Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa
File: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (raw, json)
Hash identifier: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=
Subject key identifier: 46:96:0F:47:51:A2:FB:82:1A:94:3B:CC:FC:52:77:12:22:44:C9:20
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 0196D5B80A0139DD907012BC5F3EE665AF74
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa
Signing time: Thu 15 May 2025 20:52:10 +0000
ROA not before: Thu 15 May 2025 20:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57008
IP address blocks: 85.198.88.0/22 maxlen: 22
85.198.88.0/24 maxlen: 24
85.198.89.0/24 maxlen: 24
85.198.90.0/24 maxlen: 24
85.198.91.0/24 maxlen: 24
176.123.180.0/22 maxlen: 22
176.123.180.0/24 maxlen: 24
176.123.182.0/24 maxlen: 24
176.123.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:b8:0a:01:39:dd:90:70:12:bc:5f:3e:e6:65:af:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: May 15 20:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46960f4751a2fb821a943bccfc5277122244c920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8e:0a:ad:1a:43:64:85:2a:37:03:0f:00:f1:
e6:63:30:d4:ef:f0:46:fc:85:c3:0d:6b:48:dc:13:
76:f0:17:da:e5:0f:fa:1d:65:5c:ed:61:1a:d1:0c:
ac:c7:a2:c8:80:07:7a:67:4a:03:84:a1:bf:54:e0:
bb:f9:98:e9:75:41:b2:7b:c3:d4:16:0a:72:86:76:
c5:6a:27:da:7d:47:1f:3e:b9:6a:36:dd:4c:27:0d:
98:8e:c7:55:5c:ae:8b:d7:ed:36:7a:7f:bb:af:c7:
c5:2c:d8:07:77:72:43:c4:a4:94:d7:e9:98:01:06:
2f:1e:86:d3:8d:65:95:86:9c:ec:70:d1:1d:09:97:
e1:9b:b0:9c:f7:63:6a:e8:de:9e:07:e1:2f:62:31:
79:99:05:3e:eb:44:bb:dc:bc:2b:34:31:bb:34:f2:
f5:68:d3:9a:15:f7:76:82:d0:94:9e:83:bc:87:4f:
bc:e4:a8:05:05:ba:a3:ed:d9:2d:67:ca:5f:02:58:
fe:5f:cf:af:0b:6f:8a:dd:37:e4:33:76:34:38:66:
05:bd:65:ec:3e:23:bb:1e:c8:46:2f:ff:7a:f9:02:
e9:e8:a3:77:1b:67:9d:2c:f2:95:60:c2:fd:80:28:
6a:74:e1:e0:82:50:a9:a7:bb:a5:35:89:13:34:3d:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:96:0F:47:51:A2:FB:82:1A:94:3B:CC:FC:52:77:12:22:44:C9:20
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.88.0/22
176.123.180.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:0e:92:9c:32:1c:4d:0f:b5:de:2b:66:70:da:c1:a3:c5:c5:
a2:44:0b:c5:02:de:54:cb:b0:4d:e7:01:a0:7b:1d:31:37:12:
e7:f1:50:c1:70:2a:a5:54:5a:20:5e:50:8e:da:e3:cd:08:0f:
1f:20:0b:ba:6b:94:8f:c8:da:24:71:cd:ea:bc:c9:03:51:65:
b4:cd:b0:9e:8a:f7:8f:a6:f0:75:cc:74:35:fa:22:26:2d:9b:
a1:02:a4:0b:43:2f:96:c9:06:c1:04:0b:63:26:29:9b:f8:df:
56:9d:b5:17:e9:3e:dd:fd:0f:8e:6d:6a:9d:a8:fc:2b:5f:84:
82:91:45:36:67:89:fe:31:c4:82:6c:01:34:0d:c2:8b:83:52:
b6:6e:b7:be:08:48:a1:c3:28:f4:2d:b5:9f:d7:29:6e:06:cb:
ad:db:3c:b0:05:6d:ee:44:25:0d:bc:52:d1:1a:0b:f9:9b:49:
7b:a0:ee:36:0b:17:dc:32:25:c5:c0:35:a4:bf:a5:96:94:e7:
7f:54:22:ad:6e:f8:f0:70:84:bd:35:c4:bb:18:9a:25:d9:87:
7f:c0:79:60:99:9d:de:7d:2d:60:4c:ac:7c:99:6f:7b:57:c5:
6a:ab:05:2c:bb:90:03:c2:29:02:9d:89:e7:c0:7b:26:3d:f3:
30:14:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:46 2025 by rpki-client