Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RXsHFcWsg8HFbqYTSOpUV55FHFY.roa
File: RXsHFcWsg8HFbqYTSOpUV55FHFY.roa (raw, json)
Hash identifier: Fiu0I04LrIP8oLzI9NfPchAST7oZy3UnOH3R/n5EaUk=
Subject key identifier: 45:7B:07:15:C5:AC:83:C1:C5:6E:A6:13:48:EA:54:57:9E:45:1C:56
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019808B88B55CA4DC0D5E257C6046E259501
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RXsHFcWsg8HFbqYTSOpUV55FHFY.roa
Signing time: Mon 14 Jul 2025 11:36:08 +0000
ROA not before: Mon 14 Jul 2025 11:36:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215350
IP address blocks: 85.133.207.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:b8:8b:55:ca:4d:c0:d5:e2:57:c6:04:6e:25:95:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 14 11:36:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=457b0715c5ac83c1c56ea61348ea54579e451c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e5:ec:c6:06:96:19:b6:c5:54:9d:b9:43:47:
5b:3e:40:49:f1:eb:83:a1:97:ec:cc:64:50:7d:b6:
74:ab:5f:58:49:f6:e9:b6:2e:df:ef:83:06:fa:0e:
cc:05:07:4f:93:04:f9:2b:a2:ac:81:70:dc:b7:21:
0c:e1:83:74:20:ac:85:21:ea:80:1a:5d:e3:df:d7:
a4:07:c9:a0:be:97:ba:2f:9b:65:f3:b7:f8:24:c6:
03:87:ea:a9:6c:99:a1:7e:cb:e1:d7:0c:0b:d9:5f:
5f:bc:9d:a3:37:b7:c6:b4:12:27:00:46:40:e4:b2:
f8:40:80:ba:e2:b5:3b:a4:0d:f5:d8:68:88:9f:5f:
32:6c:6e:6f:01:40:b7:f0:63:05:a5:56:d7:ce:56:
01:ea:df:a9:ec:1b:9a:c6:5a:d5:50:5b:4b:31:c5:
a3:d1:fb:55:46:ff:70:e3:f2:fd:85:68:b1:e2:ce:
9a:62:cd:7d:38:8d:59:a6:f1:ed:81:31:4a:af:53:
38:ac:44:cb:8b:99:70:41:74:a3:ae:4d:5d:53:44:
4d:c9:9b:89:1d:fb:46:0c:b9:53:1a:05:99:6a:c1:
77:ff:62:9a:b5:81:4e:76:6e:5f:7d:b2:ac:cb:b3:
1c:67:c6:a8:82:9f:b5:d9:96:d2:f8:5e:dd:b0:37:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:07:15:C5:AC:83:C1:C5:6E:A6:13:48:EA:54:57:9E:45:1C:56
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RXsHFcWsg8HFbqYTSOpUV55FHFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.207.0/24
85.133.215.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3f:18:29:9a:67:ad:19:84:46:41:30:fd:3a:86:b0:32:58:
ed:02:d8:8b:fd:47:75:97:1c:8f:7f:e8:26:ef:d9:36:62:1b:
2c:ac:f9:54:62:bd:0d:29:49:ea:2a:c0:8d:c2:d0:5c:88:53:
ce:7f:57:4e:47:ab:10:26:95:16:c5:cd:44:7b:1e:7b:2a:60:
92:91:ff:0d:6d:48:90:72:29:71:ea:ad:d6:d5:1f:1e:9d:70:
0d:90:de:be:fd:44:59:a5:a6:f4:23:ec:e1:59:e0:e2:f3:55:
84:bc:9e:43:88:87:4a:0a:24:a1:75:76:1f:e5:59:10:d2:80:
9f:d4:f8:fa:f9:81:73:2f:0c:b7:cb:98:1f:45:a1:1a:47:5a:
f3:4a:30:45:d5:98:aa:d7:d6:7b:37:17:0c:cd:12:ef:1a:6c:
be:a7:f0:cc:4a:0d:26:72:44:2d:7c:3e:32:2a:a6:df:b3:d5:
a6:d9:36:f9:1b:c5:f0:e9:e1:77:7a:13:a6:b1:ce:a9:2d:52:
46:53:e6:4e:72:15:57:2a:4f:65:19:cf:aa:d7:bf:a8:10:81:
59:61:d9:c8:5d:cc:13:ec:77:9e:c5:36:7f:ea:9e:0b:17:3e:
10:e9:ec:fb:f0:77:45:96:91:8d:78:fd:ed:a4:e7:ad:40:d5:
0a:f4:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:17:31 2025 by rpki-client