Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/VYdNzCUiezNHp2ipnAESpOT2GMI.roa
File: VYdNzCUiezNHp2ipnAESpOT2GMI.roa (raw, json)
Hash identifier: eS/GCbx9AxDlVVMe7mfu+B9lQ77SLCep89Ufdacjmo0=
Subject key identifier: 55:87:4D:CC:25:22:7B:33:47:A7:68:A9:9C:01:12:A4:E4:F6:18:C2
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 0197CF4F2FB9F9A7168B3AC260536C8AA62E
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/VYdNzCUiezNHp2ipnAESpOT2GMI.roa
Signing time: Thu 03 Jul 2025 08:02:42 +0000
ROA not before: Thu 03 Jul 2025 08:02:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42130
IP address blocks: 93.88.20.0/24 maxlen: 24
93.88.21.0/24 maxlen: 24
93.88.22.0/24 maxlen: 24
93.88.23.0/24 maxlen: 24
103.127.47.0/24 maxlen: 24
185.198.49.0/24 maxlen: 24
185.207.174.0/24 maxlen: 24
195.245.72.0/24 maxlen: 24
195.245.88.0/24 maxlen: 24
2a13:b2c0::/32 maxlen: 32
2a13:b2c1:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:4f:2f:b9:f9:a7:16:8b:3a:c2:60:53:6c:8a:a6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Jul 3 08:02:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55874dcc25227b3347a768a99c0112a4e4f618c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:9c:36:05:0c:36:b0:9d:f7:ab:c3:81:c3:
af:21:eb:9c:d5:f0:6c:42:f5:e6:e9:18:f7:98:42:
d8:38:12:6b:71:62:3b:7a:b6:0f:e5:bd:32:2c:36:
94:3e:ed:72:d4:38:9c:d8:d0:5f:01:11:25:83:54:
b0:e0:75:2a:f5:8e:6d:58:5b:52:12:da:f7:b4:14:
ac:1b:85:be:76:39:3d:93:1d:93:c9:93:19:43:1a:
2b:ce:5a:da:95:4e:b0:2e:c9:d4:8a:81:5f:64:0c:
2d:8f:ea:40:11:6e:ad:b9:53:f9:bd:ba:a9:e0:08:
fc:a9:ab:35:b2:3e:fd:37:76:6c:77:7f:74:e7:e5:
7e:62:48:22:f2:0c:fe:98:02:30:2b:01:ea:d7:b2:
17:de:91:90:a2:4f:3f:67:7a:36:d2:2d:4a:2f:d6:
46:eb:da:73:bb:a6:91:87:72:f3:3e:91:eb:54:28:
95:15:5a:2d:10:3c:94:0a:d4:cb:8e:be:3d:cb:44:
30:bb:c5:50:55:e4:d7:a4:f5:87:21:c7:46:57:57:
09:8d:31:05:85:37:74:18:0b:e6:99:2d:f9:1b:10:
73:c8:1b:5e:da:81:03:5a:ba:ea:c9:ef:6f:9c:7f:
10:13:86:d2:05:23:0e:79:64:59:75:1b:b3:e6:c9:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:4D:CC:25:22:7B:33:47:A7:68:A9:9C:01:12:A4:E4:F6:18:C2
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/VYdNzCUiezNHp2ipnAESpOT2GMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.20.0/22
103.127.47.0/24
185.198.49.0/24
185.207.174.0/24
195.245.72.0/24
195.245.88.0/24
IPv6:
2a13:b2c0::/32
2a13:b2c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
67:d4:a5:ec:f9:a3:ce:13:b7:48:b5:f3:18:f9:93:69:82:aa:
6b:ce:0f:f4:cd:b3:0b:38:6d:6d:03:f0:63:99:7b:22:34:ce:
3c:b3:74:94:19:4a:10:4a:46:9e:25:b4:37:fb:bb:dd:ea:4a:
17:74:33:60:40:ca:12:fd:1b:6e:7b:ca:bc:03:6f:76:ef:10:
8b:d2:f1:0a:43:1e:47:46:5d:1c:f3:78:ad:2a:f8:8e:97:3c:
e0:c2:b5:f1:15:69:be:50:ed:70:da:93:2a:27:b3:a2:5c:88:
c9:46:1f:63:2f:d9:9a:0c:34:3f:d2:86:7e:d7:18:1c:8c:45:
37:e6:4c:80:32:40:aa:ed:d7:9a:56:e2:ea:5f:8c:2b:b9:d4:
bb:53:86:f2:7d:b1:71:55:80:75:bf:1e:57:3b:ea:f0:81:1b:
9e:55:97:14:37:79:56:87:61:17:18:f7:0d:df:23:df:4f:0b:
f7:20:d6:b5:f2:ae:a7:dc:88:0d:2a:ad:08:5c:1c:95:05:54:
a1:1f:cc:c0:cd:ac:3c:16:e7:fe:40:13:5b:66:1c:9c:ee:8d:
f9:88:a9:ea:e8:18:e2:46:7c:e3:9b:b4:50:3a:53:d3:5c:e8:
85:8c:eb:d0:6a:e6:7e:7a:c3:8c:ba:23:a2:23:36:24:34:ff:
14:78:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:47:10 2025 by rpki-client