Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aY6HzrJiGHufOGOJjh76iezAIYI.roa
File: aY6HzrJiGHufOGOJjh76iezAIYI.roa (raw, json)
Hash identifier: W6uRYY+mDyPrnLcDqPMUP43sufn2Fk8QmVF9doePBSo=
Subject key identifier: 69:8E:87:CE:B2:62:18:7B:9F:38:63:89:8E:1E:FA:89:EC:C0:21:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197D00BCA661A17D6E307F2AAD58C4C25E4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aY6HzrJiGHufOGOJjh76iezAIYI.roa
Signing time: Thu 03 Jul 2025 11:28:42 +0000
ROA not before: Thu 03 Jul 2025 11:28:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 5.253.56.0/24 maxlen: 24
5.253.57.0/24 maxlen: 24
5.253.58.0/24 maxlen: 24
45.88.66.0/24 maxlen: 24
87.120.108.0/24 maxlen: 24
87.120.196.0/24 maxlen: 24
87.121.216.0/24 maxlen: 24
93.123.31.0/24 maxlen: 24
94.125.102.0/24 maxlen: 24
94.125.103.0/24 maxlen: 24
171.22.30.0/24 maxlen: 24
185.207.14.0/24 maxlen: 24
185.207.15.0/24 maxlen: 24
185.252.179.0/24 maxlen: 24
193.8.186.0/24 maxlen: 24
193.8.187.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/24 maxlen: 24
193.148.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 16:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:0b:ca:66:1a:17:d6:e3:07:f2:aa:d5:8c:4c:25:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 3 11:28:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=698e87ceb262187b9f3863898e1efa89ecc02182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:3c:03:f0:f6:9f:3d:b9:9d:91:10:10:c4:
b5:60:78:57:ad:88:cc:17:00:06:59:47:15:f6:2e:
74:e7:3d:3c:fd:bb:77:7f:9e:52:62:00:81:26:34:
4b:88:e8:c4:70:d4:39:bb:03:4a:31:80:d4:46:ca:
23:86:fd:8e:3a:da:9b:3f:bd:33:a0:e0:cb:cb:67:
89:a7:13:07:28:ee:30:22:60:6a:83:1e:b0:61:35:
ca:25:84:56:f2:8d:2b:63:87:49:ff:9b:f9:63:9f:
75:21:8b:42:3f:e4:88:d0:fb:27:10:46:00:58:87:
97:89:4d:a4:8d:a8:42:1b:43:91:d5:db:20:55:03:
29:29:73:ed:6e:e2:1b:41:a3:02:cf:1e:e0:a8:21:
b8:47:44:87:6f:0f:d5:f1:22:4b:d9:1c:79:a9:e3:
ce:24:3c:db:a6:20:e4:67:09:38:ff:2e:8e:5f:47:
b2:c4:20:ef:70:10:9a:31:8c:fc:b2:53:2e:10:c1:
9a:c9:55:9e:78:43:f2:0d:cf:4e:e5:41:bf:67:76:
b4:e9:02:1d:dc:7c:04:56:42:79:69:4e:ed:c7:04:
6b:c4:94:f9:88:ae:01:cf:03:b2:4d:69:18:4c:35:
9a:86:55:19:dd:08:fc:7e:d8:1b:0a:66:f3:b1:c8:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:87:CE:B2:62:18:7B:9F:38:63:89:8E:1E:FA:89:EC:C0:21:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aY6HzrJiGHufOGOJjh76iezAIYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0-5.253.58.255
45.88.66.0/24
87.120.108.0/24
87.120.196.0/24
87.121.216.0/24
93.123.31.0/24
94.125.102.0/23
171.22.30.0/24
185.207.14.0/23
185.252.179.0/24
193.8.186.0/23
193.47.61.0/24
193.148.56.0/23
Signature Algorithm: sha256WithRSAEncryption
10:e9:bf:35:1c:3e:52:d9:36:dc:85:5c:81:5e:75:d2:f4:da:
b1:0a:43:45:db:d3:4e:a1:8d:da:3b:b6:0d:72:23:60:23:c5:
f2:1d:1d:b5:1e:58:9f:0b:8a:29:d0:2d:93:95:47:43:c7:64:
9e:a4:a3:ed:2d:71:78:8b:77:d1:71:6e:48:eb:29:2e:0b:27:
cf:15:a8:85:0e:59:37:7a:a7:04:d4:53:a2:f5:67:9e:a5:db:
11:a5:c9:83:f2:82:00:1a:5d:a7:60:20:00:64:c5:9b:18:dd:
e1:31:61:a0:76:1f:19:ce:c8:88:e2:9f:4d:60:df:57:74:6e:
9f:c1:1e:ca:6c:00:8c:c8:05:7a:2f:a0:20:15:fe:d7:55:42:
05:fc:d9:2e:30:21:0b:49:ad:02:b4:a6:4d:4f:ab:09:b9:3c:
38:bb:98:4f:fc:09:6e:fb:23:38:34:35:3c:42:2c:96:42:a3:
11:64:a4:33:9f:77:40:63:e9:71:cd:65:89:80:ee:26:20:66:
7b:6c:3e:b8:a5:fb:01:42:96:52:9d:e9:45:e7:ab:5c:12:d4:
63:88:4f:b9:59:6a:1f:a0:68:2e:fa:a7:75:6c:04:d1:24:29:
ba:e0:46:1c:62:a1:b4:c1:86:2c:a1:7c:ea:33:1f:00:33:94:
3f:ed:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 23:14:12 2025 by rpki-client