Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1eriPp8vPS17lqG6WeK5qbYI-9I.roa
File: 1eriPp8vPS17lqG6WeK5qbYI-9I.roa (raw, json)
Hash identifier: u/Kd0StuwqibUy9HAMGHqM+13oxArcPuF9IWvpMsxCY=
Subject key identifier: D5:EA:E2:3E:9F:2F:3D:2D:7B:96:A1:BA:59:E2:B9:A9:B6:08:FB:D2
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019827B2301CF0B8D658269DA3829B29A9C4
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1eriPp8vPS17lqG6WeK5qbYI-9I.roa
Signing time: Sun 20 Jul 2025 11:57:25 +0000
ROA not before: Sun 20 Jul 2025 11:57:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197726
IP address blocks: 195.123.176.0/24 maxlen: 24
195.123.178.0/24 maxlen: 24
195.123.179.0/24 maxlen: 24
195.123.187.0/24 maxlen: 24
195.123.188.0/24 maxlen: 24
195.123.189.0/24 maxlen: 24
195.123.190.0/24 maxlen: 24
195.123.191.0/24 maxlen: 24
195.123.193.0/24 maxlen: 24
195.123.194.0/24 maxlen: 24
195.123.195.0/24 maxlen: 24
195.123.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b2:30:1c:f0:b8:d6:58:26:9d:a3:82:9b:29:a9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jul 20 11:57:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5eae23e9f2f3d2d7b96a1ba59e2b9a9b608fbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:b5:29:b1:24:3f:19:b0:af:c7:87:c5:a1:
08:e2:66:08:c8:1e:e7:ef:e5:1f:ee:27:c9:49:2a:
8f:c4:a6:24:d6:3f:c7:28:b5:e5:3a:f7:3d:42:c7:
2c:95:de:d5:ff:82:8d:fa:c3:bc:fd:2a:04:2b:73:
ad:89:98:c1:af:86:96:9e:5e:03:16:55:e5:3d:22:
fe:ca:e1:13:64:1e:3f:08:36:a1:a3:4f:e3:f7:4c:
29:00:1f:38:21:6a:c6:15:3d:af:30:3e:03:cb:ab:
5d:ef:3a:bc:59:f4:10:31:a8:14:5b:97:3c:64:39:
4c:34:32:7a:97:c0:3b:b6:d2:6e:6f:6c:41:a1:08:
0d:81:b5:1c:2b:20:85:a0:92:d4:a3:22:92:8f:ee:
34:a4:9e:45:a7:b0:c9:5a:c4:2e:d6:68:b3:2f:fa:
db:71:95:25:c6:30:8d:c1:4a:40:16:8b:11:29:73:
45:b7:a5:c0:51:41:41:70:36:d9:99:60:8a:5e:cf:
4e:48:9b:ec:10:d4:bb:3c:95:d0:04:ee:8e:4d:5a:
e1:ed:df:99:93:78:ce:f5:d3:b2:b0:d1:10:4f:b0:
f8:31:cb:b5:66:5a:2f:ed:82:8c:a5:e1:9b:aa:55:
be:b3:dd:b2:de:b4:17:63:b8:0f:12:6f:5c:d8:ac:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:E2:3E:9F:2F:3D:2D:7B:96:A1:BA:59:E2:B9:A9:B6:08:FB:D2
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/1eriPp8vPS17lqG6WeK5qbYI-9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.176.0/24
195.123.178.0/23
195.123.187.0-195.123.191.255
195.123.193.0-195.123.195.255
195.123.248.0/22
Signature Algorithm: sha256WithRSAEncryption
63:b9:a2:91:93:cf:c9:48:36:83:c3:c6:27:4c:bd:87:13:e0:
6c:45:fb:b2:6e:f9:d4:23:68:19:f0:e8:6c:40:ef:e9:ee:47:
62:d6:72:1f:fb:32:1f:87:45:6d:63:73:87:33:56:e7:3f:17:
34:98:2e:2c:53:d0:95:d7:bc:88:01:dc:0e:2f:08:ac:b5:fe:
df:0f:ec:29:8c:2c:61:f2:4f:17:73:28:a2:06:5f:00:3c:70:
f8:96:70:e3:31:b7:90:76:5f:9b:2c:5a:d9:85:88:a3:ec:75:
0a:ec:e3:56:98:05:30:18:0a:cc:99:79:09:f7:f2:a3:e4:05:
f9:29:b9:e0:02:3d:e9:b2:12:ab:cc:16:74:21:3b:7e:cf:e7:
9d:a6:fe:24:77:9d:dc:80:de:60:47:f6:85:2b:c1:42:cc:83:
16:89:8b:a9:07:7c:3b:05:08:63:ea:3a:57:b1:f0:c5:bf:28:
dd:12:23:f8:f6:08:d4:64:5a:fc:c5:7f:db:9a:30:3a:a7:e9:
69:1b:44:a0:88:bd:b5:3e:1b:42:79:d0:9c:cc:62:43:ac:f4:
0d:a6:5c:7b:17:7e:94:00:0c:16:51:64:c3:86:06:85:ec:56:
be:94:03:fd:28:7a:7a:f9:7c:81:70:29:74:d7:e5:43:1b:0e:
06:c7:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:20:39 2025 by rpki-client