Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/2X95sls0uWU5PgwEsuvbZMPdH28.roa
File: 2X95sls0uWU5PgwEsuvbZMPdH28.roa (raw, json)
Hash identifier: WAXbNwzmu9B4g0l97d8oAvrkNfSo32YmgajceOiYDlc=
Subject key identifier: D9:7F:79:B2:5B:34:B9:65:39:3E:0C:04:B2:EB:DB:64:C3:DD:1F:6F
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0198295CD2CFD3F0C91960E97F03F1970DB2
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/2X95sls0uWU5PgwEsuvbZMPdH28.roa
Signing time: Sun 20 Jul 2025 19:43:25 +0000
ROA not before: Sun 20 Jul 2025 19:43:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210743
IP address blocks: 217.113.194.0/24 maxlen: 24
217.113.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:5c:d2:cf:d3:f0:c9:19:60:e9:7f:03:f1:97:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jul 20 19:43:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d97f79b25b34b965393e0c04b2ebdb64c3dd1f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:ed:15:db:57:3c:e9:62:e6:3e:13:d2:35:
29:13:f2:de:01:06:62:ea:4f:b0:4b:6c:4f:52:6a:
d0:03:5b:3c:44:7e:49:a1:18:90:74:71:f3:04:14:
b1:cd:9c:2b:83:5c:50:ad:1e:bc:97:ff:52:41:fe:
5c:de:eb:e4:90:04:10:69:5c:62:27:86:1f:01:7d:
4f:9f:97:12:a2:28:4c:3f:b6:ba:af:96:3c:9b:34:
b6:51:14:26:5d:a1:22:a1:bb:be:5b:52:86:31:96:
cc:26:bd:68:b1:3d:6c:5d:ce:5f:92:fe:d3:6d:75:
36:54:c9:4e:ed:c0:90:a2:6c:c5:59:2a:33:21:c5:
b7:4e:1e:51:a0:15:7e:73:e4:cf:97:2d:8d:f8:32:
61:8d:a9:48:a9:24:c6:86:00:f7:89:d3:97:fc:47:
d3:03:04:fa:cf:ff:f7:be:34:c5:03:2b:af:0a:52:
f9:73:83:44:e2:05:bd:20:4c:81:40:d2:9f:96:d9:
6a:fc:4f:76:4b:ce:ff:6d:c6:8c:b7:89:97:a8:f0:
7b:93:b7:89:e1:ab:b2:ef:74:77:df:d0:ef:2c:cd:
f7:8b:70:c9:3e:51:e2:1a:04:86:64:4b:6e:e2:bc:
c4:59:7e:90:7c:96:72:3c:df:35:89:64:6a:40:03:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:79:B2:5B:34:B9:65:39:3E:0C:04:B2:EB:DB:64:C3:DD:1F:6F
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/2X95sls0uWU5PgwEsuvbZMPdH28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.194.0/24
217.113.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:42:23:82:7f:5c:e3:08:71:2f:51:71:7d:52:4c:bc:a5:f9:
33:6d:21:30:36:62:56:27:01:36:75:d0:6c:00:3f:8e:ee:83:
b5:63:c2:a6:a4:55:0e:82:57:70:16:c1:55:c5:9e:39:e1:a1:
ed:76:4b:f4:07:ee:0a:d1:f8:b2:32:6d:f6:5c:87:36:8b:99:
45:01:92:ce:e8:71:db:db:8b:f8:43:40:70:32:79:74:71:58:
a9:76:b5:84:77:26:ec:0e:2e:a6:e8:72:c6:82:82:ba:47:b7:
fe:c3:6a:82:38:68:cc:22:db:e1:d4:56:4d:ef:d7:7d:fa:18:
0f:f3:60:d3:d2:06:fe:28:03:42:91:b0:b6:7d:08:b2:7c:f2:
5b:51:ce:e9:ff:f2:7c:98:2b:73:64:ab:f4:bb:32:87:dc:37:
c1:99:d3:44:6c:5e:3c:b2:bf:b8:98:97:e8:81:11:e7:54:6d:
29:55:fe:b5:25:a9:07:4f:f7:f4:26:7c:ab:43:80:df:0b:d5:
dd:21:90:9e:42:d2:c7:4d:e4:0e:6c:6a:e3:c5:b3:b9:a6:ae:
f3:23:bc:82:55:87:fa:57:b4:6d:54:66:c7:b7:9c:79:fa:c8:
b9:a0:44:3c:a2:25:3b:6e:03:5b:2f:60:a4:36:cf:09:b1:ec:
29:61:bb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:34 2025 by rpki-client