Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UTvlEctCX94rChi32WFyClT5ooc.roa
File: UTvlEctCX94rChi32WFyClT5ooc.roa (raw, json)
Hash identifier: qqnQHVt6wHPz6dqS7paRO8CMRe0C1kFB5p1DSj2ZQuw=
Subject key identifier: 51:3B:E5:11:CB:42:5F:DE:2B:0A:18:B7:D9:61:72:0A:54:F9:A2:87
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 0197564B316D2A1B7D87CA2F33CD7F5D587A
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UTvlEctCX94rChi32WFyClT5ooc.roa
Signing time: Mon 09 Jun 2025 20:04:17 +0000
ROA not before: Mon 09 Jun 2025 20:04:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44654
IP address blocks: 37.252.208.0/23 maxlen: 23
37.252.208.0/24 maxlen: 24
37.252.209.0/24 maxlen: 24
37.252.210.0/23 maxlen: 23
37.252.210.0/24 maxlen: 24
37.252.211.0/24 maxlen: 24
37.252.212.0/23 maxlen: 23
37.252.212.0/24 maxlen: 24
37.252.213.0/24 maxlen: 24
37.252.215.0/24 maxlen: 24
109.205.8.0/21 maxlen: 24
109.205.8.0/24 maxlen: 24
185.36.124.0/22 maxlen: 24
185.36.124.0/23 maxlen: 23
2a02:d8::/32 maxlen: 48
2a02:d8:8::/48 maxlen: 48
2a02:d8:9::/48 maxlen: 48
2a02:d8:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:4b:31:6d:2a:1b:7d:87:ca:2f:33:cd:7f:5d:58:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Jun 9 20:04:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=513be511cb425fde2b0a18b7d961720a54f9a287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:9b:16:eb:54:e1:c7:c2:7b:4a:8b:45:31:
c3:a6:69:2f:31:07:d2:f7:23:51:6d:29:9c:56:ad:
3e:c0:43:5e:73:68:93:6a:c1:30:39:6f:f1:b7:87:
4f:7f:66:65:28:e6:6a:cb:4f:a7:7f:e2:b8:45:be:
84:92:fc:2a:ab:78:0d:8b:eb:0e:f8:dd:3c:12:bf:
6f:12:2c:c0:f4:17:ff:e6:0f:08:de:f4:99:db:90:
a6:6b:7f:f6:12:11:d6:cd:7c:57:63:a5:d4:54:5a:
d5:ad:47:70:c2:ff:4a:0b:d7:82:cc:66:eb:1c:30:
11:92:3d:4c:fb:a1:4a:c5:9c:52:84:48:d4:f8:f0:
5a:54:27:3f:db:bc:60:f4:57:90:35:b2:12:e9:fc:
41:ac:68:e9:3e:a6:65:9f:ec:e2:d5:fe:2c:3d:7e:
e2:b6:b9:0b:c5:2c:21:d5:69:15:0d:d1:51:08:b6:
a8:be:89:dd:ef:14:d3:bb:10:6e:ab:06:21:2b:87:
d1:78:e2:61:59:45:96:3d:12:51:06:e3:ba:fd:bc:
ff:c3:e8:3e:f3:3e:46:43:9b:9c:b0:c4:a2:79:d0:
70:94:18:42:f6:8d:77:98:35:ef:05:50:46:2a:09:
f2:e5:0c:bf:d4:67:65:4b:f1:74:4a:be:af:f6:37:
19:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3B:E5:11:CB:42:5F:DE:2B:0A:18:B7:D9:61:72:0A:54:F9:A2:87
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/UTvlEctCX94rChi32WFyClT5ooc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.208.0-37.252.213.255
37.252.215.0/24
109.205.8.0/21
185.36.124.0/22
IPv6:
2a02:d8::/32
Signature Algorithm: sha256WithRSAEncryption
47:00:c0:f4:1b:5c:3f:20:3f:f1:71:6a:19:28:c3:72:f9:3e:
78:85:50:96:f9:57:c7:ac:c6:8b:66:aa:34:0d:bf:2a:61:b1:
c2:bd:60:a5:f9:64:86:64:c2:dd:c8:6c:95:a1:21:67:16:18:
82:ee:4a:60:55:82:ee:f9:fe:eb:ef:9a:c2:49:14:23:53:e1:
c6:7f:a5:95:7f:cd:d8:02:74:99:f6:76:de:f6:fa:9f:1c:ec:
71:9a:1f:14:02:55:a7:c6:38:25:65:6d:a1:7a:cc:78:a1:84:
b0:1d:20:3a:86:2f:3d:24:56:08:bd:3a:01:ac:ca:89:e6:4d:
3f:a1:a6:06:ed:33:e6:25:88:fc:b1:22:bb:8c:6d:6b:d5:9b:
b6:b7:1a:77:a9:92:a0:77:d1:50:07:a9:3f:b4:73:5e:43:df:
57:69:cb:07:0f:c8:8f:ce:33:cc:3a:6e:c5:f3:a4:3a:e7:e6:
44:66:d9:79:19:9a:1d:50:f7:7f:8c:fe:13:47:41:35:d7:99:
2f:ba:ba:ab:d5:b0:a9:e6:68:31:72:b8:70:e0:94:3b:f3:d2:
71:ae:d9:51:25:4d:29:1f:73:91:57:6f:0e:9f:00:fb:42:82:
26:76:50:fc:df:69:f7:d6:0c:0e:3f:fd:ae:78:b7:ae:c4:4f:
66:0e:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:35:41 2025 by rpki-client