Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa
File: cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa (raw, json)
Hash identifier: Hy1jxMcmkJjc7Rfw6ZAzEMKDTAjkCP2ewVbsibxOPr4=
Subject key identifier: 70:31:0B:21:88:7F:70:3D:21:D4:B9:D1:59:A5:B8:02:0D:16:A7:61
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 01992DA30C381DDBA1A6081A5CA579703022
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa
Signing time: Tue 09 Sep 2025 08:41:24 +0000
ROA not before: Tue 09 Sep 2025 08:41:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 78.153.131.0/24 maxlen: 24
78.153.139.0/24 maxlen: 24
78.153.144.0/24 maxlen: 24
78.153.150.0/24 maxlen: 24
78.153.151.0/24 maxlen: 24
78.153.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:a3:0c:38:1d:db:a1:a6:08:1a:5c:a5:79:70:30:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Sep 9 08:41:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70310b21887f703d21d4b9d159a5b8020d16a761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:4e:80:e0:5f:20:aa:e8:65:1e:3d:d0:6a:
ca:4f:84:d0:e4:cb:f8:5a:6e:59:16:57:d4:53:14:
76:2f:82:d6:0d:0a:42:ca:5b:f0:8d:98:0b:26:ac:
1d:18:9f:25:5b:20:3e:59:6e:3c:14:1d:8b:d6:f8:
4c:99:91:ac:10:13:30:10:b4:2f:18:9b:33:2a:6f:
89:80:c2:0f:ec:a4:81:4a:24:a4:8d:2a:ba:5f:d6:
47:78:df:a8:84:3f:d4:c8:d3:75:e9:a1:13:31:85:
c2:4d:47:63:03:0b:d8:c2:4b:27:ac:af:0b:0b:f8:
0f:65:89:2d:e0:15:6b:ad:c6:90:e8:c7:02:7d:48:
b5:b8:59:34:4a:a3:1e:07:da:b5:2c:01:64:c6:c8:
cc:0e:88:3d:77:00:42:d8:f0:aa:15:9f:aa:db:3c:
0c:59:27:ab:fa:e0:ab:44:92:fe:69:4f:64:f5:85:
cf:7a:ae:a3:ea:d4:44:4c:88:97:70:73:a6:27:05:
d6:5a:13:78:10:8b:05:bc:37:c1:b1:8b:86:30:5f:
f1:fa:a6:46:96:b4:10:64:54:a0:5d:3f:f0:a2:6b:
02:76:be:24:71:af:a0:bb:eb:bb:2a:dc:e2:72:42:
5a:97:f0:0b:6b:4c:e8:02:0e:c1:1c:a0:11:e8:c1:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:0B:21:88:7F:70:3D:21:D4:B9:D1:59:A5:B8:02:0D:16:A7:61
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/cDELIYh_cD0h1LnRWaW4Ag0Wp2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.131.0/24
78.153.139.0/24
78.153.144.0/24
78.153.150.0/23
78.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ba:48:04:60:1f:17:79:54:bd:8a:e5:7c:60:f2:3e:08:6a:
41:f0:0c:31:f0:f0:a8:d3:e6:2b:ee:90:ee:0e:ec:33:63:f1:
cd:ce:10:35:2d:c6:01:08:7f:88:b0:fc:75:4a:2e:4c:3f:6e:
7d:68:d7:77:ad:b5:df:bb:5a:22:8b:42:1c:3c:c5:8e:85:8f:
a1:0f:e2:a5:93:fd:84:e1:df:9d:46:c3:64:49:76:19:7f:cf:
4b:8e:76:ab:44:cb:42:0d:bb:87:65:b4:15:1d:a5:71:ea:57:
8a:6b:6f:af:41:76:d7:72:ac:76:91:42:4e:66:78:1b:b1:49:
e3:3d:2a:b9:3b:83:8d:51:00:98:3f:0a:81:57:e4:b1:9a:83:
46:76:4f:c4:41:40:3e:70:07:e6:a4:fd:98:9e:9e:c7:14:df:
e6:97:95:3f:50:ff:71:be:f1:50:f7:e2:3d:71:57:df:2d:72:
76:66:19:ff:17:9b:6b:46:2a:ef:bf:cc:c6:75:e9:38:b6:8a:
fa:4e:a1:32:e5:d1:36:b3:4b:b9:03:20:40:22:0c:99:7a:39:
7d:f8:76:ec:f4:98:0f:49:35:c8:46:90:de:86:88:68:83:ff:
67:e1:25:33:87:e9:58:b1:4f:00:e2:1b:08:5b:9e:fb:73:db:
3d:98:32:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:42:32 2025 by rpki-client