Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/x6wZ_QvBNBllirp0YF_4hULUz6g.roa
File: x6wZ_QvBNBllirp0YF_4hULUz6g.roa (raw, json)
Hash identifier: LS8yqHK0GgRmzQoHTgjOfkAaUaGvQPYikmxDxfWx8H8=
Subject key identifier: C7:AC:19:FD:0B:C1:34:19:65:8A:BA:74:60:5F:F8:85:42:D4:CF:A8
Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Certificate serial: 0197F84D5BE4521D58C3F5D7EAD10B8A7F9C
Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/x6wZ_QvBNBllirp0YF_4hULUz6g.roa
Signing time: Fri 11 Jul 2025 07:05:08 +0000
ROA not before: Fri 11 Jul 2025 07:05:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210110
IP address blocks: 178.157.48.0/20 maxlen: 24
185.239.68.0/22 maxlen: 24
212.50.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f8:4d:5b:e4:52:1d:58:c3:f5:d7:ea:d1:0b:8a:7f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1
Validity
Not Before: Jul 11 07:05:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ac19fd0bc13419658aba74605ff88542d4cfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:0e:65:c3:ab:53:a6:0d:cc:5b:1d:dd:be:
bc:36:b2:60:07:c8:55:1d:6f:57:60:54:af:55:ba:
c2:04:ec:e5:a7:0d:3a:b6:cc:8d:d3:1e:47:8d:d0:
1e:72:33:15:98:46:02:bf:4b:90:f2:c5:2c:dc:fb:
bc:4b:93:93:69:3e:e0:18:9c:29:ff:98:70:8a:a6:
ca:f7:b7:6c:fb:d9:03:bb:84:43:f5:be:95:98:f9:
49:8c:40:65:60:54:2c:ff:a3:6b:27:8b:0c:b2:6a:
b2:d2:84:99:ae:d4:ca:5d:bd:ca:82:5b:d9:3f:f5:
10:98:e3:d5:9c:06:d1:15:ff:04:45:20:56:ec:6d:
1b:bc:40:0c:d6:fa:52:8b:ba:5f:d8:4e:94:91:d6:
2b:ba:43:1a:88:3c:0d:5d:1a:0b:ba:a3:cc:fb:6c:
1c:f1:3e:d8:5d:a7:d7:3b:4a:84:4f:ac:45:fa:5a:
38:f8:50:de:2d:48:22:0a:a3:31:23:84:b9:37:e7:
6f:7f:6b:d6:4e:59:cb:53:48:08:13:a8:d0:53:61:
e6:9f:cc:f4:ca:6d:8b:08:03:7e:fa:42:e1:f8:47:
1f:e3:bf:20:ab:bd:15:f9:de:ca:0a:50:b7:a2:cb:
6f:d4:99:34:f8:7c:75:d6:da:22:2d:a0:b6:81:5c:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:19:FD:0B:C1:34:19:65:8A:BA:74:60:5F:F8:85:42:D4:CF:A8
X509v3 Authority Key Identifier:
keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/x6wZ_QvBNBllirp0YF_4hULUz6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.48.0/20
185.239.68.0/22
212.50.224.0/19
Signature Algorithm: sha256WithRSAEncryption
04:db:e5:58:a0:59:f4:15:41:ed:f0:23:25:f7:b2:29:bc:44:
eb:39:62:fd:6d:1a:e3:72:6d:37:a1:de:74:12:ba:6e:fc:86:
70:7e:1d:81:18:aa:cd:0c:80:59:67:e6:16:b4:ec:95:f8:39:
5b:17:f9:0c:f6:a2:7b:f8:eb:6d:ad:a5:63:fe:1c:47:77:f1:
2b:0a:a8:4e:9f:59:c2:de:c2:55:b5:33:5d:84:88:cd:e0:82:
71:b8:dd:c3:2a:22:ed:aa:32:55:3b:75:e1:c5:9b:7c:07:38:
fa:c2:88:06:22:7a:ca:c4:6a:12:e4:07:c9:09:f7:1b:5c:af:
e5:22:de:ff:b6:f4:03:42:9a:e5:ce:12:cb:d6:4a:a1:85:1f:
45:05:11:7c:8e:89:f9:c8:71:57:09:54:dd:6b:7d:d0:fc:5b:
da:8c:58:11:22:54:56:8a:0d:39:db:1c:be:6d:4c:17:1e:ee:
3f:20:6b:39:cd:25:f7:99:5a:02:4d:8b:d1:bc:11:d3:93:c9:
d0:63:6c:c5:b1:2b:34:b3:cf:30:1d:df:40:fc:31:d8:93:62:
e0:e1:ab:7e:77:46:d8:b5:e8:e4:ca:82:b1:f0:47:c3:1a:cc:
9d:bb:81:a9:85:88:f8:db:80:ee:7f:87:f8:b8:ed:69:d9:7d:
4d:ca:8d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:21:12 2025 by rpki-client