Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa
File: Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa (raw, json)
Hash identifier: 1Lp7SxsfhpCBEhQL5Y4zfc67ux7+bRvdt1YYdwGM1n4=
Subject key identifier: 65:ED:88:82:BA:46:53:22:50:15:48:0D:50:DF:B2:F0:35:3E:D0:E8
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0196CE6D47884459F768F25AC5D4EA9CA239
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa
Signing time: Wed 14 May 2025 10:53:10 +0000
ROA not before: Wed 14 May 2025 10:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.140.210.0/24 maxlen: 24
82.115.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:6d:47:88:44:59:f7:68:f2:5a:c5:d4:ea:9c:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: May 14 10:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65ed8882ba4653225015480d50dfb2f0353ed0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:3c:00:b8:77:26:20:fc:89:f9:16:ea:ba:
44:39:b2:30:9f:4f:b5:9e:d0:10:83:a2:11:0d:93:
ae:a7:58:58:8b:c2:25:2d:e4:ab:a5:56:5f:bb:20:
dc:5c:e4:59:ac:a7:10:7f:f8:d5:40:5b:48:c8:13:
e7:c7:35:78:77:df:13:7e:24:73:e6:bc:b2:5a:9e:
a0:23:2e:6d:01:22:d0:5f:e0:59:f6:fa:c7:72:a4:
d3:4f:76:b8:7f:52:ef:bb:fe:18:49:6a:49:00:88:
29:1c:0e:f6:60:89:7a:b9:c4:8f:f4:ff:ad:a8:ac:
99:4f:69:0e:06:15:00:13:47:ea:f6:16:1e:a0:a9:
c6:ad:af:e4:9e:e6:01:ba:ea:5b:cc:b6:39:90:c3:
ff:a1:a8:1c:c8:11:8c:b9:36:2b:e0:0f:70:c7:f4:
e3:5e:af:9c:65:25:76:ef:d1:b4:ac:72:6b:95:53:
1d:de:e5:8f:22:8b:bd:58:7e:9b:fc:13:98:b3:c6:
c4:05:65:6e:bc:71:64:6c:ec:45:ff:5e:30:9a:d3:
7b:97:f4:4e:07:de:cf:b9:3a:83:99:12:18:e4:2c:
72:1e:c9:15:67:1c:b8:7b:48:ce:52:9b:22:a4:a8:
05:b2:cb:01:2c:cd:39:ea:1f:86:7d:ea:0c:66:ee:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:ED:88:82:BA:46:53:22:50:15:48:0D:50:DF:B2:F0:35:3E:D0:E8
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/Ze2IgrpGUyJQFUgNUN-y8DU-0Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.210.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:03:c0:b1:d3:eb:f4:0a:82:5a:7d:a3:9b:59:55:00:28:7f:
39:78:18:36:dc:da:96:04:2b:e6:c2:e4:44:4a:c2:1d:31:60:
bb:ab:21:66:a6:e9:c2:fc:84:9e:5a:87:c1:4f:84:a4:db:d3:
90:f4:2f:3e:94:e3:dd:d0:3e:eb:34:28:65:2a:ed:d3:9b:6a:
56:6f:c4:09:16:7f:6e:d2:4b:d5:b3:55:cd:c7:a1:39:53:71:
16:95:4c:39:8b:6d:8a:47:8b:c4:ab:14:f5:89:0d:a3:4b:e2:
04:ad:75:0e:05:45:42:36:a2:1d:1c:b0:35:d9:b5:fe:15:79:
a1:d0:d3:fe:b6:d8:18:11:d0:12:2c:56:0f:02:9b:06:6f:93:
88:65:5a:0d:95:e4:53:f9:69:41:ac:c9:3c:b7:4c:b3:51:bd:
e3:48:5f:a4:e7:51:61:b8:be:ce:ae:4c:00:8c:1b:c8:d5:3d:
7e:bb:cf:d3:e3:fc:92:ca:7a:21:47:90:9b:83:87:6a:69:7d:
ce:59:e1:1e:50:50:da:6a:eb:17:71:dc:ac:40:a9:83:a9:12:
d3:f8:70:de:25:ca:40:54:c2:8b:2c:b4:c4:ba:94:cb:86:29:
04:cb:d9:8a:11:19:70:01:19:11:75:09:96:e5:d3:69:ca:f2:
ac:d8:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:08:10 2025 by rpki-client