Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/bHl4gP55LgKhhE_L1xho4xppPEo.roa
File: bHl4gP55LgKhhE_L1xho4xppPEo.roa (raw, json)
Hash identifier: rqcbN4+Al2DH9m3ppJi1E488vxtH8t3M86sJsdVuXgY=
Subject key identifier: 6C:79:78:80:FE:79:2E:02:A1:84:4F:CB:D7:18:68:E3:1A:69:3C:4A
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 0197306BC37332F7AD683739767FE77A0D32
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/bHl4gP55LgKhhE_L1xho4xppPEo.roa
Signing time: Mon 02 Jun 2025 11:34:18 +0000
ROA not before: Mon 02 Jun 2025 11:34:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.37.200.0/22 maxlen: 24
2a00:f020::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:30:6b:c3:73:32:f7:ad:68:37:39:76:7f:e7:7a:0d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: Jun 2 11:34:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c797880fe792e02a1844fcbd71868e31a693c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:86:90:66:f0:36:fe:db:ff:9d:63:b2:51:
3a:d0:43:a7:92:0a:7e:8f:d9:ff:a7:92:f1:50:b7:
62:1c:f9:93:d5:76:ed:96:0a:61:6e:f0:6e:fe:84:
36:06:87:f3:2c:36:d0:06:7a:90:b8:ec:3d:70:d1:
82:75:16:12:2c:3c:1a:dc:c6:a0:29:44:f2:8a:89:
11:4b:81:20:f3:2b:76:9e:f8:6f:aa:f5:4a:7f:c7:
1a:e3:e9:ab:a5:9e:11:ca:3c:6d:73:d4:2f:99:df:
00:0e:6c:3f:1a:bc:ba:4e:b8:89:06:8d:01:31:8f:
bc:14:c5:8e:38:d4:5b:c3:19:45:29:f4:2d:9a:7c:
ce:e1:4a:96:f3:29:37:3f:78:c0:56:a5:47:9b:06:
ce:14:92:cd:4c:1b:e2:43:f6:93:0b:40:d4:49:0e:
36:ab:8b:e9:7b:7b:48:92:99:74:84:48:f1:b7:6e:
bc:b6:54:c9:ad:fc:2c:d3:75:9c:08:68:1c:54:af:
7c:93:b5:5f:5f:42:0e:eb:50:d7:1a:23:13:be:84:
d2:8c:ec:8c:2c:52:35:d8:10:d7:ba:79:ba:58:76:
06:c7:e7:4b:9e:e8:1d:7b:ec:8c:7c:96:a0:51:be:
14:67:21:62:ce:fd:cc:a7:74:26:53:1e:6b:54:30:
67:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:79:78:80:FE:79:2E:02:A1:84:4F:CB:D7:18:68:E3:1A:69:3C:4A
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/bHl4gP55LgKhhE_L1xho4xppPEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.200.0/22
IPv6:
2a00:f020::/32
Signature Algorithm: sha256WithRSAEncryption
35:9b:28:fb:6d:cf:c3:e9:7f:a0:be:17:11:b5:ee:0c:8e:bd:
5d:c9:96:58:0a:30:9a:a5:f6:04:d7:6d:c0:84:b4:1d:56:a8:
e0:0a:fe:40:e5:3b:ed:b3:9c:b4:d8:ee:44:c3:4c:e3:2b:ff:
26:e4:51:9c:fd:27:55:34:51:91:35:4e:e7:e4:35:98:4c:9e:
dc:77:c0:e9:1a:b7:eb:a0:a8:a5:44:70:62:20:eb:24:d4:9d:
7e:63:75:1c:bb:db:d1:54:2b:f9:5d:b5:19:c1:cc:53:9c:62:
71:62:c3:e1:e2:63:81:d5:13:96:58:38:d4:cc:92:cb:8c:b2:
47:af:e1:4c:1f:d2:0c:2b:c2:0f:e4:d6:6c:92:63:7f:61:5b:
cf:77:b5:67:d1:13:d7:74:33:94:b8:22:94:10:fc:37:e3:db:
24:5e:0d:81:dc:18:c4:fc:64:b2:1a:c6:77:4e:5f:48:94:4e:
70:87:07:11:29:02:85:80:05:5f:2f:15:79:ad:25:d4:f8:56:
a8:06:cc:c1:27:ab:38:3a:14:46:b6:8c:39:7d:1a:b3:73:3b:
2d:bb:94:6f:3c:ff:b6:af:3b:d6:45:67:18:6e:3d:64:65:77:
bd:34:56:50:33:6c:4d:eb:65:fe:d3:24:53:46:ec:8f:1f:b5:
b9:9a:98:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:01:40 2025 by rpki-client