Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/RSXmGPfQ8mX6WcSR6Z2ZB6u7-VY.roa
File: RSXmGPfQ8mX6WcSR6Z2ZB6u7-VY.roa (raw, json)
Hash identifier: 9JPv5cClAHFEamsto3OfYBSv6xhBQ5Y12w+jE6Rhs80=
Subject key identifier: 45:25:E6:18:F7:D0:F2:65:FA:59:C4:91:E9:9D:99:07:AB:BB:F9:56
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 01971FF0A832DDCB40F4287A0C68B453FCC4
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/RSXmGPfQ8mX6WcSR6Z2ZB6u7-VY.roa
Signing time: Fri 30 May 2025 06:45:54 +0000
ROA not before: Fri 30 May 2025 06:45:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214717
IP address blocks: 176.65.134.0/24 maxlen: 24
176.65.139.0/24 maxlen: 24
176.65.140.0/24 maxlen: 24
176.65.141.0/24 maxlen: 24
176.65.142.0/24 maxlen: 24
176.65.143.0/24 maxlen: 24
176.65.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1f:f0:a8:32:dd:cb:40:f4:28:7a:0c:68:b4:53:fc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: May 30 06:45:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4525e618f7d0f265fa59c491e99d9907abbbf956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:f6:73:20:fe:8d:93:aa:91:49:d4:d0:59:
bd:54:9a:64:bf:4f:86:e4:7d:19:27:a8:b4:a4:46:
ea:80:a6:ce:bb:8e:ba:fa:b4:4e:c3:5b:09:57:d9:
d4:84:f7:8b:08:b4:2c:19:0e:9a:9b:9b:1b:ca:f6:
ac:d9:28:f1:6a:3a:5c:cd:ad:7e:d6:34:bd:71:25:
e9:68:ef:e5:cc:33:27:37:9b:ac:e8:cf:37:d7:7a:
08:93:5d:42:dc:a4:23:fd:44:6c:c5:05:82:12:ac:
ce:0f:66:e9:26:50:5d:47:3e:55:d1:97:ed:47:32:
29:ec:ff:16:e8:3e:b9:00:44:9c:b8:d8:7f:45:97:
66:33:68:c4:5f:ec:4c:7c:b1:60:df:dc:bc:89:46:
64:cb:11:ab:ac:e2:d4:b0:61:00:63:3d:38:34:f8:
40:d5:3c:11:3f:ae:8f:ca:4c:83:d6:40:1a:7c:5a:
e8:1e:ab:9f:12:7b:7d:81:f0:98:d6:4a:e4:28:2b:
7b:f8:c6:7e:67:f7:46:22:d2:51:a0:a0:0b:c6:02:
2b:e7:33:a6:0b:de:47:ca:b6:33:9e:2e:39:71:f6:
9f:2c:2e:50:05:d8:52:13:08:e2:a4:0a:3f:41:84:
16:06:67:dc:6e:14:04:77:f6:dc:0b:6d:8c:26:e8:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:25:E6:18:F7:D0:F2:65:FA:59:C4:91:E9:9D:99:07:AB:BB:F9:56
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/RSXmGPfQ8mX6WcSR6Z2ZB6u7-VY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.134.0/24
176.65.139.0-176.65.144.255
Signature Algorithm: sha256WithRSAEncryption
58:cb:09:8d:93:0f:a1:f7:d6:5c:c9:62:91:88:70:90:80:33:
50:28:d0:16:9d:58:3e:6d:1d:e0:9e:a7:b3:8b:b0:2c:a0:66:
ea:d1:f4:79:5d:94:41:ea:32:f0:41:34:53:df:71:c2:92:f4:
c5:1c:89:27:be:db:07:b3:98:76:3f:e3:72:63:a1:a6:53:76:
60:ac:8b:6e:54:b0:23:73:87:c9:d1:ff:64:84:32:0c:f6:3b:
35:c9:a5:d7:f1:17:82:41:ce:68:1f:86:c7:ba:a9:08:20:d3:
4a:9a:1a:1a:6c:23:12:dc:63:b6:d2:4a:33:73:b2:9c:10:3c:
d0:7c:e3:1a:79:ab:6e:f8:91:d4:8e:d5:35:2d:1e:03:19:1f:
d7:05:c7:a4:8f:d3:84:a7:89:19:67:77:b7:33:e4:67:f1:bf:
7c:30:d0:3f:aa:4b:55:b5:7e:a5:c4:ee:07:98:6a:49:08:a1:
2a:8b:85:39:ec:50:bc:34:0d:e2:a3:95:be:62:c2:1e:ab:57:
1e:cf:cf:73:93:ab:28:9c:a3:b7:94:d1:4c:f5:6d:21:9a:32:
b8:f5:05:7c:ce:19:21:9c:29:38:3a:85:d7:53:56:ce:bb:a9:
82:3f:64:ca:ba:67:43:0d:06:88:88:ab:4c:ca:99:49:aa:2e:
3c:b1:f2:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:54:23 2025 by rpki-client