Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/f_wGT4AI_ECeedsmGEwBxGaUeL4.roa
File: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (raw, json)
Hash identifier: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=
Subject key identifier: 7F:FC:06:4F:80:08:FC:40:9E:79:DB:26:18:4C:01:C4:66:94:78:BE
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01973A41DF0BD92D567758A99EFED04E4D4A
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/f_wGT4AI_ECeedsmGEwBxGaUeL4.roa
Signing time: Wed 04 Jun 2025 09:24:44 +0000
ROA not before: Wed 04 Jun 2025 09:24:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205820
IP address blocks: 46.53.196.0/24 maxlen: 24
128.140.254.0/24 maxlen: 24
178.163.224.0/19 maxlen: 19
178.163.230.0/23 maxlen: 23
185.183.120.0/22 maxlen: 22
185.183.120.0/24 maxlen: 24
185.183.121.0/24 maxlen: 24
185.204.116.0/22 maxlen: 22
2a0a:f240::/29 maxlen: 29
2a0a:f241::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:41:df:0b:d9:2d:56:77:58:a9:9e:fe:d0:4e:4d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jun 4 09:24:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ffc064f8008fc409e79db26184c01c4669478be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:96:41:33:4a:5a:8d:d7:3d:f9:71:c8:7e:
b3:e4:30:70:a1:66:ea:3a:37:aa:12:e5:0d:46:a6:
1c:dd:88:a3:a4:c4:2d:26:d7:72:21:f2:9a:24:94:
45:5e:bd:19:f2:63:b9:45:f9:15:2a:cf:31:48:8e:
8c:50:2b:26:99:89:2a:70:b1:ed:82:81:72:3a:38:
93:cb:1d:05:a3:72:ee:44:04:a1:0f:1c:6d:c8:44:
81:17:98:6d:09:cd:6b:61:29:f0:49:c1:fc:25:a3:
83:d2:e9:98:fd:8f:60:b7:e5:cd:fc:c0:7f:68:b4:
fa:21:1a:1b:34:53:55:9c:70:d9:03:0c:be:bd:9b:
17:28:54:66:a9:d1:ec:ff:cd:e9:7b:1c:5d:19:dc:
a8:6b:e1:d6:59:6c:3c:ce:a0:82:db:0f:6a:a1:42:
ce:65:66:5b:05:4b:8d:cb:f2:58:67:11:1a:d0:3c:
9c:95:b9:d3:18:2a:dd:04:74:90:48:1f:c2:6e:db:
eb:4c:34:c1:71:24:e9:20:18:dd:4a:33:70:22:09:
d5:82:ca:e6:e0:64:6b:be:70:f6:d9:be:0e:ac:b5:
cf:cb:f3:bf:f7:2c:58:b1:f6:e8:65:3c:f5:bb:e8:
e1:97:49:4c:c7:64:96:42:7e:eb:be:64:0b:c1:75:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:06:4F:80:08:FC:40:9E:79:DB:26:18:4C:01:C4:66:94:78:BE
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/f_wGT4AI_ECeedsmGEwBxGaUeL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.53.196.0/24
128.140.254.0/24
178.163.224.0/19
185.183.120.0/22
185.204.116.0/22
IPv6:
2a0a:f240::/29
Signature Algorithm: sha256WithRSAEncryption
49:cd:18:fb:f5:20:2d:2b:8b:17:a8:e3:9c:d5:aa:de:2a:10:
6f:0c:fc:81:54:e0:a0:5e:81:76:2d:c7:c3:d6:37:09:a4:45:
79:78:1c:af:92:e8:06:5c:c4:72:1c:63:ee:b0:f1:64:c2:16:
d7:5d:88:b8:51:74:c5:3f:7e:07:bd:dc:74:3c:1a:eb:fa:97:
c3:a6:d8:38:3e:c1:42:48:27:bb:3a:ad:2d:1b:fa:23:ed:a1:
18:d7:29:41:72:53:3b:77:21:6b:5e:53:81:07:39:4b:e3:41:
cc:c4:48:1d:36:12:4e:e8:af:fe:a5:17:fb:13:e2:b2:5a:b1:
11:40:89:a6:8c:d4:1e:07:40:b7:33:14:ed:f2:d1:9e:50:a1:
de:97:6d:50:a3:61:38:12:80:0d:4d:30:33:9b:23:a9:ae:b7:
d1:be:7c:e7:96:19:3a:d9:ba:72:d3:cd:fd:45:b1:0d:7a:70:
52:3d:b0:83:2d:c2:95:89:4f:4f:66:00:b7:ae:c7:5f:f1:cd:
59:7d:2a:63:50:e0:ab:01:5e:ee:ca:c7:59:aa:33:6e:60:15:
93:bf:7e:04:0f:91:36:de:4e:4f:7f:db:c7:45:12:f3:37:6e:
5d:77:ba:4f:2c:c9:b6:f9:4d:09:65:39:af:dc:b5:2a:fc:8f:
61:1e:b7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:55 2025 by rpki-client