:30:0c:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Jul 16 18:17:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=137173b4c080b4c82294202e78efaa282a3b5a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:8a:17:21:75:3c:90:ba:e2:56:a9:55:bd:
fb:44:b2:48:1d:20:44:48:36:66:c5:97:9b:74:ac:
a1:91:d0:38:ed:88:8b:76:eb:a7:39:60:0f:61:f9:
08:3c:16:a2:92:9e:9c:e4:f5:35:f3:b7:ed:4e:8e:
1c:5c:3d:a1:5d:4c:ba:50:cd:f1:d6:27:7d:76:a8:
a0:82:80:b8:bb:0c:00:3e:cb:e6:85:a8:f1:b0:59:
ae:f8:f8:2e:a7:9d:6f:c5:28:a3:28:66:f6:6f:4b:
ae:90:3a:3a:e0:b2:14:57:a3:63:c1:9c:a4:d0:93:
d2:9b:7a:d9:47:ae:2a:5a:77:35:92:4f:04:2b:9f:
2a:98:b3:b1:b8:bc:f4:7a:56:b0:91:87:6f:1a:5c:
1c:92:cf:9e:7d:d8:75:d2:4c:4b:f3:99:29:1f:6c:
88:a1:a4:f5:0f:2f:7d:d5:3c:dd:5c:17:77:01:8f:
99:3f:ed:fb:47:0e:7f:d0:aa:a6:b9:a2:b3:d5:b6:
c4:21:bc:2b:26:ba:dc:70:0f:7b:4d:05:29:f2:7b:
da:41:e3:5d:6d:ed:b9:b9:f6:8d:e0:98:93:43:f3:
2f:13:84:d6:6e:fa:7b:c5:56:49:e6:51:1a:d3:f5:
83:6c:b5:dc:dd:69:e7:05:eb:7e:c3:4d:28:b7:89:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:71:73:B4:C0:80:B4:C8:22:94:20:2E:78:EF:AA:28:2A:3B:5A:69
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/E3FztMCAtMgilCAueO-qKCo7Wmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.146.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fc:d3:fc:4b:6c:26:77:be:b1:4a:00:cc:5b:66:4f:71:0e:
7f:78:45:7e:fe:8b:c8:03:2b:08:0c:bb:be:bc:c1:da:e4:1c:
03:65:fe:a0:f8:b8:7a:78:7d:5a:b9:4c:af:0c:9a:3a:f4:56:
87:55:99:ea:2f:db:bc:68:c1:a5:78:bd:31:82:26:30:7a:36:
02:e3:26:80:85:94:43:e9:57:77:59:65:9f:91:fa:a4:d6:ea:
e4:39:69:60:4f:46:d0:57:60:07:a0:b7:8d:c2:c6:ba:50:47:
d2:88:0e:1c:84:67:aa:1c:d1:8f:eb:96:03:f8:0e:e8:74:ee:
09:75:af:6f:cf:03:36:ea:30:6f:47:ea:cb:bb:45:91:7d:d3:
3f:4b:50:74:8e:de:0a:5b:42:86:8a:de:36:8f:0d:41:ae:2d:
4d:1b:3c:3b:7b:1b:e5:08:b7:fe:60:fc:66:d8:5d:ed:97:c8:
39:88:3a:6c:a7:dc:60:66:4c:d6:48:7e:d6:4c:99:51:d6:70:
a4:b0:a6:d3:08:4f:d2:f1:04:2b:31:13:7e:9a:f7:47:32:2a:
e2:35:a1:af:be:47:f5:75:2e:16:40:33:4f:2d:0a:c8:fb:74:
f5:77:2a:e2:b2:de:72:ee:79:a9:b2:9d:44:07:14:21:c8:ab:
3b:bc:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:10:17 2025 by rpki-client