Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/adPQf24hxp0NRP9LVP6lepe7aK4.roa
File: adPQf24hxp0NRP9LVP6lepe7aK4.roa (raw, json)
Hash identifier: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=
Subject key identifier: 69:D3:D0:7F:6E:21:C6:9D:0D:44:FF:4B:54:FE:A5:7A:97:BB:68:AE
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 0196C31624F62F9D29680F29D1E6329187F0
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/adPQf24hxp0NRP9LVP6lepe7aK4.roa
Signing time: Mon 12 May 2025 06:02:10 +0000
ROA not before: Mon 12 May 2025 06:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 80.85.241.0/24 maxlen: 24
2a0b:4140::/32 maxlen: 36
2a0b:4140:7028::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:16:24:f6:2f:9d:29:68:0f:29:d1:e6:32:91:87:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: May 12 06:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d3d07f6e21c69d0d44ff4b54fea57a97bb68ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:da:5c:99:cb:50:ac:e1:54:83:a4:fb:75:
27:97:8e:13:0a:fa:86:14:57:0a:9d:e4:7f:15:89:
95:be:bf:ef:91:ab:3f:1a:32:2f:50:6b:c8:94:7e:
60:b2:db:69:3e:35:2c:5b:d7:c1:62:6f:f6:6c:58:
68:c8:9b:d0:b7:9a:44:82:66:31:07:ed:8e:b7:a0:
d2:0a:5c:63:cf:25:ca:7a:c3:59:2e:57:58:25:80:
80:e9:70:70:df:88:50:02:c3:42:dd:b8:71:70:d0:
02:24:eb:a8:b6:80:87:8d:22:b8:9a:15:2d:7b:6f:
39:8e:f3:da:91:1a:78:f3:2a:8d:18:70:34:9b:01:
9b:ca:0c:fe:39:39:5b:68:2f:a8:2a:92:47:44:0c:
ba:a2:e1:b5:46:87:cf:0a:5e:d2:05:9a:21:7b:66:
e3:97:3a:87:74:08:f4:62:a4:71:c2:6b:8c:58:97:
ac:0b:3f:3a:41:8f:0c:79:db:45:d3:89:a7:2e:f4:
56:7e:13:72:76:9d:e4:78:cb:3c:92:94:d7:3d:9b:
b6:00:1b:cc:c4:90:2c:68:98:b1:58:87:91:cd:5d:
c4:41:3d:32:f2:eb:5c:03:44:67:63:d1:5a:6b:5d:
2c:f9:1d:25:df:d8:42:ec:a6:6c:02:ea:91:e0:63:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:D0:7F:6E:21:C6:9D:0D:44:FF:4B:54:FE:A5:7A:97:BB:68:AE
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/adPQf24hxp0NRP9LVP6lepe7aK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.241.0/24
IPv6:
2a0b:4140::/32
Signature Algorithm: sha256WithRSAEncryption
2b:1e:0a:27:4e:33:35:df:f7:b4:d8:db:79:d8:f5:57:34:7d:
b0:5b:af:30:5e:0d:d3:36:5a:dd:a2:e1:01:d7:ac:e1:fc:3f:
13:fc:d7:e2:e4:e4:f7:6d:8b:71:12:9a:07:67:be:e6:6d:f0:
9b:0f:5a:fa:fc:15:b6:68:df:83:03:be:57:f8:e4:fb:bc:fa:
80:24:92:38:40:15:f4:9d:65:7b:83:75:55:16:80:3c:bd:ad:
bb:22:ed:d5:cf:46:9a:8e:4e:35:b0:d2:93:e3:bc:44:53:78:
0c:ef:8e:c0:7e:df:c8:91:f4:da:6b:84:b7:cf:80:71:5f:30:
38:e2:ba:51:3f:1c:41:0b:70:b7:f0:08:3e:ab:aa:c8:b4:91:
52:a8:bd:61:b5:e5:7e:3e:29:7d:8d:39:27:4e:62:18:af:62:
2a:dc:15:92:b1:c5:1c:29:8a:e3:e6:35:06:4e:90:3b:ec:7b:
71:08:c6:22:33:2d:f8:2d:b3:95:39:42:8f:34:92:8c:72:4f:
e1:e3:59:ea:d6:b6:fd:d8:34:ed:f0:25:8a:c6:8b:4d:58:c1:
fd:16:66:05:1b:fd:80:21:7f:e7:20:df:93:9e:0d:94:e9:30:
b5:b1:e8:08:d6:6b:bc:00:a5:40:df:76:3f:62:ad:0b:0b:9c:
1d:cb:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:24:08 2025 by rpki-client