Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cVcy9FMDtZR5DdAZNx5sX3vMJJ0.roa
File: cVcy9FMDtZR5DdAZNx5sX3vMJJ0.roa (raw, json)
Hash identifier: TE8W0Ohp577BY8cm5Tj4ioSwWoescP5nnJgwceZr0TI=
Subject key identifier: 71:57:32:F4:53:03:B5:94:79:0D:D0:19:37:1E:6C:5F:7B:CC:24:9D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0198F06A9572E624D5CA1BF53AB232961B20
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cVcy9FMDtZR5DdAZNx5sX3vMJJ0.roa
Signing time: Thu 28 Aug 2025 11:22:53 +0000
ROA not before: Thu 28 Aug 2025 11:22:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.64.0/22 maxlen: 22
79.132.68.0/22 maxlen: 22
79.132.92.0/22 maxlen: 22
79.135.136.0/22 maxlen: 22
85.234.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f0:6a:95:72:e6:24:d5:ca:1b:f5:3a:b2:32:96:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 28 11:22:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=715732f45303b594790dd019371e6c5f7bcc249d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:56:97:9a:dc:85:a0:90:cb:92:14:4a:36:
62:1a:7b:7f:96:6b:e1:12:ac:8e:87:8d:2f:b7:cb:
db:c3:0a:b8:7b:da:d0:5c:88:30:48:36:12:5f:67:
d8:e2:75:84:6c:17:e0:2a:9d:8c:c7:ad:2e:e4:73:
e8:48:84:88:25:b4:8e:fb:08:8a:06:71:d0:74:67:
c9:a8:3b:ad:98:3d:32:18:5c:c3:8f:04:b2:06:b6:
e9:65:c0:cd:65:fe:7e:c8:6b:5d:c5:d0:aa:31:f6:
ea:a5:50:f6:08:43:cb:08:b7:4e:27:f1:66:cd:a4:
00:39:ae:34:07:fe:2d:30:3f:38:42:c6:b6:c0:72:
ee:1b:fb:b9:b4:0e:54:11:01:99:8d:4a:f8:d2:7f:
d6:72:b9:75:5e:63:73:3a:94:26:f0:85:b9:04:07:
71:9a:79:b4:41:4a:a1:6f:e2:ba:be:3d:9b:7f:c3:
ef:61:b9:64:08:5f:20:4d:b3:73:1e:77:c5:5f:73:
6c:b8:2c:91:cb:8a:a8:6b:8a:c6:d6:dc:ce:2f:88:
55:89:6f:4c:28:c4:fb:ad:99:c2:f7:57:69:0b:e3:
06:9c:2c:a1:c1:ba:95:0c:7c:65:25:9b:29:70:07:
fb:41:6c:ff:55:01:83:12:ce:cf:6f:6a:2e:fa:a4:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:57:32:F4:53:03:B5:94:79:0D:D0:19:37:1E:6C:5F:7B:CC:24:9D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/cVcy9FMDtZR5DdAZNx5sX3vMJJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.64.0/21
79.132.92.0/22
79.135.136.0/22
85.234.160.0/19
Signature Algorithm: sha256WithRSAEncryption
00:b8:d7:0b:16:d9:8b:6c:aa:e7:e2:93:a4:3e:04:d2:0e:2b:
a0:66:0c:d4:b9:7d:ad:6c:2d:81:bf:09:6b:ac:40:be:51:17:
ba:b9:e6:49:83:5b:52:57:6d:41:e8:e5:2e:02:da:2e:be:ff:
1f:a2:ac:54:a3:11:85:c0:cb:0c:3b:4a:d6:f0:e3:8e:21:17:
54:d1:ba:d3:80:ed:58:a3:4c:e4:4b:1f:a3:37:65:7c:df:4b:
e1:e5:8c:c6:1e:72:7a:a5:e1:14:84:22:c2:33:7d:82:ae:4d:
c6:19:03:af:0b:ef:38:3c:85:95:15:85:76:5b:fa:d1:c5:48:
5f:6a:da:3f:5f:0c:54:e6:c8:34:ff:3d:80:69:4b:fc:81:52:
b0:e3:7c:76:14:5a:b5:0f:46:2e:c2:c9:02:91:ee:b9:e5:e9:
59:9d:79:02:22:81:88:c2:39:f0:16:6b:b2:1a:63:13:5f:05:
4b:7e:05:51:29:a4:02:c1:29:42:e5:6e:5e:68:18:df:b5:5a:
0b:4c:14:6f:55:88:02:02:bb:8a:4f:9e:bb:d7:a1:17:6e:6a:
9b:f4:c9:1d:55:39:cc:ae:6c:d9:62:1d:d3:81:7d:6b:e8:ac:
5c:7e:d5:5f:20:82:34:c7:93:47:40:bf:e9:86:1e:6a:58:94:
02:28:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 00:32:42 2025 by rpki-client