Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Mda1l0AwsWFxrFKAO5UAIaaO2ew.roa
File: Mda1l0AwsWFxrFKAO5UAIaaO2ew.roa (raw, json)
Hash identifier: XNbIfF2ySZOzwZgfT+giemW2vec9LK6qJHTp6caSWC8=
Subject key identifier: 31:D6:B5:97:40:30:B1:61:71:AC:52:80:3B:95:00:21:A6:8E:D9:EC
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019730034988225176987B4E022E27E6F524
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Mda1l0AwsWFxrFKAO5UAIaaO2ew.roa
Signing time: Mon 02 Jun 2025 09:40:11 +0000
ROA not before: Mon 02 Jun 2025 09:40:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211619
IP address blocks: 45.95.168.0/24 maxlen: 24
45.95.169.0/24 maxlen: 24
45.95.170.0/24 maxlen: 24
45.95.171.0/24 maxlen: 24
150.40.96.0/19 maxlen: 24
203.31.217.0/24 maxlen: 24
2a0e:bfc0::/32 maxlen: 32
2a0e:bfc1::/32 maxlen: 32
2a0e:bfc2::/32 maxlen: 32
2a0e:bfc3::/32 maxlen: 32
2a0e:bfc4::/32 maxlen: 32
2a0e:bfc5::/32 maxlen: 32
2a0e:bfc6::/32 maxlen: 32
2a0e:bfc7::/40 maxlen: 40
2a0e:bfc7:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:03:49:88:22:51:76:98:7b:4e:02:2e:27:e6:f5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Jun 2 09:40:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31d6b5974030b16171ac52803b950021a68ed9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:20:30:f5:3f:a0:30:f3:12:da:77:8e:6b:
a3:eb:f2:ff:8e:c5:83:30:fe:58:01:63:15:49:6d:
07:c2:b0:fa:45:80:30:ff:86:f2:7f:b3:e4:10:d4:
da:ab:70:cb:78:f3:a8:af:10:9f:b7:7d:fb:33:50:
da:37:c4:89:99:d2:40:81:aa:7b:ec:bf:4c:4a:ba:
d0:81:fe:99:05:50:49:11:ad:86:5a:09:d9:a1:f5:
b8:7d:49:4d:b4:a0:55:66:7f:4a:3e:cd:81:b7:84:
52:e9:4b:69:c1:61:4b:08:44:05:93:1c:37:15:24:
a1:b1:18:91:92:6f:61:4e:48:97:d3:3e:0f:31:c3:
47:e5:f4:bb:21:7c:d4:00:d2:b6:04:5c:c5:a4:1f:
07:b1:e3:7d:10:30:6f:85:12:77:e6:cd:e4:dc:1c:
1e:9d:f4:8e:6d:16:49:23:59:72:14:ec:92:c3:61:
65:07:3a:ea:6b:50:87:95:16:0b:59:9f:3f:2d:1c:
2b:67:05:e6:02:6e:36:f3:33:fd:f2:ce:53:19:f4:
92:ff:cc:a6:67:b3:b5:0f:6e:31:6e:d4:b5:21:66:
16:fd:ba:a5:7b:4a:a5:b9:35:b4:ec:9e:22:a1:aa:
9d:71:70:dd:e1:62:c4:4e:82:85:f9:bc:1d:a7:a5:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:B5:97:40:30:B1:61:71:AC:52:80:3B:95:00:21:A6:8E:D9:EC
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Mda1l0AwsWFxrFKAO5UAIaaO2ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.168.0/22
150.40.96.0/19
203.31.217.0/24
IPv6:
2a0e:bfc0::-2a0e:bfc7:1ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
62:f5:70:92:34:30:fb:da:17:29:af:4f:b0:a7:0e:34:e3:f2:
31:4f:7a:bc:4b:a4:5e:8e:66:74:e2:d4:6d:af:80:fd:4f:01:
9d:ee:d0:72:31:bd:52:4a:d7:00:c0:00:1a:17:af:54:69:bc:
da:5f:fb:43:6c:d3:f8:e4:80:a6:d6:b3:2b:c6:95:06:74:e3:
37:b3:e2:b8:c3:03:6f:da:24:4f:9c:bc:ca:a1:30:fa:c2:ed:
43:d4:67:58:69:70:a4:59:13:28:3c:5c:34:f1:2a:d8:b6:09:
12:7d:fc:94:24:cf:96:0b:b1:74:55:57:67:a4:d9:1a:db:69:
56:97:4f:fd:d0:c7:ea:e6:c2:03:39:2e:6b:a9:b9:28:17:30:
cf:5c:45:63:36:97:c5:56:bd:ee:36:b8:6d:20:ef:8e:9f:dc:
7e:54:b5:4d:32:e5:d2:3e:6d:a8:8b:48:96:1b:7d:e4:b2:e8:
83:46:36:e2:28:41:04:75:cf:72:81:94:3d:60:40:e1:60:30:
f4:fb:9a:1c:b2:92:58:cc:ca:1c:04:04:d4:ae:d0:c4:02:33:
c6:ea:bb:8b:5e:d5:7e:59:30:fa:60:a7:52:99:44:5a:e2:37:
32:44:74:21:10:ba:59:8e:01:3f:ee:3a:d4:ba:43:8d:ca:7d:
d5:41:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:51 2025 by rpki-client