Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/0RfAvE-I96idGWB2q9fTPdSgOd8.roa
File: 0RfAvE-I96idGWB2q9fTPdSgOd8.roa (raw, json)
Hash identifier: oD2+p/JBsIJ/BACEdQnT/2Q3szJ9EbXZbs7Bdz1L5yw=
Subject key identifier: D1:17:C0:BC:4F:88:F7:A8:9D:19:60:76:AB:D7:D3:3D:D4:A0:39:DF
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0197FECDCA1087BC5B8EE66CDE66F548CD30
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/0RfAvE-I96idGWB2q9fTPdSgOd8.roa
Signing time: Sat 12 Jul 2025 13:23:08 +0000
ROA not before: Sat 12 Jul 2025 13:23:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
95.81.121.0/24 maxlen: 24
95.81.122.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
194.79.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fe:cd:ca:10:87:bc:5b:8e:e6:6c:de:66:f5:48:cd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 12 13:23:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d117c0bc4f88f7a89d196076abd7d33dd4a039df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:47:9f:e7:af:95:fc:74:73:6b:ac:c4:4a:
bd:ee:dd:5d:a4:08:7b:03:a2:0d:b8:0a:8e:64:07:
23:c3:71:5a:d6:d6:0c:6e:54:84:34:c5:48:08:1b:
7f:27:13:38:66:c7:ba:da:6b:8b:49:7b:68:8c:f2:
93:78:06:86:1a:36:b6:4b:93:c2:f6:36:45:dd:52:
13:db:f1:cd:e8:cc:bf:4e:f1:a2:c4:cc:7f:19:70:
60:77:bf:f1:37:dc:ca:d2:6e:ba:8c:f4:98:fa:e2:
07:10:b8:f6:9e:78:a9:71:b2:8f:47:bf:ca:68:51:
ca:e4:23:95:e4:d9:75:bf:d6:29:80:ac:c9:7b:18:
b3:7a:6f:a3:82:85:14:f0:4a:88:57:a5:9c:b5:9e:
83:17:dd:4b:d0:24:05:67:46:92:ad:c0:56:36:0c:
17:e9:6e:f7:5c:38:8f:71:43:83:47:bf:83:6d:ca:
69:f6:ca:0a:db:75:ef:b3:48:10:c8:b8:ee:1f:a3:
29:ce:e6:c2:87:7c:37:98:c8:7c:b3:d5:b4:23:7f:
db:3d:2d:b3:25:fc:e4:85:f9:5e:09:ea:bd:26:aa:
e0:31:3e:78:8c:f2:dd:82:96:ad:a7:07:39:1f:22:
ea:34:9a:5e:d9:21:e3:4c:51:5b:72:49:ed:e3:33:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:C0:BC:4F:88:F7:A8:9D:19:60:76:AB:D7:D3:3D:D4:A0:39:DF
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/0RfAvE-I96idGWB2q9fTPdSgOd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
95.81.112.0/23
95.81.120.0/22
194.79.60.0/24
Signature Algorithm: sha256WithRSAEncryption
57:04:87:43:5f:7c:09:f3:fd:b5:27:75:da:e6:5c:b1:cf:e2:
b4:41:ca:52:c0:ff:56:71:90:3f:e8:58:21:3a:8b:4a:0b:9d:
90:f8:9c:86:43:eb:2a:98:06:a7:18:a7:af:7b:69:ce:2b:bd:
7b:80:70:53:cc:0b:72:e3:2a:a1:e8:89:21:48:82:8b:6f:d4:
ad:58:0c:36:78:db:be:30:fb:37:82:a4:e3:62:a0:0c:bd:21:
1a:e0:76:c1:02:5d:a3:cf:d1:08:b3:66:ab:d6:d2:84:dc:b6:
8b:01:5d:cd:7a:8c:96:ae:69:f8:96:35:a8:c8:48:7a:8a:9b:
82:df:55:6b:3d:a7:6e:50:2c:eb:f9:21:5c:d8:e3:65:9c:d5:
98:18:6e:32:30:e9:d5:df:21:c0:03:47:26:a1:bc:35:30:e3:
b5:79:d4:63:de:09:ff:cf:9a:ce:48:56:b6:d2:ca:82:58:16:
8d:bd:7e:6c:c3:e7:33:4c:3a:7c:bd:bf:d3:e0:c6:67:d4:f5:
ca:7d:a0:56:bc:ed:25:6d:98:15:4f:00:41:da:ba:a1:f6:94:
32:ff:7d:af:02:9e:49:b2:4d:99:cd:0d:55:54:85:ff:9a:06:
ba:45:7d:1e:a5:fb:a5:64:e6:e1:a7:3a:b0:e1:b8:e2:5c:35:
b3:d9:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:14:40 2025 by rpki-client