Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa
File: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (raw, json)
Hash identifier: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=
Subject key identifier: C6:72:54:2C:FB:FE:DD:BA:5C:9F:80:01:3C:47:BF:06:19:DB:D0:DB
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 019739F3A3EACE7420DE0E7D8DEAC83663D0
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa
Signing time: Wed 04 Jun 2025 07:59:17 +0000
ROA not before: Wed 04 Jun 2025 07:59:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209183
IP address blocks: 185.103.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:f3:a3:ea:ce:74:20:de:0e:7d:8d:ea:c8:36:63:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Jun 4 07:59:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c672542cfbfeddba5c9f80013c47bf0619dbd0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:b2:0f:7e:a4:55:1c:fe:20:35:56:12:6c:
1e:9d:18:bd:0e:73:c0:aa:90:77:88:a1:35:6c:c9:
ec:2f:3c:76:21:84:cb:de:16:06:d2:bb:09:df:78:
52:90:4d:bc:08:6f:c0:cc:53:ae:7a:53:28:c4:7c:
2c:88:18:c3:23:9f:f1:99:3f:09:53:4d:ef:bb:05:
f8:ff:f1:3e:36:92:ce:45:1a:67:c5:f0:96:7a:98:
53:c1:37:e6:4b:49:5b:6a:c9:a0:76:f3:75:d8:ee:
90:41:c1:e6:cf:bc:1f:d8:63:55:60:c5:57:88:f3:
5a:66:93:81:60:08:b2:e2:72:8c:d1:75:57:69:ab:
4b:a2:d8:d9:f7:14:a5:ba:24:21:02:46:54:b5:fd:
52:d3:5a:6e:04:32:82:b6:de:8a:7d:7d:31:6b:51:
35:b5:03:c9:cf:0e:d1:da:4d:a0:9a:67:ad:2b:a5:
ab:ba:9d:ab:c3:bf:b3:3c:7f:a7:0a:97:0e:b9:2e:
e2:6c:d8:18:50:80:96:e0:6f:9a:a3:72:15:50:ce:
da:5e:49:58:8e:d7:68:9e:e6:8a:ef:c8:cf:ba:82:
d0:2c:d5:69:5f:9d:da:cb:3c:70:4a:96:89:d0:57:
5d:a8:11:a5:4c:cf:8c:f4:5c:fd:0b:87:4a:fc:58:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:54:2C:FB:FE:DD:BA:5C:9F:80:01:3C:47:BF:06:19:DB:D0:DB
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f8:f1:57:20:1e:bb:a9:27:70:16:71:f8:3c:86:41:90:72:
ed:c8:fc:60:75:15:e7:e5:88:ef:a0:0b:98:6c:ca:07:19:f0:
f5:c4:3c:e0:46:10:af:58:df:cd:39:3f:9b:ab:13:e0:f5:8b:
25:cf:e6:bd:0b:34:c0:db:b4:e3:1f:95:91:62:84:e3:51:8a:
29:78:92:d6:93:e6:9b:1d:34:d2:3e:29:be:0f:7a:d9:86:44:
9c:cc:4c:45:87:48:24:a4:db:c6:a5:aa:bc:4a:fb:86:44:91:
fe:a7:0d:67:03:36:1c:c7:7f:81:ff:ae:db:d4:aa:0f:77:80:
8f:1f:25:1b:1b:05:ca:89:a8:35:8d:4f:5e:28:12:85:31:bc:
48:53:4c:dc:84:c0:df:67:c6:ef:5a:94:8b:ee:ef:0b:b5:0f:
76:a9:73:aa:13:00:8b:c5:d6:62:b5:a7:0b:56:29:12:cc:b7:
6c:ea:b3:fb:3b:bc:bf:1d:27:2b:f0:97:52:7c:41:f2:d7:36:
a3:d7:8e:e4:21:5f:0b:99:9e:f7:96:97:59:05:77:ba:69:2f:
b1:06:4c:ae:c7:85:e7:a1:64:b0:17:e6:a9:5a:c0:59:90:3c:
d9:45:c8:68:84:50:2a:16:a1:8a:70:7b:a8:e1:61:81:f7:86:
be:a4:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:55 2025 by rpki-client